Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File: TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier: OaxyGLuZfeBJWyVztGKuLjpHQdRYOLPUd4/Y6A/vYxs=
Subject key identifier: 1A:0C:B7:5A:6E:CC:3D:28:E3:96:42:90:0F:68:1C:DD:81:49:46:55
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer: /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial: 019D2A3C37971DFCB08C40101AD17722B05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number: 1645
Signing time: Thu 26 Mar 2026 13:01:22 +0000
Manifest this update: Thu 26 Mar 2026 13:01:22 +0000
Manifest next update: Fri 27 Mar 2026 13:01:22 +0000
Files and hashes: 1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: OAkhEONIBpJWrhztciVKvV/B9iFlDZaR6zvMY+1G7P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:37:97:1d:fc:b0:8c:40:10:1a:d1:77:22:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Validity
Not Before: Mar 26 13:01:22 2026 GMT
Not After : Mar 27 13:01:22 2026 GMT
Subject: CN=1a0cb75a6ecc3d28e39642900f681cdd81494655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:b2:66:a4:8e:ba:18:b5:39:c2:a9:71:87:
45:ff:ad:fb:17:5b:24:fc:79:52:5d:8a:b2:9d:bc:
f5:4c:89:3f:4b:a9:f0:1b:d4:4d:58:33:7f:f7:92:
08:2f:e1:09:1e:9f:34:d0:04:a7:90:04:c3:5b:d2:
d8:41:5a:7b:3d:f3:ef:68:eb:de:4f:dd:f5:4c:1c:
0e:7f:75:e5:a8:6c:44:58:90:5f:65:2e:07:6a:eb:
3f:b7:b3:eb:64:d9:8c:ab:95:48:cc:ae:9e:a5:13:
40:e3:61:38:b6:de:de:2c:5f:7d:64:64:0a:66:2c:
6f:d3:cb:69:b8:e0:3f:73:17:d7:2d:03:5b:ce:7c:
42:6e:ec:d9:66:da:bd:84:f2:52:0b:53:a1:f0:fc:
aa:0f:36:2a:a1:17:b5:0a:e8:b9:11:89:f2:d5:b4:
62:8f:db:a3:33:fe:eb:f2:7e:dd:5c:bd:b6:74:09:
a2:e0:f6:78:e9:42:34:4e:5d:5c:6c:c6:64:cf:75:
58:f7:92:93:ca:b2:87:fd:da:5f:c4:34:29:59:16:
2a:2d:b9:81:a2:83:9e:e4:3d:b6:79:9f:d9:fd:4b:
45:2e:d8:d9:02:5f:bf:3e:6b:42:12:a4:b9:ed:cc:
65:a0:0c:2c:ac:bf:94:6d:6a:5f:9c:67:71:35:23:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:B7:5A:6E:CC:3D:28:E3:96:42:90:0F:68:1C:DD:81:49:46:55
X509v3 Authority Key Identifier:
keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:88:ea:60:03:ea:f4:64:67:67:cf:50:45:99:4c:18:55:4e:
e9:18:db:a6:a0:96:57:ec:b4:62:19:5b:8a:ae:ba:47:05:f7:
c5:84:61:c1:ac:70:90:d8:da:15:db:b8:28:13:2b:7d:e4:52:
7c:65:c7:ec:2d:c4:63:ba:73:cf:17:82:3a:60:6e:70:c5:50:
09:c8:55:9b:af:be:3a:9a:36:3a:0b:ff:dd:af:e3:db:a0:55:
34:13:6e:70:3f:c5:fc:6c:b0:42:29:ed:5c:35:8d:e4:fa:67:
15:ad:7b:65:a4:29:52:4b:92:75:73:d2:e4:22:2a:d3:f5:f2:
25:4e:b2:1c:3b:be:d3:0c:d9:eb:63:b3:2e:e4:50:ca:15:34:
4a:76:59:7a:7d:31:26:cc:36:06:fb:3d:a4:14:a0:73:6c:d0:
ce:bd:8c:db:02:69:31:95:05:98:b3:0c:7f:09:7c:b9:f5:64:
bf:a9:33:58:db:98:21:f8:ad:35:d6:f1:85:0f:c7:f9:4d:7d:
29:b4:fb:9a:72:de:1a:93:ad:23:07:56:1d:c2:e4:68:18:4b:
71:84:55:a9:35:e4:d9:6d:30:47:ba:dd:3c:59:06:9c:c8:6d:
28:f5:ba:a4:d2:27:fd:ea:02:93:17:01:65:c1:2f:cd:dd:d4:
98:90:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:59 2026 by rpki-client