
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier: FxidBHTQ64ADH00PG/PBhPSZUmsz2Zb15NlhR2PucWw=
Subject key identifier: 50:F1:D0:ED:93:91:72:15:29:12:E5:5E:B5:7A:50:EF:0C:85:ED:5C
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial: 019D3A547414CA1D12A0C9B202499A9D0714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:01:46 +0000
Manifest this update: Sun 29 Mar 2026 16:01:46 +0000
Manifest next update: Mon 30 Mar 2026 16:01:46 +0000
Files and hashes: 1: 1-uapFsJGKC_fK5bX4vidKDJn0HE.roa (hash: GOVn0PIk7Y5SfmSrA/v+/c91vfTOsMUpyn3e33Mi8Rk=)
2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: +m8jPs/ZDYO+ZM+2j+8yqwhjgTrqyJpFxtMY3529atQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:74:14:ca:1d:12:a0:c9:b2:02:49:9a:9d:07:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
Validity
Not Before: Mar 29 16:01:46 2026 GMT
Not After : Mar 30 16:01:46 2026 GMT
Subject: CN=50f1d0ed939172152912e55eb57a50ef0c85ed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:40:72:00:03:c2:c6:65:9e:d5:45:c7:fe:
da:5b:82:cf:d3:c1:a8:7e:ef:6e:c7:f6:d5:7f:be:
47:54:56:35:ee:d4:59:40:4f:15:35:a5:8b:6e:b0:
34:e8:49:38:1d:eb:bf:55:0b:d0:9f:e9:41:4c:ee:
f0:f7:b3:e0:ca:83:3d:e2:ca:57:e0:3a:01:ff:88:
57:76:d1:fc:2b:cf:01:f6:db:1d:63:16:b4:3a:dd:
82:e4:61:6a:6e:a8:81:8b:3c:10:9f:2f:bc:9d:6f:
0f:c1:3f:3c:52:aa:ae:4d:15:8d:41:e3:47:ea:d9:
a1:b5:ec:3e:83:b2:2e:75:62:fd:25:a2:25:76:c5:
79:ed:98:7a:af:42:97:20:78:f1:96:31:02:b9:4a:
40:05:94:6e:28:b3:81:8e:d3:fe:3e:70:04:74:1e:
ac:57:45:af:95:b6:ee:4c:4b:bb:fc:0a:c3:64:22:
c0:1d:50:8a:2d:88:52:36:19:ec:9e:62:80:ca:20:
1e:9e:1c:0f:aa:5f:94:da:76:41:64:57:50:b9:05:
63:58:f6:61:cd:82:ea:42:b8:fc:04:88:3c:65:70:
4f:4e:bd:2f:13:45:91:f2:ad:ca:06:6f:c1:41:01:
19:3d:4b:6d:0b:78:70:91:36:d5:25:e1:5d:31:48:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:D0:ED:93:91:72:15:29:12:E5:5E:B5:7A:50:EF:0C:85:ED:5C
X509v3 Authority Key Identifier:
keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:b9:ee:a7:c0:6d:ea:f3:c8:c6:2d:02:fe:d5:81:08:29:
ae:43:9f:a5:8a:3b:6c:7d:cb:fb:99:1b:ec:fb:e7:7d:7f:19:
d0:7a:5f:26:0e:4f:fc:31:8a:e7:ef:a2:73:d5:0f:a7:fa:39:
55:c2:48:dc:83:50:c3:81:e6:54:9e:03:3d:58:ad:e2:77:25:
7a:83:0c:c6:b9:94:35:fa:ad:8a:92:2b:fc:54:d4:ee:03:4e:
8b:68:e8:20:63:99:1d:f7:06:6c:34:56:77:92:56:51:69:7b:
55:92:3d:b4:bd:d6:09:91:80:81:70:ef:23:ed:ad:ea:65:1f:
68:c9:a6:44:c8:95:98:9c:0a:b1:4c:e0:40:7a:02:18:cf:c9:
9e:26:62:4d:0f:d5:92:40:fb:07:41:91:71:33:a2:c2:8a:6e:
11:24:32:3b:05:ff:72:cd:26:87:77:22:b5:be:ae:2c:95:fb:
c5:e4:8f:9f:95:64:43:e4:ad:a3:8b:dc:ed:26:dc:84:1b:64:
af:ee:4a:0b:21:33:46:b2:81:f1:fa:71:fe:37:9b:85:17:b7:
25:2e:f4:54:84:ca:05:ea:ea:e8:80:10:50:93:59:f8:4c:91:
1d:b4:0c:f7:3f:4b:40:ea:99:fd:81:87:e3:e6:50:73:73:88:
c2:c0:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:38:00 2026 by rpki-client