Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File: TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier: 7A/VThglseNa8p+57JlMsaY2OpVMwM97iQyNJLJ7ZAo=
Subject key identifier: 2F:B8:9D:B5:9A:6E:E6:7D:DD:A1:EC:7F:F9:A9:36:89:E8:A5:00:1E
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 019D382E7D6B919DA8005CA5216E6FB4E1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: KrhAoQ6haRCPpezmBHlWuHJygZpsc2EPYWgPV4A/rWs=)
2: bsiJMh925Q6yXtQJa1CQ5jNihts.roa (hash: X9V/B7+nYNlAPiuflw59MNnI7H3EmEftfAgXQa1P4vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7d:6b:91:9d:a8:00:5c:a5:21:6e:6f:b4:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=2fb89db59a6ee67ddda1ec7ff9a93689e8a5001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:5f:10:a2:66:26:0c:1d:41:53:75:72:ee:
f9:c4:c6:ec:36:7c:f4:72:59:93:29:a6:33:ad:9b:
80:e7:22:d8:bf:c7:13:60:6b:a3:91:21:11:a6:6c:
c2:f2:3b:f4:31:85:f8:77:f1:ff:b3:82:a1:be:03:
69:04:03:6d:4e:17:95:7a:3d:1a:53:7f:63:c1:69:
e6:14:ed:e2:51:81:80:b7:c8:b8:5a:03:fd:5f:f8:
ba:f7:8a:84:f2:00:9f:a3:b8:bc:72:a5:ea:40:bb:
a3:78:39:56:71:b9:0a:63:03:71:7f:bf:f6:1c:d0:
d4:7d:7d:1b:a1:4a:bb:3b:39:4f:3a:95:7f:3a:78:
0a:78:2b:6b:7a:45:02:39:1c:d2:81:3f:b4:f8:1e:
8a:58:8d:dc:78:cc:37:75:5f:9b:a5:83:f1:c2:1f:
6b:bf:b3:a1:49:2c:6f:83:4c:a6:93:97:9f:7c:27:
2b:45:52:52:f5:cd:25:db:79:7d:53:1d:00:fe:0f:
e8:1d:e2:39:9a:77:1e:e9:58:a9:dd:f4:39:06:b8:
84:78:c1:84:19:72:7e:f4:51:80:d7:80:68:15:e6:
1f:f0:55:ee:55:e0:98:9f:70:b2:4e:93:57:66:e1:
b6:cf:ab:54:23:2b:50:e1:11:62:8b:6a:73:8f:ac:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:9D:B5:9A:6E:E6:7D:DD:A1:EC:7F:F9:A9:36:89:E8:A5:00:1E
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:07:09:df:35:d0:76:a4:f7:98:68:ce:3f:06:39:43:b8:
95:bc:71:ca:e5:b8:8d:a1:a6:f0:e7:76:9e:c8:2d:78:fd:fd:
b7:da:68:5d:49:37:98:48:f1:d3:45:21:57:01:be:20:20:c7:
1d:60:96:53:5b:00:3c:2e:d5:69:87:8a:14:fd:e9:f9:fe:a0:
42:ff:2a:dd:66:78:a3:13:c7:6d:5f:f6:df:2f:ac:db:bb:78:
b7:dd:4e:62:f5:a3:3b:a0:dd:50:24:b2:94:52:59:d3:55:ce:
d2:11:af:51:17:bb:8c:e3:02:da:a7:fd:45:a8:16:de:b8:cc:
1e:f0:d9:b3:d2:5a:c4:e6:de:87:d9:6b:4f:cf:af:8d:5c:c4:
ca:84:84:d2:eb:26:d2:bb:cb:8d:2e:23:f6:9e:7a:bb:71:b3:
a6:29:38:17:06:33:09:8b:9f:fe:a8:cd:e2:ba:ec:ae:a3:7d:
ef:31:5b:3f:28:1f:42:54:22:c5:76:d9:c0:0e:0d:0a:c2:f5:
7b:3c:a4:39:d7:4a:94:6b:7f:75:97:9f:02:ed:39:d8:8a:52:
e7:0e:a3:18:fa:0d:54:21:47:70:21:26:b9:83:ca:13:0d:1f:
cc:b4:55:1b:8f:87:2c:3f:03:07:3c:03:f3:bf:77:41:38:37:
c7:e3:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client