Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: zsB+MfqktMynJ/ZpWm9O3Dhtq1aAzbeVegqRwNJJBSA=
Subject key identifier: 2E:96:DE:EA:B7:E3:C0:30:FC:08:63:42:30:68:B4:C8:4F:B4:49:61
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019D2703A6FE9D3A8D9FDF920557C0D24CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: Cp8ZMESCO13bWJNqmZeBbdTkmDRNFYo+FBFiukOZjGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a6:fe:9d:3a:8d:9f:df:92:05:57:c0:d2:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=2e96deeab7e3c030fc0863423068b4c84fb44961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:18:9f:7c:ff:75:02:7f:52:c1:d5:14:58:
9b:8c:d2:8f:17:09:98:c4:97:f9:46:8d:fd:68:b2:
2b:f9:90:66:1a:73:84:fe:52:c5:fa:28:28:61:a7:
99:0c:0f:02:ff:6f:f5:77:f0:44:12:02:79:4c:0a:
98:ff:d8:f3:7e:47:18:12:9f:7a:c6:d6:7b:53:f2:
30:c2:e7:73:52:ab:7f:b3:2a:73:63:c0:aa:4f:91:
06:ad:00:ed:42:9c:5f:07:af:43:68:38:fe:dd:7f:
40:3a:04:e8:40:4a:5f:93:4a:48:cf:d6:c5:e6:7f:
73:fb:9c:dd:73:33:a0:89:07:a4:cc:91:bf:b3:65:
b4:c8:09:7b:02:c3:45:d9:1e:67:33:9f:dc:a8:cd:
55:f8:17:df:43:6a:9d:5b:92:31:4e:6d:b5:e0:ab:
60:1c:d2:66:81:c3:e3:75:f0:a1:bd:cc:ad:df:e8:
53:64:99:13:1e:80:be:30:71:27:b5:9f:16:ad:9e:
e1:43:83:e4:a8:d9:44:c5:21:e2:9f:46:46:ed:20:
56:af:68:db:1a:38:99:82:b5:ad:0f:a3:17:ad:85:
99:e5:a4:99:a4:3c:5b:20:31:c4:3b:26:ac:0f:1f:
bd:27:27:32:5d:88:f6:fa:02:d9:d0:87:29:ec:d2:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:96:DE:EA:B7:E3:C0:30:FC:08:63:42:30:68:B4:C8:4F:B4:49:61
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5f:1d:23:2e:69:2b:5d:c5:80:e8:4a:a0:15:a9:15:63:c1:
92:83:22:17:f7:16:55:ea:c1:c8:4e:d2:42:bb:f0:ea:6d:1a:
fe:89:fe:d6:1e:f3:f8:2c:4c:32:92:28:57:f3:5a:b5:bf:d8:
57:bd:82:cf:f4:00:3e:43:d4:d5:9d:96:84:aa:c4:a3:f7:77:
ee:65:2e:a3:e4:75:fd:75:d5:e5:60:10:0e:09:3e:43:7b:76:
ff:be:e1:99:5d:37:cd:7f:a2:79:d1:89:24:78:a3:50:89:6f:
2f:b6:28:ce:30:73:3a:c4:62:36:15:15:7e:b8:d7:f6:b2:8b:
a9:9b:03:73:66:2f:0b:03:48:66:a8:d2:c6:cc:cf:af:6e:7d:
12:12:11:4f:8c:39:7b:9d:10:a4:a1:50:fb:fe:e7:c1:ae:18:
32:bf:5a:13:d2:7f:c8:96:ea:96:ba:4c:7b:b2:d9:72:10:a5:
a8:ae:51:20:c5:d0:61:19:21:ec:ed:7d:dc:4d:9c:9d:bc:e4:
41:3b:82:9c:fd:65:77:6c:bc:cb:9b:7e:95:20:2a:60:d9:bf:
cc:f3:ad:62:01:2d:37:e5:cc:5d:b8:2d:0f:e9:28:c0:27:8e:
c0:3f:fc:55:92:ac:d0:e5:0a:c7:f5:ca:46:d9:2d:c8:de:ef:
c3:49:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:49 2026 by rpki-client