Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: mBtPb4XD3UDFb0q3tXtiwgTLIyLTS5MrOI9rPDn3NCI=
Subject key identifier: A1:B0:D2:56:BC:26:46:F6:3F:83:4F:43:86:FD:20:07:4E:0A:69:7A
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 019D27046E59BA7D4FB7CE32F47E5B92A1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 0968
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: HTZfcutc15IeuaiL4rVHOYTbWBBlQ3/jvgytj8KhaJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6e:59:ba:7d:4f:b7:ce:32:f4:7e:5b:92:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=a1b0d256bc2646f63f834f4386fd20074e0a697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:9b:c1:3d:58:10:1e:a0:33:26:0c:c9:24:
5d:76:ff:e0:c1:98:ee:15:b6:95:32:b8:45:27:6c:
6f:f6:8d:8e:89:ae:30:2d:02:07:ee:25:b1:a8:d6:
cb:33:d6:ba:69:41:90:c6:57:b5:65:7d:29:aa:72:
d3:f5:f1:e2:f3:83:93:0d:6c:f2:79:ec:75:79:18:
57:cb:61:a0:f4:87:b3:f3:9b:bb:64:d5:5a:dc:f4:
a9:ed:2c:36:d0:91:56:c5:39:1a:ca:5c:ad:fe:65:
6e:45:f0:f5:39:8c:39:86:58:08:1e:a2:2a:01:4c:
fe:59:14:38:e6:1c:59:a7:03:d5:51:4e:c2:bb:d3:
fe:69:5e:40:da:31:b4:a6:9e:96:3c:18:b1:65:8b:
aa:56:1a:98:ab:09:59:d9:72:f5:a8:ea:87:61:91:
b4:04:58:ef:25:e5:04:b8:45:f9:31:03:96:ab:35:
6b:77:1d:90:ab:e9:c7:a8:74:e8:22:99:68:41:aa:
f5:38:79:a8:2d:c2:d6:d5:1f:80:80:53:5f:20:53:
42:72:f3:9d:16:31:4f:10:1a:03:5a:f3:d0:3e:f6:
b5:fb:89:d9:7f:66:86:90:54:7f:7b:21:ad:4d:41:
f3:02:59:38:b3:b8:d9:2b:97:04:66:b9:76:b3:88:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:D2:56:BC:26:46:F6:3F:83:4F:43:86:FD:20:07:4E:0A:69:7A
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:bc:38:3d:3f:40:94:6b:ff:95:5b:2c:b2:df:b0:d1:e1:
2c:00:a5:f0:25:e0:ec:1e:42:82:1e:35:e8:49:85:b7:fe:05:
ea:4a:c9:78:a1:43:8a:01:51:c1:80:59:b7:27:9b:2b:04:d9:
ea:d9:81:99:13:c2:42:de:17:d9:82:cc:c5:81:6d:ad:6b:6d:
93:45:2f:37:5e:ad:5f:8a:9c:92:9a:0b:84:3b:75:ca:fd:15:
50:0c:a2:ab:f5:39:30:73:3e:3b:98:fb:a3:34:61:d8:1e:4a:
3e:c1:68:58:f2:ea:07:e5:cd:c7:36:9c:55:9b:7e:fa:05:12:
bb:f6:f2:ce:1c:77:62:1a:af:7d:92:12:c4:a7:28:16:14:b6:
59:58:a4:db:4f:e5:33:ed:fc:f0:ff:2c:f3:c9:e6:e9:5f:0d:
60:53:58:fa:e0:1e:7f:0a:69:e9:80:c0:82:92:86:be:a8:d0:
2a:7c:78:be:6b:4c:42:33:96:5e:60:d6:c1:50:5e:54:60:ca:
f6:a1:73:10:fb:3b:9d:72:fc:68:49:03:3e:48:46:8a:9c:42:
0e:3b:59:da:6f:e7:70:2f:b1:23:c1:65:75:a9:bd:0a:75:2d:
2e:04:1a:32:7e:eb:75:ae:35:6e:2c:02:0f:e7:fc:5b:f6:07:
31:8f:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:26 2026 by rpki-client