Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: fOtRV1wQH0wk2r1+Ym5OCW0fVv8LCmSHVwJq1yYEIuo=
Subject key identifier: C7:25:1B:69:9F:D9:A1:F6:EB:55:D6:52:D2:06:24:2C:4A:62:10:70
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 019D2703C000A4EF7AA4799ABBF5E70F5524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 03A7
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: 7NZp37jJ3kxmQn09uA6FE71AQIf4kUyadgEgEALhOqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c0:00:a4:ef:7a:a4:79:9a:bb:f5:e7:0f:55:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=c7251b699fd9a1f6eb55d652d206242c4a621070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:8b:f4:15:b3:70:a1:5b:62:1c:b5:d2:80:
67:68:e6:ef:34:8b:12:f2:37:d9:67:a3:82:8c:5f:
6d:d0:3d:66:e6:26:76:ad:75:42:de:97:50:8e:4a:
5e:ad:ba:24:e2:ac:b3:ac:52:35:b1:4d:51:3f:7e:
5e:a6:ce:5e:4b:0a:24:df:cf:9d:c0:2f:23:ec:97:
b1:a6:51:be:c1:16:12:49:f7:e0:40:b2:d6:79:cc:
74:55:fb:18:5b:dc:bd:89:36:ba:1e:a5:b4:b6:74:
45:ed:58:5b:24:6d:d4:19:63:76:ef:19:da:8b:6f:
0e:4c:c8:34:07:24:dd:f3:0a:4d:d0:99:d4:2b:c6:
11:d8:b1:3b:36:f7:5a:8e:76:54:fb:44:3c:fe:7f:
9d:d5:0b:8a:04:2b:b1:8a:a5:9f:1b:d2:b1:08:1e:
19:a4:d1:d2:99:9e:0c:2c:52:7d:44:61:9b:4a:e2:
58:24:70:03:d4:24:a5:74:86:05:36:01:e6:00:a2:
8e:ac:90:79:ee:0b:d7:9f:4d:ab:63:79:a6:15:70:
36:7d:20:ca:cc:7c:70:a5:b1:d3:12:46:81:6b:a5:
e8:91:13:c9:c7:4a:ce:86:3a:2d:ad:23:b7:77:05:
30:a8:2b:91:96:4c:d6:71:06:d9:dd:97:84:a8:e0:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:1B:69:9F:D9:A1:F6:EB:55:D6:52:D2:06:24:2C:4A:62:10:70
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:c8:ce:06:af:89:e9:8d:a3:11:cf:ba:18:a0:6f:1a:4f:
aa:c6:06:fb:60:99:47:0b:bb:08:a8:19:a8:75:8f:7e:81:c3:
5f:5c:e6:e1:b9:eb:69:93:31:83:71:df:d0:11:56:02:fa:1a:
68:ba:b8:a6:b5:8c:fa:5f:d7:1a:73:3b:ca:fd:e5:62:94:fa:
fd:45:ae:40:80:e6:e9:46:7d:3c:e4:6a:fc:47:56:92:f7:2a:
4a:c5:f2:4c:50:f2:83:b1:b1:80:b7:a5:7e:a7:10:63:4d:4c:
21:ed:b2:f9:86:ce:48:89:85:66:18:42:5d:3f:37:3a:7b:04:
4c:e0:a0:c7:86:b9:58:e4:ff:ac:b0:b4:e5:3e:b7:81:ae:91:
64:23:ba:6d:48:7f:77:79:90:7e:d3:ff:06:42:59:e6:fa:2a:
f2:05:60:ca:55:44:e9:3a:a7:2d:10:7f:12:1b:da:98:c2:8c:
03:7d:6b:e0:3d:2e:aa:29:89:76:f7:e2:23:b1:7f:c8:d9:69:
96:1c:32:d7:6f:2d:2f:73:b0:47:03:bc:89:6c:bb:18:b9:8d:
e3:6f:74:1c:42:ea:e1:20:99:31:32:24:40:50:60:0a:5d:5a:
2b:a3:af:79:c7:5f:f1:67:f5:c0:51:d0:d7:bb:44:ae:fa:29:
93:0f:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:32 2026 by rpki-client