Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: SgXVP6QEVY5FDCSke/QOrWlCeBP4YxIfsAeiUvN8HBM=
Subject key identifier: 6E:0D:4F:25:57:52:3A:D5:DA:40:01:53:10:4E:1D:BE:DC:03:EA:BE
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019D24DE4316EB6BDD849B888052F2E24862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0289
Signing time: Wed 25 Mar 2026 12:00:39 +0000
Manifest this update: Wed 25 Mar 2026 12:00:39 +0000
Manifest next update: Thu 26 Mar 2026 12:00:39 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: QQHL8IJbJosVveVCbq2HenVmDkLwCAejLwsdVTKzcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:43:16:eb:6b:dd:84:9b:88:80:52:f2:e2:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Mar 25 12:00:39 2026 GMT
Not After : Mar 26 12:00:39 2026 GMT
Subject: CN=6e0d4f2557523ad5da400153104e1dbedc03eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ea:cc:98:85:a3:08:cd:1a:6f:16:78:28:
e0:a0:de:97:66:ae:a2:d2:d0:a0:7d:94:9d:97:61:
ae:10:e7:c6:1d:40:e9:a3:48:d2:c4:82:74:da:78:
24:6d:27:fa:83:de:28:4e:ee:52:d1:3f:1e:c8:35:
37:4c:31:73:01:67:a4:49:0d:0b:d9:41:f0:6d:4c:
94:80:a4:b3:d1:ef:a1:70:95:23:31:19:a4:61:95:
22:c6:74:f3:93:8a:98:11:f7:5f:11:f7:9a:aa:9b:
5f:45:e5:af:2d:bb:80:8a:45:7d:4d:94:37:e9:be:
bd:d4:ef:75:2d:14:0c:8a:a1:15:ef:1c:2d:f0:c7:
14:9f:cb:5b:ae:ec:be:95:c2:7c:18:69:11:1e:34:
14:75:45:22:92:1a:78:35:bf:96:10:5e:1a:03:cf:
b9:ab:70:d1:24:d9:a1:c4:fd:70:c0:89:dc:30:7e:
bb:67:69:8c:81:0e:0a:da:5d:9d:1b:5d:d3:21:26:
23:e4:28:b4:df:b1:13:e4:d6:77:c4:8b:a3:55:4b:
af:9d:c7:a8:b5:dd:2d:19:61:a0:c5:ea:88:45:f6:
65:09:35:84:c8:e6:60:12:5e:d6:ef:de:76:aa:9d:
ce:1b:df:5f:0f:2f:77:af:15:bc:aa:8f:6e:37:8d:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:4F:25:57:52:3A:D5:DA:40:01:53:10:4E:1D:BE:DC:03:EA:BE
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:97:e9:7e:40:ee:c2:2a:11:8b:de:5f:48:21:ac:02:77:17:
f4:8f:12:38:8a:1d:04:da:80:45:a6:62:17:e8:d9:6b:9f:63:
cb:77:c1:cd:7d:3d:ae:fd:79:a9:70:99:84:17:15:ea:c3:bf:
4c:b2:84:22:a0:c8:e2:ab:38:09:60:fd:65:44:5a:5a:d0:23:
73:97:0d:89:8f:9d:0f:50:4b:4e:e5:3b:5d:34:71:6e:ab:6a:
ca:3d:11:5d:4d:c9:fb:e3:81:22:cf:88:2d:7a:e2:a2:ad:4a:
00:5b:f7:cc:8d:0a:0d:8c:e0:25:b1:6c:ab:23:2a:c0:cc:d1:
00:92:9d:15:7e:fa:62:a2:d1:c3:aa:d5:aa:c3:0f:be:ca:72:
93:27:32:f1:7b:52:38:77:43:8e:21:e4:d6:0c:49:46:27:a9:
a6:23:bb:44:e1:76:18:56:77:a2:f9:19:7e:00:e0:c3:e2:9b:
f6:90:20:ff:3e:18:7c:25:f1:be:21:60:80:fc:fa:44:7d:a4:
73:f4:7e:5e:39:83:2c:8a:b0:03:ad:80:75:b8:79:a9:60:78:
d4:0c:3c:1d:23:ba:a2:52:4b:27:a5:15:ca:8c:37:68:0e:3a:
a4:80:71:d2:9e:2f:cd:69:b3:37:e2:06:76:63:98:b5:41:ff:
3c:0f:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:59 2026 by rpki-client