Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: VUxWDBsreK6IgaKCSSU5tM490PKZHdbjN6JTOi5XnAs=
Subject key identifier: D2:8E:0B:80:04:6B:9A:64:30:98:E0:F4:7A:D5:0B:3C:B0:11:F4:BD
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 019D28167EC20756A849AB40DECB82C43D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 0700
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: XD+WLFMFS0oidpuFGN33bUXG5lX6Ta1HOtvPOyFTYxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7e:c2:07:56:a8:49:ab:40:de:cb:82:c4:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=d28e0b80046b9a643098e0f47ad50b3cb011f4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:b5:d5:3f:8f:0f:74:09:05:42:2b:c5:b1:
67:6a:a6:13:e7:bf:11:4a:b7:25:05:f8:dc:4e:8a:
ce:eb:a6:23:ef:0b:1b:49:5b:c1:47:de:f7:8a:a3:
df:04:73:c2:b8:5b:c6:39:2b:03:3c:76:fd:47:f9:
2d:7c:e3:89:20:c6:9f:15:0c:4a:52:e1:eb:ed:f8:
2e:86:39:22:5b:27:0a:2a:4a:75:f5:d2:b4:45:e9:
fe:4b:a7:20:23:7f:7f:57:09:d3:1c:7d:85:ac:42:
18:75:7b:2d:e2:53:4f:c2:6f:6e:74:9c:61:12:1b:
06:63:0f:5f:58:57:30:bd:bb:1f:d8:00:c4:c5:7a:
71:da:5f:1a:33:c3:d6:9f:0f:90:60:ea:64:43:99:
45:aa:80:58:2d:8d:72:e3:b8:52:57:61:b7:e7:c4:
68:b3:9e:06:83:e3:ed:0c:e1:36:17:cd:b8:64:32:
96:63:21:7b:ca:bc:0a:ae:c9:fd:0a:f2:25:a8:4c:
d9:c0:6e:5a:f2:7e:78:ee:d0:2e:60:43:3b:8f:ef:
8a:32:36:01:08:85:c7:45:cf:4b:a3:8b:16:e8:fe:
84:75:a2:59:cb:db:1e:a6:b4:e5:66:9b:c1:88:f1:
99:1c:d8:5e:86:d8:3f:43:95:c7:ea:01:41:b2:18:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:0B:80:04:6B:9A:64:30:98:E0:F4:7A:D5:0B:3C:B0:11:F4:BD
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9f:67:a5:2c:f0:d6:60:4d:9e:72:03:0e:a8:c0:0f:ae:95:
0a:bb:84:07:59:75:54:f3:f4:a3:47:01:0b:dc:43:b7:c8:26:
5c:93:f4:f3:a7:db:1f:27:37:33:ab:7d:8f:98:5a:86:c7:7e:
42:fc:68:d6:db:d9:76:dd:c5:f4:bf:c7:eb:da:1b:5d:d2:77:
23:a8:65:8e:2b:bd:c1:51:49:86:b0:3a:eb:f1:4b:21:01:98:
6b:4f:5c:2b:58:2f:2c:34:53:75:70:07:10:e1:ee:b2:e8:db:
34:90:ea:31:19:6d:d1:7f:15:d9:a9:59:a1:5a:57:7d:5e:b9:
bd:67:56:04:4c:01:5c:3e:67:8d:10:9c:70:44:29:28:f9:c0:
c8:b5:92:7e:c3:05:35:2c:2e:b0:98:ed:d8:63:03:0b:6f:d9:
05:ab:36:62:7c:6b:88:d8:06:b5:1b:54:ad:f4:54:09:7d:92:
b2:46:0e:89:ec:a4:1d:a9:83:38:5f:a0:b8:9b:b2:f6:89:05:
57:9f:b7:df:d5:84:54:87:77:26:d1:fc:39:de:17:15:a6:bf:
26:bf:31:40:66:d2:1f:48:4d:b7:f4:f8:dd:a4:1a:3a:5f:01:
7b:f0:b4:bb:30:f8:ff:93:95:0f:76:f2:c0:13:e3:ea:e7:a5:
f8:4d:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:07 2026 by rpki-client