Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: mVBqRRYA8pPes4nXXaMsKxjJXDNGvZ2SJs/bigTbYUg=
Subject key identifier: 78:A4:B6:7F:05:6E:71:A2:E9:90:90:4D:D9:76:B1:D3:D1:53:0B:ED
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 019D38D3ABB07B26E704889B2189A7C177F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 0980
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: UXpeyLIlK0L52nsHMZZbvXQSQR0KZEX/T4E9NXlvUs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ab:b0:7b:26:e7:04:88:9b:21:89:a7:c1:77:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=78a4b67f056e71a2e990904dd976b1d3d1530bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:bd:ef:46:d0:db:81:2e:78:49:6f:67:70:
bf:7b:d9:6f:fe:2e:57:e1:0c:f2:39:f2:a7:b6:65:
7f:bc:a1:9c:32:71:df:e6:c4:be:a5:14:40:14:d9:
77:86:4f:50:8f:9e:7d:9c:9b:ca:d3:df:19:5a:d7:
c4:b6:12:08:33:0c:72:44:51:f3:e3:30:35:98:a6:
e8:df:8a:9c:e8:27:d2:bf:f3:89:d9:93:01:76:c3:
2b:94:ed:1b:e4:76:d1:37:bb:4d:4e:e5:90:21:dc:
28:c2:49:d7:bd:58:a1:24:d7:e3:9d:75:f5:09:dc:
cb:0b:5f:d1:af:e0:99:fc:42:10:16:e7:fc:fb:6c:
55:54:d4:1d:23:8a:be:f6:92:79:70:e9:f2:e7:a5:
0d:47:1a:b5:22:0c:c6:d2:e1:f7:55:c6:67:2c:68:
9a:44:38:a2:e9:ee:b0:d4:e4:b4:9e:53:de:ff:e6:
08:f4:1c:a9:99:ff:64:84:55:ec:41:c4:48:23:54:
83:60:9d:1b:fb:85:30:f8:01:c7:f9:f9:72:e3:4f:
e9:23:ff:67:f0:b7:dd:da:87:07:de:7e:a2:52:4d:
f9:0a:4a:cf:e0:07:57:4d:50:ef:46:1e:41:ef:a1:
12:d3:37:f4:1f:66:24:53:e7:ae:23:ca:ac:19:9f:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A4:B6:7F:05:6E:71:A2:E9:90:90:4D:D9:76:B1:D3:D1:53:0B:ED
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:10:ae:22:aa:a6:26:6b:7d:fd:03:26:81:23:6e:ea:ae:
fa:f9:89:56:1a:10:6b:97:a6:ac:84:48:bf:8e:22:bf:3c:82:
ea:84:86:9c:6b:8a:7c:cb:9d:c3:8f:05:39:a3:41:5c:52:2b:
c4:49:30:3a:1d:01:01:8b:90:aa:73:ac:5c:13:52:3e:51:e5:
98:e6:8a:25:ba:02:6b:55:c2:4e:0a:9f:b6:23:09:fd:bd:1c:
c4:e8:f9:b1:45:38:68:92:26:72:12:64:9d:6c:2e:8a:c2:ec:
e2:c5:3d:1f:ad:cd:a0:56:ed:95:21:11:ff:18:b1:1b:0c:63:
9f:34:22:ed:fe:a0:64:58:c9:4e:27:03:c6:3a:31:dd:ef:5f:
89:4f:6f:1c:47:58:29:09:95:79:e9:b9:f4:e8:21:e7:97:ac:
49:bb:f6:18:da:82:ab:28:6d:1c:6d:1c:92:de:ff:2c:fa:61:
d5:70:9d:c3:bc:1c:46:85:48:c3:3f:5d:81:e8:a0:be:1a:d8:
85:93:6f:74:d6:09:44:df:a2:df:94:be:a7:f0:cb:55:7a:71:
53:42:41:33:53:e0:e8:9f:01:95:07:d7:24:f0:35:e0:61:bf:
ea:89:2c:e7:d0:b8:ed:8b:dc:ad:50:e2:02:8f:09:9d:ec:eb:
e1:1d:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:46 2026 by rpki-client