Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: ijsIoNrCIppXc4ceBmoVJpPtIcNH1gKxfMXeN9qs+XU=
Subject key identifier: CE:33:33:9C:22:32:37:0B:C5:0A:27:53:BC:B8:72:A8:74:A3:09:3A
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 019D265FB44D948910D9121A26D4DD28D3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0D55
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: lrSG3uGAXzeHB7puT6M1dimx0ufmSv/vaWrnYIhmdc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b4:4d:94:89:10:d9:12:1a:26:d4:dd:28:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=ce33339c2232370bc50a2753bcb872a874a3093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:7d:af:41:1c:9d:88:17:10:ba:67:b9:1e:
1d:e8:d0:8d:74:58:04:b3:be:86:03:f1:cc:8b:4e:
ec:3c:55:76:c4:00:02:9b:d7:e2:0a:5b:81:dc:52:
b9:97:c0:60:f8:5e:89:7f:4c:ad:ab:86:16:56:9a:
8a:0f:90:a6:74:29:09:44:5e:d8:1d:05:84:9c:ef:
07:eb:35:ae:bd:1a:48:01:cf:e7:0a:00:44:22:c3:
07:76:4f:cd:8c:1d:6f:04:cd:e1:1f:3c:fc:af:89:
fb:f9:83:fe:01:70:ec:55:06:7c:e5:4b:52:17:18:
69:31:64:30:47:86:c3:55:6c:f3:9c:25:16:53:76:
88:34:a5:78:fa:4d:e4:7a:8c:bf:c0:78:2f:8d:9d:
a5:f4:c9:07:18:86:d7:05:cc:e0:ce:88:47:1a:4b:
ce:12:04:4e:e0:06:94:ad:a6:cc:82:89:92:ef:a8:
87:a4:d2:7e:b8:67:b4:ed:6c:08:49:58:e0:db:71:
48:60:38:e5:ce:34:48:22:10:ad:13:38:60:3c:8e:
ee:38:a6:c7:30:41:2d:5e:23:40:cc:14:78:3f:83:
3f:09:3a:e7:0f:3a:7d:e4:e8:80:2c:c0:84:1a:08:
7d:a5:ab:6e:8c:11:48:fc:15:8c:f3:05:89:83:89:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:33:9C:22:32:37:0B:C5:0A:27:53:BC:B8:72:A8:74:A3:09:3A
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:88:e2:d9:31:61:56:45:d4:45:a3:f7:37:18:50:06:29:47:
82:29:9a:a8:32:8a:f1:44:fb:40:21:ae:eb:01:9d:78:c8:64:
61:3f:7a:d8:13:f8:2c:bf:e1:44:fe:56:41:0c:03:ca:a1:83:
24:b2:12:78:4e:6c:33:97:eb:77:e3:c7:a1:c7:a0:b4:10:fa:
b7:39:b4:13:14:96:9e:48:92:e2:07:f5:fc:ac:ba:d5:91:fc:
38:47:f9:c3:90:a4:71:a8:01:c6:29:32:63:f2:f6:10:f6:f9:
b9:b8:eb:a4:d7:9a:6d:82:bb:5a:59:de:a6:00:57:65:75:13:
c2:9d:6b:52:33:bd:9f:eb:fb:ca:fd:ff:32:3d:13:32:35:02:
e4:87:0c:06:5d:88:cc:a4:90:7a:88:22:42:95:86:99:02:c1:
c2:49:be:c2:ab:d6:fe:0d:c2:f5:d7:4e:f4:c1:17:81:3d:9e:
ea:fc:44:ba:b8:fb:b7:fa:b8:7c:fa:10:a6:99:04:f1:6e:a6:
b5:5f:bb:1f:e4:18:19:4f:77:3e:db:e2:f7:b3:b1:90:a8:8f:
94:f3:a1:a0:a4:e7:f1:52:16:67:01:02:3e:6a:fc:ee:e2:82:
0d:12:96:23:84:3f:54:ed:4a:56:e8:61:95:4b:e7:2a:5e:17:
0b:c7:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:08 2026 by rpki-client