
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
File: tLV4tlwYGG0eanU5kSs06QALCMw.mft (raw, json)
Hash identifier: h6PZqafMpDBfJWhHaDvhfB1yYxPdXxOe1dQ7hsOBodA=
Subject key identifier: C3:2A:6A:A9:FC:29:84:DE:05:4A:4D:3D:49:65:1A:DC:2C:2A:9E:E6
Authority key identifier: B4:B5:78:B6:5C:18:18:6D:1E:6A:75:39:91:2B:34:E9:00:0B:08:CC
Certificate issuer: /CN=b4b578b65c18186d1e6a7539912b34e9000b08cc
Certificate serial: 019D269641FFBD5C13792048177E51AA9E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
Manifest number: B5
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: tLV4tlwYGG0eanU5kSs06QALCMw.crl (hash: UfmFrD/r9IMDj3mY6JXGs1NKcbs94G1NLfoOMx1II6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:ff:bd:5c:13:79:20:48:17:7e:51:aa:9e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b578b65c18186d1e6a7539912b34e9000b08cc
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=c32a6aa9fc2984de054a4d3d49651adc2c2a9ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:7e:7d:0f:cd:42:d2:f5:da:23:52:56:48:
02:0b:77:51:08:96:fa:61:08:8d:9e:04:b1:76:7b:
91:85:16:ff:2c:c1:80:cb:3a:ae:54:e5:30:ab:31:
da:d8:c3:a3:8a:9d:06:b2:4e:ee:9b:1f:fc:2e:cd:
6d:3e:33:75:34:72:1a:50:18:0b:c2:7c:e7:78:a2:
14:7d:d2:0a:f0:ae:8e:59:1f:77:58:e1:f8:a4:73:
c4:5e:1a:19:27:69:a5:ee:bf:e9:03:79:b5:28:39:
dd:c6:20:a6:4d:68:87:e9:ae:0a:8f:9f:2e:bd:8e:
79:e8:e6:10:c2:45:ea:3e:d2:c3:a4:8f:44:e7:ac:
31:36:a4:7e:4e:36:ce:05:cf:3e:90:01:dd:24:d4:
62:31:6e:23:c2:0e:e0:96:29:b9:2e:53:9c:01:b4:
18:d0:23:8b:6c:71:ed:6f:06:2f:f4:01:27:ad:1f:
e0:0d:10:89:03:0e:22:cd:0e:26:6f:31:75:2d:65:
91:53:43:b7:be:68:00:08:24:17:3e:f1:b2:31:c1:
50:48:34:68:0c:54:f8:af:a6:6f:5c:20:37:d1:8d:
d2:4d:2d:cb:f5:03:7b:ce:4f:3c:df:b4:de:87:d9:
e0:c2:53:26:39:8c:84:b7:ea:b3:26:70:5f:9f:d2:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:6A:A9:FC:29:84:DE:05:4A:4D:3D:49:65:1A:DC:2C:2A:9E:E6
X509v3 Authority Key Identifier:
keyid:B4:B5:78:B6:5C:18:18:6D:1E:6A:75:39:91:2B:34:E9:00:0B:08:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLV4tlwYGG0eanU5kSs06QALCMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72c6f3-9913-41be-a178-5f3eb7b21e90/1/tLV4tlwYGG0eanU5kSs06QALCMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:36:3c:c5:7b:eb:2b:b8:75:30:7d:72:0d:14:f0:b1:16:
33:9c:21:4f:e3:28:07:f1:4e:ad:96:a3:ea:8c:07:6e:46:50:
17:a6:9d:60:fc:e3:56:a3:d8:8b:00:e1:33:8d:cd:5e:8d:11:
28:2c:c8:dc:da:7a:ee:45:df:18:31:e7:cd:bc:78:61:3a:fb:
47:52:1d:c8:6b:34:2c:8c:82:1e:55:2e:e2:7a:8b:76:0e:8d:
a3:0b:cd:f8:ac:7c:29:ad:70:1a:71:dd:b4:0d:67:d0:0a:c1:
d3:d2:1d:02:72:4a:8e:e2:0c:dd:54:e6:13:8d:ba:83:f6:23:
8b:44:64:85:8f:24:4e:90:15:33:84:41:f8:3b:c3:5b:3d:ce:
fc:dc:4a:98:a2:79:86:24:23:23:fa:1c:ee:76:a3:7a:67:3b:
ae:52:bd:5e:d2:08:53:f4:5d:5c:96:cd:42:03:38:b1:75:ec:
8c:a7:79:f9:50:21:01:87:57:f1:0d:19:e8:ea:61:d9:ce:48:
b0:68:3c:fe:68:2a:64:90:8f:1d:47:e5:96:24:c9:92:8d:28:
fe:c5:c8:bc:09:94:e0:aa:53:85:c2:2c:29:98:cb:a0:c8:5a:
ae:84:5c:a2:a3:91:4f:bd:0f:00:2d:7c:62:9f:c2:c7:71:ec:
1d:a3:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:26 2026 by rpki-client