Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
File: ty37EnJ-RgDKLwGRt9GgI1MucsA.mft (raw, json)
Hash identifier: NslCbK2XtopUm+Ps0jSJhDrk/7UD9nQ0quytng4Acos=
Subject key identifier: DD:4D:4E:3D:04:06:79:AD:EC:4D:89:44:8F:4E:BD:97:14:26:F9:04
Authority key identifier: B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
Certificate issuer: /CN=b72dfb12727e4600ca2f0191b7d1a023532e72c0
Certificate serial: 019D2D3C6BFCF7BBB1A9BA97467FF49C5664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
Manifest number: 27
Signing time: Fri 27 Mar 2026 03:00:27 +0000
Manifest this update: Fri 27 Mar 2026 03:00:27 +0000
Manifest next update: Sat 28 Mar 2026 03:00:27 +0000
Files and hashes: 1: ty37EnJ-RgDKLwGRt9GgI1MucsA.crl (hash: GxEj1c56i7GS/b1EzA0gCD54UrRah2FoeO8sO1FRi2g=)
2: vzqHQtSs2Ll17kIhzu7i4Fx0bM4.roa (hash: 4hxhXTGo/RdAHHLFg4G4QRq2OAlSa5hX9QYk/Am2sj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:6b:fc:f7:bb:b1:a9:ba:97:46:7f:f4:9c:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72dfb12727e4600ca2f0191b7d1a023532e72c0
Validity
Not Before: Mar 27 03:00:27 2026 GMT
Not After : Mar 28 03:00:27 2026 GMT
Subject: CN=dd4d4e3d040679adec4d89448f4ebd971426f904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:8d:88:44:e3:22:d9:48:43:78:2f:a1:42:
75:26:dd:a0:31:25:d1:cf:dd:b5:cd:5b:fc:5e:e9:
6b:3f:bf:4c:f4:85:94:90:1c:a1:fa:b1:7e:dc:42:
53:fb:32:d2:32:97:0b:04:89:ec:46:3e:78:c2:a3:
71:ee:9c:d9:72:57:13:c5:72:30:b8:17:a3:1d:30:
19:fd:70:29:cc:3f:72:61:62:e5:c9:68:09:30:0d:
4b:5a:3f:f4:16:aa:40:4c:72:b1:ac:97:1f:e1:45:
3b:b7:f6:f9:61:d9:e6:75:4a:2f:51:9b:6c:a4:b5:
7b:cc:4a:86:a7:25:06:22:16:7e:a7:66:d8:8a:88:
08:1f:e5:40:5e:61:d6:16:f0:3b:d2:6b:f7:56:76:
51:2a:fa:3a:e6:da:34:53:58:7e:17:29:c9:04:dd:
73:91:f4:f2:f0:0b:a7:d7:4b:ca:61:18:78:03:bb:
73:19:6c:30:63:02:6c:e0:0b:b3:75:c7:75:7a:01:
ee:6e:74:1c:ce:90:b8:7b:c7:64:9d:29:4d:eb:1c:
3c:77:ed:e8:64:96:d6:32:92:67:33:80:33:65:5c:
d1:46:71:8d:bb:e4:64:a1:d2:66:66:8b:48:ba:2a:
fb:63:0b:53:bc:a3:8c:f6:d4:a3:44:15:bf:c1:32:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:4E:3D:04:06:79:AD:EC:4D:89:44:8F:4E:BD:97:14:26:F9:04
X509v3 Authority Key Identifier:
keyid:B7:2D:FB:12:72:7E:46:00:CA:2F:01:91:B7:D1:A0:23:53:2E:72:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ty37EnJ-RgDKLwGRt9GgI1MucsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/209544-7bf2-4e13-87e6-be026bf67163/1/ty37EnJ-RgDKLwGRt9GgI1MucsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6d:cd:e9:5f:71:f1:5b:b0:b9:c7:09:96:dd:b3:1f:a7:d7:
89:82:6b:0f:83:65:53:1e:f6:0d:74:be:18:48:26:64:f1:eb:
84:6f:60:f4:0e:73:79:dc:66:23:2a:98:4d:c6:aa:75:8a:ff:
13:b3:76:ed:fa:09:d5:71:37:80:17:2a:b1:9d:4d:84:8c:fc:
68:e4:6d:7c:94:c7:49:7a:b9:88:31:68:9f:56:e8:c2:6b:66:
12:06:1c:9f:0c:de:bc:76:83:8b:00:bc:f9:a0:a4:5d:fc:d2:
59:7e:f5:67:7a:3d:14:69:31:2d:01:e4:1a:92:36:44:91:cf:
df:f3:ee:e2:da:7a:30:21:53:6d:be:97:9f:3d:95:b9:e3:12:
b5:ac:4d:cb:2a:f6:e0:29:96:f4:fa:fe:4f:e4:b4:8c:c8:b6:
0a:54:26:1f:53:1c:be:49:4d:28:f5:14:3e:f4:9b:a9:b4:70:
77:a8:98:cd:3e:1e:62:e2:22:f9:6b:d9:f6:6b:2a:eb:51:9a:
58:5c:78:75:cb:49:5c:e9:c8:69:2f:ca:65:49:ed:a2:99:3d:
2a:fb:95:d8:30:c6:a1:eb:1a:6c:e7:79:36:32:bf:f2:59:44:
5c:5e:88:cb:92:14:e7:dd:60:27:ea:45:a9:2c:bc:71:ee:f7:
66:96:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:27:32 2026 by rpki-client