Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: 8Y3vcjpSf2eYPwmImXf0xZIhAFxKZdhvux/xV2GZH3g=
Subject key identifier: AD:8C:9A:D1:61:DD:27:62:56:C8:0F:2D:B2:FE:BB:3B:EF:38:61:44
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 019D28F2AE7C8155C5C479C1AEE29585AAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 164E
Signing time: Thu 26 Mar 2026 07:01:26 +0000
Manifest this update: Thu 26 Mar 2026 07:01:26 +0000
Manifest next update: Fri 27 Mar 2026 07:01:26 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: L/mdJd9xdvfODzHOHFk6AAgNHxJSaCRb3dBt5rqJrK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ae:7c:81:55:c5:c4:79:c1:ae:e2:95:85:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Mar 26 07:01:26 2026 GMT
Not After : Mar 27 07:01:26 2026 GMT
Subject: CN=ad8c9ad161dd276256c80f2db2febb3bef386144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:06:8b:e5:db:69:06:3a:9a:19:65:74:fe:
d2:c8:9b:f2:3a:e0:0a:0d:50:cd:10:09:8e:72:22:
f3:1d:67:f3:0b:2d:fe:45:26:b6:b5:34:78:4a:42:
b7:23:73:ae:70:2a:2a:ba:73:01:b4:8f:f1:8a:01:
0e:eb:a3:33:95:a4:20:1c:5f:b5:84:ed:03:56:65:
59:c5:88:48:74:9c:8c:67:43:49:d0:13:d1:18:f6:
fe:7e:5c:00:40:a6:83:ab:b7:ac:97:9e:7a:b5:9e:
e9:a7:48:79:54:df:3f:ce:78:6f:af:94:6b:d5:01:
90:7a:01:ba:25:86:63:2a:03:4d:a3:66:d7:48:11:
29:f3:4c:a4:4f:50:07:93:47:ca:d6:52:93:e2:5f:
57:2a:c3:da:4c:7a:2b:c6:2b:63:f1:84:69:48:13:
0a:49:b6:91:0a:b5:78:f2:27:a2:f3:5d:d9:59:59:
c2:fe:d5:1d:6a:c9:97:6c:5d:c9:8a:17:bb:a8:60:
50:93:30:33:0e:12:b5:03:ba:4d:55:2d:3c:63:26:
aa:72:55:77:7e:c2:aa:c3:d3:37:d0:a1:c5:bf:13:
12:73:48:b8:96:6a:8a:38:24:95:8e:98:17:52:0e:
d3:8e:04:b0:fd:bc:bf:6f:7c:52:66:98:6a:94:67:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:9A:D1:61:DD:27:62:56:C8:0F:2D:B2:FE:BB:3B:EF:38:61:44
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:c5:e1:9d:cb:8b:e6:40:b9:8f:7f:ac:36:85:48:f3:49:
07:81:dc:2f:73:8a:3f:02:5f:b0:a2:1e:bc:2b:10:45:9f:7f:
de:0d:b2:1b:4f:de:39:66:1b:cc:c8:c5:e8:96:af:6a:b5:d5:
7d:a1:84:31:5b:b5:23:8a:70:a3:54:3c:94:60:79:bd:7e:dc:
67:5e:6a:4b:12:13:69:68:69:58:0b:5d:2c:fa:e8:c2:ab:4a:
a4:31:ca:9c:ed:59:f2:2f:09:35:5a:d1:be:0e:0c:2e:88:27:
ea:ce:cb:4a:ad:de:f4:f8:c7:01:15:48:33:9f:ed:ec:49:b6:
54:47:49:78:03:2a:fa:cb:26:9e:9a:e6:f7:3b:a5:97:ff:2f:
ae:9d:d0:f8:f2:bd:4e:0d:d0:3a:96:0c:b4:ae:fd:10:de:b3:
3c:1c:de:1a:e5:1a:41:72:39:be:b9:01:66:a8:60:0e:60:40:
55:df:ee:37:fd:74:02:c8:51:88:df:62:90:ed:36:7b:10:4f:
eb:bd:01:fd:c6:8f:d7:cd:e7:d7:76:e8:2b:68:81:bd:b3:64:
b7:b5:7c:e1:fa:fa:58:20:74:9c:01:cc:d8:77:f9:de:02:3b:
d2:74:3e:9b:00:da:9c:91:e4:42:92:0b:25:52:27:77:44:47:
3f:96:92:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8q58gVXFxHnBruKVharBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDdjNzNkYmExYTk5ZjViYmMxNWY3OGM2MzkwYWE5OWMy
Njk4MjQwHhcNMjYwMzI2MDcwMTI2WhcNMjYwMzI3MDcwMTI2WjAzMTEwLwYDVQQD
EyhhZDhjOWFkMTYxZGQyNzYyNTZjODBmMmRiMmZlYmIzYmVmMzg2MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8Gi+XbaQY6mhlldP7SyJvyOuAK
DVDNEAmOciLzHWfzCy3+RSa2tTR4SkK3I3OucCoqunMBtI/xigEO66MzlaQgHF+1
hO0DVmVZxYhIdJyMZ0NJ0BPRGPb+flwAQKaDq7esl556tZ7pp0h5VN8/znhvr5Rr
1QGQegG6JYZjKgNNo2bXSBEp80ykT1AHk0fK1lKT4l9XKsPaTHorxitj8YRpSBMK
SbaRCrV48iei813ZWVnC/tUdasmXbF3Jihe7qGBQkzAzDhK1A7pNVS08YyaqclV3
fsKqw9M30KHFvxMSc0i4lmqKOCSVjpgXUg7TjgSw/by/b3xSZphqlGei3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2MmtFh3SdiVsgPLbL+uzvvOGFEMB8GA1UdIwQY
MBaAFE4Hxz26Gpn1u8FfeMY5CqmcJpgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQt
NTYwMjcxMmJhYTViLzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQtNTYwMjcxMmJhYTVi
LzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnzF4Z3L
i+ZAuY9/rDaFSPNJB4HcL3OKPwJfsKIevCsQRZ9/3g2yG0/eOWYbzMjF6JavarXV
faGEMVu1I4pwo1Q8lGB5vX7cZ15qSxITaWhpWAtdLProwqtKpDHKnO1Z8i8JNVrR
vg4MLogn6s7LSq3e9PjHARVIM5/t7Em2VEdJeAMq+ssmnprm9zull/8vrp3Q+PK9
Tg3QOpYMtK79EN6zPBzeGuUaQXI5vrkBZqhgDmBAVd/uN/10AshRiN9ikO02exBP
670B/caP183n13boK2iBvbNkt7V84fr6WCB0nAHM2Hf53gI70nQ+mwDanJHkQpIL
JVInd0RHP5aSOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:33 2026 by rpki-client