Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: xADCc8Q12aFQLFXKZuTjwgTVlZvwdfQDBuBHArfMP4A=
Subject key identifier: A4:A7:BA:E7:1E:45:D4:25:F8:18:33:0C:0D:91:63:36:0E:93:8D:15
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 019D2AA920DC651F650E1E704D5323B70C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 15:00:20 +0000
Manifest this update: Thu 26 Mar 2026 15:00:20 +0000
Manifest next update: Fri 27 Mar 2026 15:00:20 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: Cj698jyep9J+eEK9qdRzJ0OOU6FQrpe9qS9IP3HEQ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:20:dc:65:1f:65:0e:1e:70:4d:53:23:b7:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Mar 26 15:00:20 2026 GMT
Not After : Mar 27 15:00:20 2026 GMT
Subject: CN=a4a7bae71e45d425f818330c0d9163360e938d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:f5:82:ce:4f:cc:dc:4c:59:99:f8:11:6e:
28:06:12:1f:55:26:ba:6b:9b:50:35:ef:93:0b:b9:
83:60:18:73:46:37:b9:1e:e5:20:e1:96:d0:7b:c3:
d8:c2:3f:07:a9:f2:a1:ef:b3:12:ae:30:3c:ba:80:
fa:ed:85:96:52:af:98:e5:d0:0f:b2:a5:16:1d:59:
31:f9:54:24:0f:45:23:a8:26:ca:14:6d:83:63:60:
fc:5f:d1:be:94:26:99:49:c0:18:84:90:3f:81:7a:
ae:68:e8:94:c0:0a:cb:73:0d:72:e7:f3:31:09:46:
72:31:c5:d1:cc:3e:33:2a:c6:4b:ae:32:a9:88:b3:
8c:d0:0e:50:88:79:c4:57:5a:63:a9:78:be:69:52:
0f:5b:ef:4a:f8:9a:81:69:06:6c:5d:f9:26:b8:1b:
f4:ac:ba:02:ff:c7:12:13:39:7d:d3:80:17:aa:98:
38:2f:1c:83:30:fd:67:74:38:ab:6a:25:e4:7b:6e:
68:36:33:e1:8f:b8:3d:7d:63:87:9e:0b:9a:ba:94:
02:44:cb:08:c8:99:72:6e:f8:65:14:1f:f4:ef:64:
e5:a7:46:ff:3f:92:1f:88:aa:9d:7c:91:b7:2d:b3:
ad:f8:4c:90:f5:c5:ae:66:4c:ae:d1:37:e8:fc:aa:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:BA:E7:1E:45:D4:25:F8:18:33:0C:0D:91:63:36:0E:93:8D:15
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0a:05:a4:d9:1f:d5:7c:00:2a:f8:4c:2a:c7:9d:8d:3c:ec:
b7:0b:2a:9a:ff:ea:c0:ba:48:e2:bc:84:85:2e:e9:be:8a:58:
12:bd:06:3a:6b:4e:57:a1:1d:1b:0a:52:2b:b9:31:cf:e3:d6:
a1:cc:91:81:10:49:0f:48:78:0f:a3:ec:88:83:69:a1:33:27:
70:5f:5f:1b:e2:db:be:f4:93:c3:f3:c7:8f:59:39:1e:bf:5f:
35:67:36:5d:a2:ba:84:9c:29:38:ef:48:e8:22:e6:58:2c:d9:
ce:50:a9:7a:ca:43:f3:27:8e:7d:a9:64:d2:d7:0f:13:f5:38:
84:09:ec:82:58:62:ba:7c:d1:15:fa:3c:63:83:c7:c8:1e:e5:
7b:39:0e:e9:8c:7a:98:f3:89:a4:b1:2b:14:f2:4d:16:ce:3f:
68:2a:fc:8e:d1:76:c1:df:0d:f2:a9:9c:1d:f6:c0:35:91:9b:
21:a7:c2:d7:1a:c2:69:f1:70:b6:d4:f5:25:c9:91:a5:bb:fe:
95:21:a2:28:33:b1:6a:f1:c9:54:03:a4:c8:92:b8:4d:75:40:
2f:32:be:fd:5c:63:99:6c:1a:74:b6:18:3c:45:56:39:3a:83:
99:eb:97:ec:b6:ec:49:07:82:0c:09:bb:1b:3d:9d:f6:a2:04:
f2:84:b5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqSDcZR9lDh5wTVMjtwxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2U5OGI4YzI0MjY4NWRkYjYwZjRlMjEwOWMyYmQzNTFh
NjQyN2YwHhcNMjYwMzI2MTUwMDIwWhcNMjYwMzI3MTUwMDIwWjAzMTEwLwYDVQQD
EyhhNGE3YmFlNzFlNDVkNDI1ZjgxODMzMGMwZDkxNjMzNjBlOTM4ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9H1gs5PzNxMWZn4EW4oBhIfVSa6
a5tQNe+TC7mDYBhzRje5HuUg4ZbQe8PYwj8HqfKh77MSrjA8uoD67YWWUq+Y5dAP
sqUWHVkx+VQkD0UjqCbKFG2DY2D8X9G+lCaZScAYhJA/gXquaOiUwArLcw1y5/Mx
CUZyMcXRzD4zKsZLrjKpiLOM0A5QiHnEV1pjqXi+aVIPW+9K+JqBaQZsXfkmuBv0
rLoC/8cSEzl904AXqpg4LxyDMP1ndDiraiXke25oNjPhj7g9fWOHnguaupQCRMsI
yJlybvhlFB/072Tlp0b/P5IfiKqdfJG3LbOt+EyQ9cWuZkyu0Tfo/KrpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSnuuceRdQl+BgzDA2RYzYOk40VMB8GA1UdIwQY
MBaAFEzOmLjCQmhd22D04hCcK9NRpkJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNzlkMzgtYThlYS00N2MyLTk1ZGMt
ZDE5NGE3YjA1ZGRhLzEvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lNzlkMzgtYThlYS00N2MyLTk1ZGMtZDE5NGE3YjA1ZGRh
LzEvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwoFpNkf
1XwAKvhMKsedjTzstwsqmv/qwLpI4ryEhS7pvopYEr0GOmtOV6EdGwpSK7kxz+PW
ocyRgRBJD0h4D6PsiINpoTMncF9fG+LbvvSTw/PHj1k5Hr9fNWc2XaK6hJwpOO9I
6CLmWCzZzlCpespD8yeOfalk0tcPE/U4hAnsglhiunzRFfo8Y4PHyB7lezkO6Yx6
mPOJpLErFPJNFs4/aCr8jtF2wd8N8qmcHfbANZGbIafC1xrCafFwttT1JcmRpbv+
lSGiKDOxavHJVAOkyJK4TXVALzK+/VxjmWwadLYYPEVWOTqDmeuX7LbsSQeCDAm7
Gz2d9qIE8oS1nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:21 2026 by rpki-client