Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: pVXrEO5pjdIlVu+6AwFMixOZ4lhcejuUepahcFvzaMU=
Subject key identifier: 10:34:D8:5F:6F:43:4C:8C:82:B2:6A:51:52:10:61:89:CA:40:71:50
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 019D27721AE09D9A38F01966EE22241FCD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 17C6
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: ESDNAZWsiKLzrXNNa4//+mlN9AgNOM/AXX/iEl74lkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1a:e0:9d:9a:38:f0:19:66:ee:22:24:1f:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=1034d85f6f434c8c82b26a5152106189ca407150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:9c:0e:41:40:e1:dc:18:42:f7:40:61:ec:
44:c4:ef:e0:a2:50:61:be:2d:9b:8b:78:f3:43:23:
bf:32:e6:81:5c:eb:44:59:f8:21:9b:df:95:e2:6e:
15:b4:a9:3b:90:31:be:24:5b:15:ca:17:d8:d9:5d:
3e:08:b5:e7:07:27:7f:42:e3:89:8d:24:25:2a:fa:
82:17:0f:e1:13:d3:3c:a3:05:41:09:0e:11:41:d0:
60:51:2d:00:e5:e1:74:a3:71:73:e3:aa:1b:fa:c6:
66:8c:45:d8:26:8a:98:03:5b:bf:1f:7c:6b:e3:d2:
a2:67:7f:84:4d:3e:0c:b0:7f:c9:01:7e:bd:53:83:
88:8e:91:12:c0:05:14:65:2f:2f:96:f1:07:53:b2:
0f:bc:6c:9a:ee:92:42:8c:ee:3b:85:ba:f1:e8:74:
ba:96:52:e7:d0:bd:1a:50:b6:03:87:c9:67:26:3d:
94:00:bb:01:92:03:95:8a:a8:8a:04:c4:38:7b:4a:
10:9b:7f:ae:01:69:80:ef:72:f0:75:7c:29:f7:46:
6b:40:fa:8b:e3:93:6b:17:0f:16:2a:fa:72:4e:f0:
a9:0b:d8:22:64:62:5c:92:e4:e0:4c:48:73:89:15:
90:15:55:20:c2:19:d4:b6:b0:3a:07:e1:f3:f1:80:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:D8:5F:6F:43:4C:8C:82:B2:6A:51:52:10:61:89:CA:40:71:50
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e6:88:ca:1d:14:3d:ae:b1:0b:d5:90:96:92:8d:6c:30:6e:
25:82:f5:1b:87:2b:79:02:02:87:a1:29:a4:ca:95:e8:c3:50:
b2:9b:f6:de:8e:9e:30:fa:96:50:b8:95:40:09:dc:ec:a9:ac:
b3:ab:7c:47:a1:4a:e5:3f:a4:3d:18:c0:95:66:07:07:01:61:
01:aa:2c:01:a8:3b:d3:a7:d6:26:c7:26:f0:09:02:12:37:c5:
fc:62:7c:e8:8e:2e:48:fb:c7:34:ce:a8:8d:0a:b9:3f:26:3a:
d4:2c:79:e5:33:5e:84:f2:2f:e5:2b:31:c2:a0:e2:42:6b:18:
73:c4:e2:a7:ac:e6:2c:5f:8b:d6:53:6d:b6:ce:5f:9d:d6:93:
ad:84:8c:43:26:09:23:48:5f:0c:6b:ed:45:29:78:7c:3d:b9:
97:60:54:be:79:3b:46:64:1c:e0:0b:01:24:fb:7c:19:02:e7:
be:09:ef:b0:d7:27:c7:44:e6:4f:25:70:dc:08:f8:8f:ca:52:
cc:da:e0:88:02:4b:46:f7:68:78:ad:4d:7f:1b:66:e6:f7:17:
f3:4b:54:f3:57:29:cf:cb:c1:0b:cc:57:50:f3:44:f7:ca:8a:
12:33:a7:97:60:e1:11:a7:65:2b:44:2c:58:af:80:12:8c:eb:
c3:af:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:56 2026 by rpki-client