Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: 3DuCqO4hUf2vhHyuLcTbBa2HOiRbMNKsOF3NvMCj2JA=
Subject key identifier: DD:DA:D1:D6:C0:AF:89:62:2B:2B:F3:C7:87:6E:D3:14:83:C1:8E:94
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019D270457BB1893B4E43176798F02248D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0FAC
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: yz2tGD8WMziRwm6F+hcsJZuQi5skc4YxlHgCLi+VLYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:57:bb:18:93:b4:e4:31:76:79:8f:02:24:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=dddad1d6c0af89622b2bf3c7876ed31483c18e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:a4:9c:69:24:01:52:91:fa:8b:d8:ec:51:
3d:c5:20:14:e1:f5:8e:ab:8e:55:12:3d:ff:73:4a:
07:bb:4c:44:16:65:3b:1d:70:54:ff:f3:87:38:81:
84:58:5b:b3:b9:ce:e7:97:31:cb:93:7b:99:bc:58:
4a:93:61:fb:4f:a1:62:96:70:80:c7:09:8f:dd:63:
36:02:52:3e:31:35:ff:4a:78:0c:ff:b2:0f:eb:b8:
3d:37:72:a7:79:f5:56:7b:86:ac:e6:47:c7:78:7d:
13:32:c1:59:87:af:80:1d:ad:4c:85:79:fd:ee:bb:
16:46:c1:22:79:21:76:c9:0c:dc:5d:3f:10:bb:f8:
65:d3:d5:b4:8b:61:c6:f6:11:74:08:d2:77:5e:ec:
f9:3e:1a:dc:b7:05:ea:6b:9a:c5:a4:41:d9:bb:5f:
49:8b:55:14:5a:0d:be:5e:f5:71:c6:22:c2:0b:fa:
1a:e8:8c:56:77:85:f8:ec:22:e5:68:04:21:97:63:
6a:af:36:54:cc:7d:ee:bf:a4:1e:30:fd:1c:08:56:
4c:a9:96:19:7b:f8:de:2b:41:52:75:fd:c5:bd:8d:
3c:90:a3:49:1c:0b:2a:ee:0e:2e:db:60:1e:ab:99:
58:d6:ce:4d:56:51:58:62:dd:9d:d5:b9:7a:20:43:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:D1:D6:C0:AF:89:62:2B:2B:F3:C7:87:6E:D3:14:83:C1:8E:94
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:64:31:a4:21:aa:40:65:89:92:b9:94:23:3b:d6:18:c9:
e8:46:28:32:23:47:46:19:63:2d:dc:ee:d1:49:29:ee:17:1d:
73:54:79:ad:5e:00:0c:9b:de:82:7a:7c:ac:9a:05:b0:ce:64:
b7:44:0b:4c:f6:38:4a:d2:d1:6b:9a:11:bc:cf:18:e9:e3:7c:
74:f0:cf:0f:0e:a0:ea:f8:a7:0f:16:95:91:ee:dd:95:43:fe:
c8:8c:47:02:b0:f6:a2:88:9a:a2:87:0f:28:c8:b3:d9:ba:8f:
97:37:cc:35:01:6d:0b:79:74:e6:64:bc:4e:69:2a:17:c6:47:
c2:f0:ee:69:27:89:e8:85:84:ef:af:67:8b:d9:f3:e6:e2:20:
ac:e9:53:be:b3:38:97:b8:bb:d5:66:99:ff:41:e4:60:ed:48:
1c:96:e3:5a:a0:65:dc:90:4c:e9:e8:3a:71:b0:a9:1e:99:67:
6d:5d:30:7b:5d:1d:0b:78:c0:02:45:06:6f:6e:19:58:04:38:
62:1c:a3:12:83:f9:0b:33:a1:43:f5:51:f1:94:4d:42:30:15:
bf:ea:62:7e:31:1c:ad:2f:42:d7:79:c1:f9:e1:d2:f1:e1:71:
7f:67:6c:a1:50:18:9d:77:35:5c:71:ed:21:f0:12:a8:d8:e2:
61:c7:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client