Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: 3qXrrPxmXyyfnooOMrlAjNPMEwREOuDVmzgc+ghyXAs=
Subject key identifier: DD:1B:9E:DD:FB:3C:BE:01:37:DA:A4:4A:67:A0:8D:03:10:93:2A:08
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 019D38663ADA230A859096E8E80C17AD302D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 0B51
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: nUNdDXYlhxYd4pH0l5mtTjsmjwLV2u+TnZdYAXu4b/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:da:23:0a:85:90:96:e8:e8:0c:17:ad:30:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=dd1b9eddfb3cbe0137daa44a67a08d0310932a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:c4:63:25:67:36:17:96:fb:ce:67:93:e1:
fd:db:58:c1:0e:00:a7:85:32:d2:a4:1d:eb:a9:6f:
96:89:28:b0:a5:c2:b3:aa:b4:5e:f3:b0:f4:cc:f3:
1b:e2:44:e7:3a:91:10:ec:d8:92:f9:bb:9b:36:f4:
d3:46:75:14:16:6e:d8:bc:14:52:3f:22:24:f7:53:
52:d9:3d:ae:0d:5d:b9:c0:59:5f:49:7a:e3:9e:25:
79:15:3f:d5:f2:05:db:fa:86:bf:2b:97:5e:81:1a:
67:28:f3:f6:7a:5b:e6:f8:00:38:03:35:40:b8:6f:
6d:11:41:86:c7:b9:c9:3e:bf:78:71:d9:18:dd:3d:
37:3d:6e:f9:43:7d:e0:8b:a4:87:af:41:9f:94:d9:
a5:d7:76:3b:78:c4:7e:70:91:82:86:a4:c2:73:62:
8c:be:00:5a:5d:94:a9:89:4e:8f:b2:93:56:09:c2:
50:9d:a8:4c:04:1f:1c:be:49:85:eb:60:e4:26:d6:
3c:96:a1:91:bd:36:cb:ff:bd:1c:14:73:9c:80:08:
98:d6:4a:e6:f3:0f:7f:31:8d:cf:7a:3b:52:8f:27:
a9:00:51:05:21:75:d3:31:61:87:91:99:60:68:dc:
02:30:59:25:f5:cc:22:10:15:40:e9:f4:77:05:f4:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:9E:DD:FB:3C:BE:01:37:DA:A4:4A:67:A0:8D:03:10:93:2A:08
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:c0:95:fb:ba:6a:96:9b:03:5a:cd:6a:e0:3c:40:c0:7b:
c2:52:ed:68:78:fa:7e:9f:9c:89:80:41:06:6e:90:ca:09:db:
1d:71:5d:ef:02:1d:6b:cb:65:74:95:41:53:12:a2:aa:b8:e0:
93:c2:05:b6:f0:ff:cc:1d:fa:00:a1:90:fa:89:9c:63:54:b9:
a3:65:b6:29:80:5d:f4:09:06:55:83:e6:e7:7f:92:c4:2c:c1:
48:f2:a8:63:ee:f9:67:96:80:02:56:74:26:d6:7a:3f:cd:84:
ac:b0:f3:07:5f:37:62:4b:01:9f:b5:06:ac:1f:4b:20:8f:a0:
77:8e:5f:30:5c:bc:20:36:2d:8a:d7:a3:5c:7f:90:82:cd:bc:
70:41:bb:e4:93:8c:6f:37:21:67:c8:00:67:7d:27:59:ae:7e:
4d:30:be:3a:8a:e2:a8:f6:02:a6:31:a3:88:5e:c3:e3:37:fe:
2f:74:a3:e5:3b:3d:b4:c5:89:8f:78:a4:e1:2e:ef:b9:b8:9c:
b5:b0:94:ac:3e:fe:e7:49:2e:6d:15:ad:b1:5b:86:ed:bb:77:
ce:2b:29:ae:4d:07:2b:21:4c:06:84:3a:36:8c:d9:44:eb:4d:
2d:d9:32:b7:cc:b7:bf:ee:d8:0a:1f:d5:b6:6a:a0:88:28:2d:
d2:ca:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:36 2026 by rpki-client