Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: N1M9/2CcRmLvIlxh5FppzkmuvegEISr5YvzrJb3jeV8=
Subject key identifier: 2F:AD:77:8C:D2:73:79:D6:02:43:ED:22:D3:00:E7:EC:46:DE:D3:F1
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 019D28F2F7663F209DBC55352FAF4F95826D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 1203
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: U/Z8LdXnWn/ki+/R7aUElRHuGko/3ftxR427IlX8uTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f7:66:3f:20:9d:bc:55:35:2f:af:4f:95:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=2fad778cd27379d60243ed22d300e7ec46ded3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:1e:36:4b:17:37:55:7e:a3:21:04:2f:b3:
35:f9:e5:76:f6:3f:75:29:fe:8f:b2:fa:c6:51:dc:
16:22:7e:b1:45:1e:a2:ec:26:3e:6d:22:09:0f:d9:
82:58:cf:46:0c:e7:5a:21:51:39:39:e7:82:6d:31:
05:ab:32:e5:0c:79:f8:34:5f:00:2b:4f:df:56:25:
17:40:86:b0:71:57:a3:2f:a7:f7:c5:a3:a9:c6:d8:
22:75:a8:e7:bc:cc:2a:2f:63:78:73:e4:b8:b2:c6:
0a:26:7e:14:f3:94:f3:0b:45:97:40:51:24:5a:55:
5c:4b:f0:89:9c:41:d8:ad:60:9b:12:af:90:45:8d:
c9:20:6b:cd:d1:63:c1:76:92:5c:19:f1:05:87:51:
ab:9c:a0:18:fe:64:d0:a9:5b:41:45:4b:ea:03:3f:
69:35:76:fa:c6:0a:2c:fa:b0:9b:9e:80:62:de:2a:
a8:c7:5d:9c:18:9b:e2:b8:4f:99:23:59:ed:1b:82:
63:a5:11:0b:43:3a:0e:c7:dc:f1:12:8b:b6:54:0b:
b1:81:45:a7:0f:d3:e0:18:06:2f:fc:33:ef:9b:29:
67:88:1f:9f:bd:fc:8f:93:38:4f:7d:e7:c6:62:77:
07:00:73:67:93:6b:54:c3:e7:ce:5f:ef:59:22:9c:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:77:8C:D2:73:79:D6:02:43:ED:22:D3:00:E7:EC:46:DE:D3:F1
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:13:b2:70:56:e0:e2:23:27:7c:00:21:6b:41:17:b6:40:
1d:05:b6:07:d1:3d:43:d0:0b:e5:a6:6b:cb:49:fb:cf:f6:b5:
cd:5e:54:77:20:01:c9:55:b6:70:cf:b3:da:b4:7f:93:0a:d9:
ef:8f:bf:94:d6:3a:a8:a5:5b:57:f8:99:82:b4:ab:7f:2e:ad:
de:92:c4:40:7c:ed:b4:8f:42:80:21:30:d4:d6:c1:10:29:95:
fa:9a:be:df:6c:6d:db:62:35:11:9d:42:c2:cf:90:02:75:e9:
f9:19:5f:14:ab:f3:6f:90:80:7d:4e:b1:35:d6:7b:f3:b1:a4:
90:d7:c7:70:00:8a:40:41:ae:73:5a:c4:70:65:5f:00:3b:a9:
87:3d:4d:36:6e:ed:cd:53:31:60:c4:11:8d:43:2f:67:a0:74:
3f:ce:ea:54:a1:c1:90:ed:c9:eb:fb:ef:cc:57:75:e2:85:d4:
96:ec:84:35:33:3e:45:7e:75:e5:54:93:f4:f1:bb:01:ec:2b:
a4:aa:ac:f6:3c:4d:64:7c:9b:a3:6c:ce:bc:f9:44:37:27:7b:
5c:f9:35:a8:b7:af:6e:b3:5f:8d:dc:4e:15:48:7f:fb:1d:3b:
71:a0:e6:da:87:fb:76:8b:c6:43:3f:aa:c0:1b:e9:30:4e:19:
1b:85:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:38 2026 by rpki-client