Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: W6wOznEBT5Y/Rpd2mVdwOxs1Auwvo9VneRjDSjN2vxQ=
Subject key identifier: 12:A4:9F:12:BB:56:03:73:6B:57:27:07:B3:89:B9:5F:2E:77:DB:08
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019D269649D85FA94A628218EFF94E24C141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 0241
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: fsBY4DYDeG+6oa1udBzZ5rknSBCp4KalgaMUf50A3lw=)
2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:49:d8:5f:a9:4a:62:82:18:ef:f9:4e:24:c1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=12a49f12bb5603736b572707b389b95f2e77db08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:e4:f4:ce:59:1d:fa:8f:5c:df:63:5b:15:
ce:4e:ce:b1:ba:4d:db:69:f1:63:f8:b5:9f:f0:17:
47:cb:1b:a2:a0:08:49:e6:fc:1f:4c:87:a7:da:01:
6f:3d:24:b2:92:3b:49:a8:87:63:77:ed:c0:09:01:
b1:e4:71:9f:20:b3:f5:cb:f0:4e:ba:80:eb:3b:93:
85:6b:0b:6e:09:cb:f3:81:fc:1d:76:3f:17:67:d2:
0e:0e:a0:1e:6d:db:48:a1:b4:fc:e5:e3:5b:31:a0:
fa:3b:3d:95:da:59:64:67:01:6a:ba:02:75:e2:2e:
4c:06:c8:09:28:b5:64:8b:cc:5c:ed:70:79:76:1f:
b6:85:6a:3a:7a:f6:88:78:1d:07:ca:ea:c0:2e:8b:
42:d5:82:64:5a:74:6c:4b:0f:22:37:a5:a4:ec:58:
06:48:79:66:4e:bd:b1:61:5b:38:fa:7a:aa:36:e2:
cc:9d:1c:d1:25:06:ae:76:a5:76:5c:34:81:50:bd:
49:7c:58:3b:45:39:f0:d9:2b:dd:ec:3c:ea:d4:14:
66:2f:13:a8:98:e2:8b:9f:12:0f:95:87:b9:61:cc:
48:b1:3f:c3:a9:91:93:b6:3d:d9:35:8b:4f:a6:8a:
b9:9c:78:ee:26:d6:49:fb:fa:81:73:b2:03:43:2d:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:9F:12:BB:56:03:73:6B:57:27:07:B3:89:B9:5F:2E:77:DB:08
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:48:e9:b1:a0:e0:8c:72:13:4f:9c:19:22:98:8e:31:a8:
22:52:b6:f2:ea:df:cc:a3:a4:a8:57:09:a7:e0:63:eb:ac:ae:
c0:ce:e9:67:61:d7:15:00:69:82:42:e7:0c:60:a4:38:1e:6b:
e9:60:45:98:0c:47:78:61:eb:bb:4c:df:ea:c2:d4:dd:44:52:
4b:fe:12:56:52:89:4c:e4:62:32:a5:e5:20:f8:7c:57:84:d8:
59:b1:08:58:85:cd:0b:cb:c3:61:d9:c0:2d:d2:88:2e:ad:03:
66:8d:7f:68:66:08:39:ec:03:4e:6b:00:7a:32:96:a3:2f:14:
25:51:74:b6:20:5b:b7:f2:75:86:b4:60:d6:f2:0e:31:2a:b0:
e1:0e:a8:65:e7:1b:46:a0:90:f6:ef:cd:e2:48:02:36:f4:80:
55:fc:75:bf:a2:0b:8a:0e:47:c9:29:ca:14:ae:1a:aa:ff:84:
22:c0:7d:98:76:5c:8a:6b:d7:c2:05:de:ee:5d:7d:81:26:9e:
e6:f8:ef:5d:35:5d:02:63:9d:12:65:ae:3b:8a:b8:9b:0a:93:
a2:e5:e6:c6:2d:f6:0d:06:73:8d:ce:3b:59:b8:60:bf:2b:ab:
0b:b6:68:f7:1f:c7:e1:63:1b:e8:23:e4:b5:49:73:b3:c4:ca:
09:e0:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client