Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: 5vNdKmWxrC/4etLA88NEXfei3YhWd3roKGrdTBP9XeI=
Subject key identifier: 89:B2:D4:31:B3:5F:70:4E:80:C7:59:53:DB:DD:07:EE:96:89:40:22
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019D37525394E76F309FDA34D45E8E4A6C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 02:00:35 +0000
Manifest this update: Sun 29 Mar 2026 02:00:35 +0000
Manifest next update: Mon 30 Mar 2026 02:00:35 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: z4+MaH0Rl3TkjsComE1KkvJpIDBEC6XeKcQ8DyaM9qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:53:94:e7:6f:30:9f:da:34:d4:5e:8e:4a:6c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Mar 29 02:00:35 2026 GMT
Not After : Mar 30 02:00:35 2026 GMT
Subject: CN=89b2d431b35f704e80c75953dbdd07ee96894022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:40:71:a5:ee:82:64:96:20:7f:7f:fd:48:
5e:69:9d:a7:40:49:4c:a7:52:f8:60:69:6a:57:e8:
19:cb:64:b5:5a:26:3c:68:0e:f8:14:c7:69:0b:a4:
fa:da:9e:a9:27:ca:8f:24:f9:d0:e2:1d:41:9a:a5:
f0:4e:7a:f9:7e:7c:71:79:2f:91:1c:1b:6f:27:d8:
97:67:f5:03:7b:12:29:71:79:d0:5f:9f:7a:bd:7a:
1f:d2:c0:49:12:c8:1a:82:a5:e3:a3:5d:23:49:20:
ea:67:ca:88:ee:88:ae:0f:47:b6:95:e5:05:8b:5a:
3e:1a:26:b9:dc:52:32:fe:bf:0a:60:53:65:84:ad:
bb:0c:ed:07:57:b5:21:8e:33:2d:18:4d:e0:bc:b1:
25:8e:e6:f4:ea:1b:12:32:74:1d:1a:11:25:ae:42:
13:b7:f2:70:2d:08:5d:00:80:d1:d6:ba:b4:ba:3a:
69:30:b9:61:7d:74:dd:6b:20:84:af:8e:79:44:b0:
c2:b8:89:03:1c:35:e8:b2:f2:d8:a6:d1:32:bb:f2:
61:f2:c0:30:6b:26:1e:5c:de:63:eb:dc:c9:b0:95:
47:79:4c:34:18:6d:e5:6b:9d:00:2c:a0:2d:39:4c:
4a:a1:b3:d4:b8:cc:57:21:ca:73:e0:2d:99:a1:ce:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:D4:31:B3:5F:70:4E:80:C7:59:53:DB:DD:07:EE:96:89:40:22
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:77:ce:e5:0e:e6:8f:10:ee:bc:6f:a6:e2:cd:c6:34:17:
86:fb:d1:43:a8:f9:54:5a:6f:37:b6:20:fb:b5:00:26:ae:4a:
bd:fc:ea:2f:7c:7a:ad:8c:a0:2e:46:bb:29:77:ae:3d:92:82:
4e:c5:48:13:e6:b1:e9:41:c4:87:31:3f:80:63:d2:07:2e:52:
40:cb:8e:f4:11:11:b9:1b:3e:39:64:9b:64:38:68:07:66:61:
bb:5c:96:d7:cb:14:c5:64:da:bc:21:54:85:97:2d:cf:03:1d:
b6:65:73:89:be:43:2c:ed:81:b4:c4:b1:2f:c6:c0:b3:be:d0:
92:fe:16:d7:6b:85:9b:f8:27:de:de:07:57:a9:a5:e6:9b:12:
10:e7:10:72:0c:9e:24:57:8c:7a:8f:07:0f:33:53:5b:bf:bd:
4f:9e:0c:da:a7:3b:3e:5d:a1:cc:e5:d0:75:a6:38:e5:89:bc:
86:11:23:f5:26:d5:68:6d:1e:8a:36:3c:39:e6:c4:e4:4e:ff:
92:b7:12:b3:f9:36:b2:72:58:01:8e:79:b9:39:47:14:e5:76:
9c:ef:5e:46:10:bb:f8:f6:2e:32:b6:2a:4a:e3:a8:f6:cc:64:
7c:20:18:7a:c7:59:77:31:56:e1:64:53:5c:26:e5:60:0d:38:
4c:a2:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:38 2026 by rpki-client