Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: 52MBKO51KvtGX+iypyv68cmgdUi9C/zrrQb5Bgz4MEc=
Subject key identifier: 56:11:CC:20:C3:E4:BC:92:AF:9C:F5:69:4E:96:C0:5F:48:17:E6:0B
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 019D329A6649821247D2A0302B96E4296832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 04:01:12 +0000
Manifest this update: Sat 28 Mar 2026 04:01:12 +0000
Manifest next update: Sun 29 Mar 2026 04:01:12 +0000
Files and hashes: 1: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: pMYQfatKCJhAW/AFj8ywevepYQeA0cE9hdvkklC+p/Y=)
2: yZwyp6pL6dNlodNGDiCb82xzbNo.roa (hash: LBR3tLVZPF+ibt91CHtQViRrck7hdn7NxiOMDBIBNf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:66:49:82:12:47:d2:a0:30:2b:96:e4:29:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Mar 28 04:01:12 2026 GMT
Not After : Mar 29 04:01:12 2026 GMT
Subject: CN=5611cc20c3e4bc92af9cf5694e96c05f4817e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:b8:bf:4b:75:34:9e:db:23:64:1d:05:7d:
b6:7f:d1:2d:ba:ff:9e:ce:22:58:3a:fe:40:9e:2e:
6f:d1:a2:78:8d:b4:a3:fe:d6:86:db:d8:68:72:31:
02:08:9b:ee:29:93:61:de:b5:0e:dd:ee:ae:5b:54:
5a:70:a1:37:db:eb:99:1e:9b:4e:0c:df:ef:de:d2:
74:6d:85:5a:07:be:7b:11:6b:ad:10:b1:c8:46:25:
70:f5:41:44:1f:2a:5e:10:d5:e6:55:58:ae:01:bb:
61:bb:46:d4:87:f6:3a:df:42:d3:dc:7f:06:c5:d1:
36:7a:6d:30:32:85:c9:20:cd:5d:c4:7d:b2:6d:cd:
08:b3:31:c0:29:89:37:f2:30:a4:ca:0f:66:36:06:
26:8f:25:b7:40:3d:10:ed:a8:78:64:17:79:d0:dc:
25:c2:e7:a6:f1:36:5b:54:74:e5:17:2e:e8:aa:6d:
5b:3e:2e:c5:47:ec:f9:9a:8a:5f:70:89:1c:07:e0:
44:b7:00:84:fa:2e:77:5b:60:ba:1d:3b:57:12:a1:
38:ac:a7:29:1d:6f:ca:9c:13:68:aa:15:dd:34:a6:
7d:36:cc:7c:1f:68:b6:fa:99:12:53:4b:cd:4f:f2:
aa:bd:4b:3a:60:eb:03:9b:ad:f9:4d:ed:1b:12:90:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:CC:20:C3:E4:BC:92:AF:9C:F5:69:4E:96:C0:5F:48:17:E6:0B
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:db:87:d7:18:9c:97:28:c8:a3:a3:85:42:e3:d6:8d:bd:16:
d1:6b:59:8e:80:07:62:f2:7c:bb:f4:b9:03:08:d3:94:40:94:
6a:c3:ee:ce:69:e5:1e:08:0d:81:a5:a8:a0:90:ac:59:fe:40:
7a:95:79:61:e7:27:ba:a5:bf:aa:bf:b5:1e:e5:75:d4:21:c6:
f0:7c:4d:e1:d0:68:55:2c:0f:3b:54:eb:fe:32:e6:bc:68:f0:
e9:b6:f0:48:01:00:e6:5b:a5:47:6d:fb:a0:c4:34:e3:c8:92:
5a:ba:6f:85:25:e1:8f:c4:fe:72:4e:2c:44:96:48:59:e9:35:
08:5e:c2:78:93:e9:10:7e:de:ba:59:f8:78:de:18:de:b0:37:
af:75:dc:55:8c:a0:62:f9:2d:86:54:ec:b4:f9:75:d9:40:0a:
3f:24:76:98:c3:2c:fe:d3:69:1f:98:1c:0a:cf:81:ca:a3:c7:
3c:d0:dc:d7:49:fc:1e:10:af:d0:9d:da:8a:16:58:ad:f3:2c:
cb:7c:02:d1:13:fe:98:d0:6f:4f:be:79:d2:4f:d2:c0:87:ad:
f7:75:43:33:d6:21:96:fe:9c:54:c5:c1:da:f3:39:0c:f2:6b:
8a:5a:16:69:78:3e:80:4e:91:d5:42:dc:56:ae:5e:fd:7c:a3:
f5:b2:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:46 2026 by rpki-client