Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: lO1DeSRcjI3U2x6LDcH68T45YMWjLMgObIikAdPZR/c=
Subject key identifier: 18:5C:F3:BC:AF:EC:9F:E4:7A:CD:AA:86:B2:C2:4D:6A:A6:FA:CB:D6
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 019D2AE0071B9874A9083252549760B5AF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 16:00:18 +0000
Manifest this update: Thu 26 Mar 2026 16:00:18 +0000
Manifest next update: Fri 27 Mar 2026 16:00:18 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: Yu5UOQVHjwEQx6Uh+tElNlyMLAZ1STUS1ymB1+lEjeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:07:1b:98:74:a9:08:32:52:54:97:60:b5:af:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Mar 26 16:00:18 2026 GMT
Not After : Mar 27 16:00:18 2026 GMT
Subject: CN=185cf3bcafec9fe47acdaa86b2c24d6aa6facbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:22:0f:88:99:2c:b2:63:6a:a7:4f:de:c2:
4f:be:1f:6f:7c:94:ac:13:86:69:46:a9:92:ad:0d:
9e:d5:33:e7:43:99:3a:e8:c3:05:ab:ad:fc:41:e1:
dc:50:d4:05:82:94:b0:63:52:50:60:56:e7:d6:99:
33:5f:db:80:b1:11:6a:de:8a:3b:c1:fc:35:1a:5a:
7d:7c:0b:01:9c:4b:f9:5e:00:89:de:02:4f:df:bc:
6a:ec:e4:2e:f3:6e:47:c9:b7:a9:63:70:25:01:bd:
66:38:c0:a6:d7:54:eb:00:b2:fa:c6:a2:ca:30:0b:
2c:a9:e4:01:9e:b3:8e:36:98:8d:80:7b:f4:2d:3d:
d6:57:fb:b1:ba:78:9d:2f:f4:90:a1:6a:2d:31:72:
cb:ae:c3:d6:88:46:de:6b:96:4e:72:ac:df:fc:bc:
ba:46:52:40:d3:1d:74:04:2b:c1:bd:b8:e5:c7:b9:
77:74:49:37:0c:d3:95:30:bc:28:6b:47:1a:fa:43:
2a:2c:14:7b:97:40:7b:80:6c:05:b4:e0:c4:cb:a8:
7f:40:8d:33:f8:ab:53:ba:c5:9a:c7:e5:62:51:79:
08:0c:99:70:cc:5f:ec:69:bb:c5:30:b1:f3:85:50:
42:65:e9:77:ff:40:d5:9f:80:17:5e:0e:3f:63:85:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:F3:BC:AF:EC:9F:E4:7A:CD:AA:86:B2:C2:4D:6A:A6:FA:CB:D6
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:19:0d:d3:7b:47:65:08:a9:00:a5:62:95:35:c2:97:fe:80:
23:17:96:fd:0a:92:ad:b0:7d:d7:cf:ac:0d:4f:e6:10:81:bc:
5e:7a:5f:7d:c7:a6:ec:80:17:e0:a1:82:33:63:fd:ab:fb:29:
b9:41:24:c0:7d:cb:b1:14:cd:6d:57:50:0f:f9:7b:7e:18:c1:
b5:67:6b:c9:fb:03:df:f6:a9:59:3a:ad:c5:8c:86:f9:a0:ef:
be:1d:51:44:62:8c:4e:82:18:45:20:33:6e:ea:da:19:a4:e3:
f8:d7:ea:e9:4a:37:2e:96:f7:09:56:56:55:5a:c1:ef:a8:20:
05:f1:73:81:48:eb:02:5b:c0:41:48:e4:4f:b6:1e:07:a0:c1:
19:26:22:70:12:7c:f2:f8:6b:90:69:7c:c0:60:9c:72:50:12:
96:85:63:3a:08:41:da:1d:95:f1:76:a2:3c:fa:04:6c:87:4f:
80:82:6e:54:bd:f3:24:67:50:11:60:fb:83:a4:0e:24:af:0b:
61:50:14:02:99:35:98:05:b7:7d:e5:a9:86:08:71:23:a3:ef:
24:de:11:38:4c:38:e6:bd:7c:14:e2:93:72:86:8e:ec:a5:86:
27:dc:24:6a:4f:54:ae:fa:24:38:d9:f4:12:76:d9:fb:e2:1e:
1f:bd:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:32 2026 by rpki-client