Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
File: TYJcWjaxil5MorUyJtWgW1kN3J4.mft (raw, json)
Hash identifier: uA4lKgN7zm44Qxg67lSjGs4HsWhucAAtw2tqpkkLMsg=
Subject key identifier: BF:78:7E:A0:DB:39:E9:BD:A4:56:4F:82:C8:3F:55:F5:DE:7A:8E:27
Authority key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
Certificate issuer: /CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e
Certificate serial: 019D26CD7036465EB227F12EE08FA6BB5A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
Manifest number: 018A
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: TYJcWjaxil5MorUyJtWgW1kN3J4.crl (hash: 7QeL+MnPUtEa7ceVDVqoJDOaPfdlmaFQCwCCD2nXMJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:70:36:46:5e:b2:27:f1:2e:e0:8f:a6:bb:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=bf787ea0db39e9bda4564f82c83f55f5de7a8e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:d0:bd:79:44:66:5e:f3:eb:a0:7b:bf:ab:
d8:ca:ad:65:9f:78:70:bc:28:e4:3b:8f:c9:11:8f:
39:1b:14:a5:88:bf:82:f3:c4:fb:01:89:90:4c:f6:
1c:dc:10:20:0f:42:73:d0:df:d0:f9:10:47:33:ce:
e2:e1:f1:6a:21:e4:9a:62:44:5a:d8:10:ff:0a:62:
87:f3:17:88:cb:b3:fe:db:c5:b0:f9:8c:f6:3a:e8:
cb:ed:b5:a7:ab:33:bc:88:8c:c2:3a:49:97:e6:e8:
da:3a:dc:49:74:3e:a1:bd:db:9f:e5:9f:86:5f:25:
ae:7f:11:4e:9c:95:f3:dd:24:58:fc:eb:89:1b:a8:
07:89:f8:04:cf:dc:75:31:39:83:2a:54:77:90:4e:
a0:75:b6:b5:62:6f:6f:6a:f9:48:3c:08:9e:96:a5:
32:41:6e:10:f5:41:b9:3e:93:c4:54:e5:d0:fe:c4:
7f:87:aa:46:05:be:fe:ad:71:e3:fc:78:2a:6c:f0:
fd:85:7c:2e:1b:2a:99:99:ce:97:36:df:7b:49:72:
52:d6:47:e6:6e:76:44:63:13:7f:26:67:bc:45:a7:
3e:c7:2d:6f:24:75:52:01:9b:a7:45:c4:f0:8c:0a:
fe:9e:cc:29:4f:df:4c:31:be:32:10:6c:27:9c:de:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:7E:A0:DB:39:E9:BD:A4:56:4F:82:C8:3F:55:F5:DE:7A:8E:27
X509v3 Authority Key Identifier:
keyid:4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1a:59:63:b0:bc:1e:a8:de:05:e3:1c:24:0c:ab:9d:0d:9f:
7e:96:5d:23:1d:b5:5e:c8:86:50:6a:d8:59:b5:e9:90:b8:0d:
4a:f3:f8:67:19:27:30:9e:56:39:49:85:01:cf:cd:64:5e:75:
d7:bf:41:1e:f5:3e:a6:5d:a2:71:8d:1b:98:c2:3d:ef:7a:7e:
2f:52:d4:b5:13:88:ca:02:a6:42:46:0e:96:0e:5c:29:6b:1e:
eb:2c:0a:bd:f8:18:09:2d:9d:56:75:ff:6a:f7:57:a2:51:08:
09:53:cf:02:0c:78:03:14:d6:17:11:dd:ad:57:e3:ca:44:3f:
c1:e4:db:f4:a5:f9:74:ac:c9:f8:d8:45:7a:d7:77:24:ef:31:
41:3c:e2:4d:6e:4e:ab:50:c1:7e:80:91:b3:fc:a4:58:31:7b:
06:9a:8d:d7:33:d6:32:80:68:dd:76:c8:75:8f:eb:3e:dd:b8:
66:52:79:14:04:54:d6:cf:df:f0:68:4c:3f:60:d2:0a:22:4b:
9f:6b:c5:0f:39:d0:dd:28:10:53:88:af:f0:5d:28:98:e7:e6:
d5:2e:b5:a4:d0:6d:88:dc:21:bd:e0:90:7f:20:19:7d:07:85:
dc:dd:02:32:91:aa:00:62:cd:eb:28:0d:50:13:60:9a:13:ad:
86:e3:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:48 2026 by rpki-client