Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
File: TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft (raw, json)
Hash identifier: iVLupc3yrKGGt/8niR6wpJLwRqZappn8R0+kXdn480U=
Subject key identifier: CF:BC:24:5C:97:67:28:F4:81:56:C9:FC:99:3B:66:D5:8D:7F:2D:B2
Authority key identifier: 4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
Certificate issuer: /CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Certificate serial: 019D269614E98E60D7333CE222136CED7E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
Manifest number: 022C
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl (hash: +oeCiGB7yGxj4YYWjF8aZ1kMIdPsbxfRQ56JcyJ0X7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:14:e9:8e:60:d7:33:3c:e2:22:13:6c:ed:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2c2453d00791cff1332fa71cfb5da36aa00a0a
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=cfbc245c976728f48156c9fc993b66d58d7f2db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:80:31:0c:ea:69:b4:06:12:eb:60:76:8f:
18:ba:46:e6:e3:19:fc:5e:23:b1:e8:68:29:fb:a7:
92:52:51:a9:bf:37:1d:54:aa:cc:19:f7:41:fa:14:
1a:5d:fc:9b:e2:92:58:58:33:a8:c8:76:08:18:31:
3f:dd:1e:b9:a0:ed:5b:15:d0:0b:c7:4d:c3:6c:ed:
08:12:c4:1c:fb:18:d1:e0:9e:43:a7:14:9e:86:ab:
84:87:f4:45:db:d1:34:d9:6e:92:38:ae:08:95:90:
17:52:94:a9:b7:3d:da:5e:82:80:3d:69:2d:04:af:
4a:96:de:31:ef:e8:b7:31:e0:39:3d:f8:df:3d:56:
08:9e:d1:57:50:1a:db:10:83:c3:a1:dd:7a:e5:36:
fc:0f:79:bc:d5:53:e0:93:65:35:a0:1d:72:fe:eb:
72:7c:46:e8:3a:4c:7e:d9:2b:39:04:91:06:b8:6d:
5c:b2:2c:9c:f1:2b:26:88:ab:82:74:c0:7a:d3:fd:
6d:87:de:93:57:a7:bb:82:ca:06:21:e6:2c:d7:94:
6d:75:5c:9a:91:15:eb:db:cc:3f:76:a5:4a:4b:cf:
b2:92:f7:c9:f9:59:bd:d7:53:06:83:14:0e:3d:6f:
90:c3:44:49:db:ef:4c:31:98:c4:cd:c8:b9:50:c6:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:24:5C:97:67:28:F4:81:56:C9:FC:99:3B:66:D5:8D:7F:2D:B2
X509v3 Authority Key Identifier:
keyid:4D:2C:24:53:D0:07:91:CF:F1:33:2F:A7:1C:FB:5D:A3:6A:A0:0A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSwkU9AHkc_xMy-nHPtdo2qgCgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3737f7-1871-442a-8dba-dc2aaaa12003/1/TSwkU9AHkc_xMy-nHPtdo2qgCgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:a0:79:eb:93:88:75:6c:6b:05:5b:0a:ba:05:66:0e:d9:
eb:a4:7c:18:77:4e:80:0d:4d:6b:43:d5:b4:3a:30:94:48:54:
31:35:c3:8d:0c:56:64:e0:50:f0:a9:17:33:da:5c:6e:32:19:
b7:88:47:46:15:ad:e5:e6:5e:e6:1c:d7:9d:b5:40:65:e5:d2:
37:79:7c:33:41:5e:f7:b0:98:1a:76:2c:1d:8e:85:a7:53:34:
94:f4:b1:cc:1c:9e:a6:0d:f9:fa:25:ce:6f:d8:af:03:ba:30:
b4:f0:33:61:ff:7d:7b:cf:de:a6:2b:64:2e:bf:48:bb:b8:75:
83:76:00:f3:4a:5b:55:70:15:ee:5b:05:34:66:fa:ff:3f:86:
34:a4:6b:94:d6:fb:fb:42:80:40:49:63:c6:fc:4b:05:0c:0e:
55:05:3d:7c:39:59:9f:ce:fa:6e:b6:d4:52:2f:54:18:6b:1e:
75:cd:2d:fe:1c:c5:21:bf:95:b0:65:bc:5d:5e:7d:2a:9c:ff:
3e:28:e6:bb:23:ff:3c:65:d0:06:33:66:f6:b7:04:96:7c:7a:
63:f6:0f:7d:b5:6a:46:dc:40:31:8e:71:a1:35:92:32:40:b2:
d1:b2:0d:d9:5c:30:f8:ad:a1:5f:ba:0c:51:1b:b6:35:fd:58:
bc:b1:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:30 2026 by rpki-client