Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: LX/AOGtJtAU/Bz0EIVrfc0HJgeAN46w+J9j/7JnWWgs=
Subject key identifier: D5:68:4C:10:53:AF:58:60:8C:A2:E4:04:E8:C0:6A:0D:75:7D:11:99
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019D25F14A7C59A780F7C923B62AB315CFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 15D2
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: HhAHpD0S0gqxmhjJldeR/Yjq0TkGhF3EnMeZgM5oPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4a:7c:59:a7:80:f7:c9:23:b6:2a:b3:15:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=d5684c1053af58608ca2e404e8c06a0d757d1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:90:5e:9b:57:fb:40:e1:3c:53:a0:b1:61:
33:4d:01:58:1c:57:26:03:65:a3:b4:86:e0:ef:a4:
78:07:4a:27:c5:68:60:39:4e:d9:3f:69:7a:0b:34:
a0:06:e7:dd:ed:91:11:ea:b3:21:d2:6d:77:73:dd:
13:c4:f6:8d:70:a6:16:4e:05:f1:fb:30:8d:d0:4d:
6a:fe:f8:4f:b5:21:56:43:47:41:74:00:37:8b:11:
54:11:e6:e2:ce:f1:16:b2:42:9f:17:45:8a:90:dc:
9d:f6:81:f8:69:e7:bc:27:05:20:bc:a5:ee:58:40:
05:c6:74:54:24:68:ab:35:72:a9:33:b4:8e:63:01:
e0:a3:14:33:b4:91:15:7a:73:6e:78:e8:da:13:82:
13:7f:3c:b7:7f:1c:59:f4:50:f8:7e:2f:6e:72:3a:
90:10:90:42:a8:03:a3:23:9d:28:8b:24:4e:79:ad:
21:72:17:a5:64:8e:f6:08:88:46:3d:2b:5c:09:51:
b3:9c:4d:8e:53:f6:98:6b:73:d1:b0:09:61:c2:ca:
49:0d:b0:eb:96:3a:07:e7:96:a9:0f:71:48:71:4f:
3b:fe:e6:0b:36:f9:8a:d0:d7:4e:d3:05:f1:e7:4d:
6f:c4:23:db:c6:a1:9f:da:d4:f7:e8:86:16:f8:7e:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:4C:10:53:AF:58:60:8C:A2:E4:04:E8:C0:6A:0D:75:7D:11:99
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:68:b0:43:ec:7e:f1:bb:b3:bb:1f:6d:2e:b2:28:5a:4a:
4d:92:9b:78:98:fe:0e:af:95:37:4b:b2:21:37:fe:68:d8:52:
dd:2c:c4:c9:40:7d:24:51:9f:de:a1:a1:2e:02:ec:22:6d:3f:
4c:c2:f7:33:b2:95:22:80:78:c6:9e:0e:8d:d9:05:83:23:2d:
1c:ed:d4:d9:44:32:7f:4a:49:e7:39:06:83:c7:20:19:55:45:
2a:e9:fa:6c:33:32:29:3e:79:99:0c:70:59:09:bf:71:02:04:
ea:47:48:a1:1b:42:dc:c8:1d:41:33:00:30:2b:c3:1b:35:3d:
a8:74:92:a8:04:c3:5e:72:8a:91:a0:48:a8:d9:dd:c0:f2:4f:
0b:1f:42:70:18:74:e9:b6:2d:d0:95:c7:58:55:b7:de:b6:dd:
6d:72:87:2b:d1:5a:58:aa:f5:ff:91:82:3c:1f:ac:2f:fe:fb:
e1:6d:70:b0:d1:9f:8c:fc:39:87:f5:b6:1a:26:87:31:43:f6:
4a:55:fa:b2:e3:7a:03:2e:e0:d5:6a:e1:06:19:57:49:c5:34:
b1:c5:fd:6b:86:7f:5a:19:39:1f:25:1a:b6:51:97:44:f7:ce:
17:8e:90:ac:67:a2:52:81:17:cd:e4:7d:36:dd:2e:64:65:19:
fd:5a:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:26 2026 by rpki-client