Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: 6CaL+7Wx9+8tUyLG6EROF+OtepHWvF2STCmtDEUVEac=
Subject key identifier: 72:49:69:6C:D2:CB:FB:A8:C4:1A:91:E6:77:16:5B:4C:88:30:AB:C2
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019D2704907335E446F32A0ACC3D70964ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 0A13
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: N/4IWgZBbGERhsW9emFx/2vaLgiHG3eJDd5VIkrpTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:90:73:35:e4:46:f3:2a:0a:cc:3d:70:96:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=7249696cd2cbfba8c41a91e677165b4c8830abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:34:49:f4:cd:7d:a6:08:0b:47:c5:2c:2c:
43:0a:79:a5:2f:ad:7b:76:31:de:bb:96:30:bb:8f:
23:1c:8f:a7:da:62:ad:30:a3:6f:6e:29:f6:61:5e:
2d:1b:81:cd:0f:51:9f:db:6c:2d:ee:cf:dc:93:de:
9d:bc:f9:5a:05:2a:2f:d3:2f:99:9d:8f:1a:85:81:
1e:c6:c0:32:b5:1e:2c:d8:38:e7:f3:2d:8b:c7:0f:
e7:da:79:58:5f:6e:73:f0:9c:07:c6:5a:6a:86:9f:
b3:4a:e7:30:59:44:7a:81:f7:12:13:7b:a5:d2:8a:
f8:ac:97:d7:c1:59:22:bc:1b:35:d3:1f:5d:2c:d8:
df:e9:11:cf:2a:b3:8e:c5:01:47:e3:6e:6f:28:74:
03:29:f5:b6:99:c3:32:8a:dd:32:35:31:1c:0b:39:
ee:71:8b:ce:2b:6a:d6:72:42:55:04:69:82:e6:5a:
9d:72:46:cd:59:89:25:4c:88:95:c2:6a:e7:ba:4d:
8f:67:63:94:40:bb:e0:be:67:df:a4:c2:af:c0:9a:
3b:27:8d:25:a5:b1:36:c8:fa:bc:ec:71:94:35:34:
57:b2:e4:77:00:34:97:43:4a:6f:85:20:f7:2e:f8:
0d:b5:90:f4:a6:29:de:d9:07:d9:da:72:d9:2d:7d:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:69:6C:D2:CB:FB:A8:C4:1A:91:E6:77:16:5B:4C:88:30:AB:C2
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c5:8d:89:2a:75:4b:38:2b:21:8d:94:cd:a2:3a:e2:41:24:
91:9a:1f:e0:51:b9:ef:0b:af:e6:3d:d8:5b:f4:38:02:e7:de:
f3:ab:98:6f:1f:f0:a2:5d:34:07:f8:a9:89:1b:dc:60:48:21:
27:f4:0e:6e:77:33:b8:4f:54:ac:08:32:92:5e:a2:82:fa:8a:
8c:67:69:2c:f8:fb:9b:8f:e3:81:ca:69:d4:03:ca:1a:47:a0:
38:f4:c3:25:93:70:bd:66:79:6f:4e:c8:b3:2b:ae:0d:96:01:
f3:4a:28:24:5f:cc:bb:4f:f2:3d:fe:d7:99:e9:2e:3c:57:f9:
65:49:c8:63:fa:5e:a8:01:ab:51:50:04:71:4c:35:bf:99:c1:
d9:c1:23:97:58:28:bd:fc:21:12:00:6d:42:90:9a:0d:d0:ef:
35:3b:63:df:9f:4f:0e:f7:5f:1c:9c:6a:40:a4:56:ec:c5:0f:
ee:88:a9:46:14:04:99:c0:b2:f5:1f:ca:66:41:88:b5:4f:9a:
96:a6:63:9c:5c:56:37:ab:f4:76:03:57:c6:89:7c:e7:62:8a:
4b:5e:bf:4a:72:43:69:b7:8a:96:dc:ca:4c:69:ca:04:eb:53:
70:a7:57:2c:7c:1b:2c:3d:ae:74:d0:96:3c:fc:2f:cd:93:31:
1f:cf:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:53 2026 by rpki-client