Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: 4Hh3VtvrvSbHucoWA66hptRtuNistpJlP0gxayhnfKc=
Subject key identifier: 37:83:C5:0E:9E:4A:6E:91:3F:0F:C4:88:4C:73:F4:92:14:1D:C8:FC
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019E1DC772215D8BAC1D824CCF1CB2C5EA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 02C1
Signing time: Tue 12 May 2026 20:01:10 +0000
Manifest this update: Tue 12 May 2026 20:01:10 +0000
Manifest next update: Wed 13 May 2026 20:01:10 +0000
Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: fobDSzZKVpwtSVQwKeurRH1RVFKOF97M3d++j8Nd5Z4=)
2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:72:21:5d:8b:ac:1d:82:4c:cf:1c:b2:c5:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: May 12 20:01:10 2026 GMT
Not After : May 13 20:01:10 2026 GMT
Subject: CN=3783c50e9e4a6e913f0fc4884c73f492141dc8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:5f:88:0b:1d:ff:10:b2:8c:1a:07:a8:32:
ef:50:b9:1c:48:76:11:6e:2c:a4:e6:70:a8:e3:46:
52:09:06:4c:24:6b:7a:92:b0:fe:7f:75:f1:4b:ea:
de:dc:b8:38:21:8b:c1:a0:62:b3:75:b6:53:ba:72:
49:13:42:4d:f9:06:a9:e6:01:de:29:4d:f9:07:a1:
a0:dc:ed:50:23:82:21:41:27:ab:60:78:a1:e8:53:
dd:2d:ec:34:70:31:3c:c3:69:83:3f:40:ff:32:e8:
da:45:57:68:8a:0a:e4:f5:9b:70:d0:db:da:34:bb:
ca:ad:4b:60:95:a0:5e:e7:5f:8c:5b:79:c2:6f:47:
ce:12:27:5c:5e:8e:64:6c:6d:37:70:de:86:b2:18:
2e:e2:d3:b1:49:1f:1e:1a:8d:a9:38:7b:18:97:74:
81:ea:37:7a:f5:48:40:34:2c:d9:f5:44:df:27:84:
4a:02:3a:e8:fe:99:9f:27:62:bb:7d:f1:ed:0f:25:
fb:a5:44:6a:db:56:ca:19:33:da:e1:34:68:b2:b4:
5c:42:88:ae:ed:92:1a:e0:cf:e4:6e:81:04:dd:4d:
07:17:d6:a3:73:dd:d2:b5:e5:e4:11:a5:82:65:2f:
3c:37:31:19:cb:6b:b8:ea:50:04:d5:46:b0:16:7a:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:C5:0E:9E:4A:6E:91:3F:0F:C4:88:4C:73:F4:92:14:1D:C8:FC
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:5e:c8:47:5b:62:40:36:b8:fe:3a:f9:8b:63:dc:99:f1:dc:
25:e5:3b:6b:03:24:d0:a1:b1:d8:50:da:32:f5:61:04:6f:aa:
ba:2e:b3:cc:2e:3c:9b:d7:c5:b9:67:02:68:f2:4f:62:a4:7e:
6f:8f:37:58:33:4b:df:21:9e:75:b3:0c:b4:18:63:3a:93:af:
7c:ba:0b:44:5b:5b:9d:7b:2a:80:35:e7:67:d0:14:8a:95:93:
56:80:02:ea:9d:48:3f:c1:99:f4:61:cf:77:8c:a7:41:37:8b:
7b:eb:c5:83:57:1b:6b:ad:e9:bd:1c:0f:8f:4d:e2:48:1c:8e:
fb:10:19:6d:e1:10:54:cf:fa:29:ab:eb:3d:db:e2:70:c6:6d:
ce:23:0c:a3:09:cd:ff:61:dd:ca:75:8f:8e:2f:19:5a:22:82:
f8:0b:b7:6e:eb:c1:69:75:9e:02:91:bf:c6:63:1a:a3:36:a9:
ab:bf:d8:99:ed:e5:61:01:b8:cc:5e:5c:d3:c9:d0:c0:ad:92:
ff:7d:98:57:0f:20:32:7a:54:62:8c:1f:93:ab:14:d5:96:33:
61:c5:55:3d:bc:e4:d5:f1:29:91:81:53:69:b0:ca:ed:e3:21:
cd:d6:10:5a:83:70:1b:2a:1f:5c:43:9c:17:a8:c1:3f:ea:0f:
8e:81:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:40 2026 by rpki-client