Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: QqshBHeB+SHoCp6o9CSOBydOLzSTRUyr0b1nsgrWjZo=
Subject key identifier: 5C:79:3D:EE:E4:D7:ED:EA:42:EB:9D:3E:62:B9:01:FF:ED:2D:52:88
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 019D39409477039943BACDFE7A1F7630A09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 048E
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: JrRLBu2iVp/ezb+/Pobs4cgsBPnqy4Ch1pygbDwPlLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:94:77:03:99:43:ba:cd:fe:7a:1f:76:30:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=5c793deee4d7edea42eb9d3e62b901ffed2d5288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:7c:8b:b4:44:af:b4:b4:e7:fb:d9:1b:99:
49:fb:38:c5:22:78:a0:ec:f1:1e:08:27:6a:b4:b8:
ec:61:4b:73:79:21:d5:20:28:41:73:05:65:f6:b5:
08:af:d6:ff:6d:69:aa:8a:c2:9e:19:c5:48:35:67:
57:3e:cb:b5:67:1b:61:13:09:a0:a0:4e:a4:7e:18:
bd:33:0f:f8:41:d4:1f:5e:ad:31:6c:c5:96:ba:98:
ff:19:b0:8c:8b:9c:a0:c5:fb:be:21:4d:f6:7c:1d:
dc:a7:b2:6b:e5:21:fe:de:fb:f9:2c:4f:75:cb:d9:
a9:ad:90:21:30:8f:28:f3:d6:ff:cd:71:84:9c:10:
f8:ec:8b:18:1c:db:79:17:a5:a0:33:dd:d2:89:dd:
ab:ae:58:3a:e1:83:df:93:03:49:21:7e:28:03:c1:
20:69:57:fb:54:b5:d2:92:ac:84:07:41:e9:fb:b3:
e5:2e:93:51:31:02:37:bc:d4:32:b5:a6:81:da:65:
f4:47:86:83:8b:92:83:de:1c:b6:97:45:ea:3c:2c:
b1:07:d0:de:f2:12:83:0b:7d:b3:52:7f:99:d0:68:
23:65:5f:1d:3d:02:e2:f3:e5:91:9d:06:76:68:38:
81:0a:21:6a:09:dd:47:1d:a5:98:cc:ca:f1:22:72:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:79:3D:EE:E4:D7:ED:EA:42:EB:9D:3E:62:B9:01:FF:ED:2D:52:88
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ab:9a:e4:50:07:cb:18:fb:43:06:7b:33:0f:c3:f8:15:92:
5e:c3:59:9e:57:80:4e:e5:f6:06:6e:b3:7f:f9:83:17:11:20:
fd:ac:0b:ab:bd:81:19:e2:30:48:76:4e:12:8c:d4:c6:1a:e2:
17:84:8a:10:53:c7:4b:1f:a8:ed:ca:f3:e8:c6:84:f7:f5:e8:
5e:15:c7:84:a6:40:a5:1c:25:5f:3c:36:71:c1:bf:e3:03:8c:
66:91:8e:49:55:48:e0:d4:08:d5:c5:40:77:31:ec:b8:95:8a:
82:fe:c4:4c:b1:4b:8a:b0:a2:b2:b5:c2:6d:51:3e:13:15:94:
0f:f1:6f:e8:29:20:b3:0e:ba:18:dc:f1:fd:b0:b9:50:bb:8a:
25:15:7b:dd:c4:25:73:b9:d4:91:16:2b:6b:92:d2:95:ae:32:
99:63:0c:e3:09:3f:a1:4a:0d:52:b9:0f:48:ee:44:8b:a4:ce:
86:ff:89:ea:f4:90:72:ed:35:d1:53:be:dc:45:20:81:49:04:
75:83:d7:64:60:a4:b6:b9:05:26:a6:57:24:c6:71:d1:13:42:
b5:f4:44:6b:ac:cf:2b:d9:63:5f:5c:4a:ea:67:6d:0c:d1:95:
27:0d:ee:8d:37:22:72:f3:b8:73:0a:e5:f6:13:3c:db:2f:cc:
4c:90:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:29 2026 by rpki-client