Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File: T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier: ZXihxBuOcH+iwO4gx67ih2KvILAnUoIy6oDccOgjt98=
Subject key identifier: DA:04:2D:06:4B:14:2E:1C:65:B9:9C:0C:C9:53:FA:2B:1C:55:44:AC
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer: /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial: 019D28F2B4E2EB1C00F9A5EAD9783C683255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number: 119D
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: pnOlM47wo5a4kB5fGazRlvo/CRXtHLBHauv9FTr3jLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b4:e2:eb:1c:00:f9:a5:ea:d9:78:3c:68:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=da042d064b142e1c65b99c0cc953fa2b1c5544ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:5d:32:3a:ec:0f:94:36:69:ba:29:21:6a:
1d:81:58:bc:eb:b3:a9:74:9d:10:b0:0d:33:d7:f7:
8f:37:52:ad:a2:b1:77:0e:cf:f2:39:53:cd:7c:0d:
86:2d:d2:9f:17:31:77:85:28:f6:b1:44:aa:d4:2c:
07:0f:07:86:5a:e0:ca:9e:b4:85:f1:5a:05:22:e6:
a0:4b:82:66:a4:b6:7f:f8:20:0f:f9:e8:db:a7:e9:
9e:02:4f:b3:95:0e:5d:ca:93:fc:e3:5e:3b:dc:ae:
39:c5:60:e1:81:b5:92:e2:36:0d:71:b8:57:ad:51:
79:4e:ca:7b:0a:b8:d4:94:fe:7c:8f:19:2a:16:88:
d1:60:67:7d:23:46:27:16:af:2b:9c:52:4b:bf:84:
b0:fb:a9:e8:d7:c3:1f:86:49:7e:88:a6:f7:87:f5:
85:c4:57:91:38:1b:bf:02:83:ee:4e:ad:84:c9:3b:
53:33:16:ea:88:58:01:cc:01:48:fc:ad:24:88:99:
ba:52:be:88:4f:36:c1:aa:dd:22:9f:bd:d8:e7:3b:
68:d8:df:d2:72:81:57:24:f0:87:08:c3:df:38:d6:
ee:0c:9a:cf:d7:ff:81:bc:65:e0:96:7d:8b:30:dc:
c6:e9:d6:78:61:5d:09:93:2a:24:7e:d2:32:d1:ab:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:2D:06:4B:14:2E:1C:65:B9:9C:0C:C9:53:FA:2B:1C:55:44:AC
X509v3 Authority Key Identifier:
keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:88:a2:6d:a8:41:05:5d:37:67:dc:77:b0:fd:15:8f:ac:
0b:6f:df:58:b8:a6:7f:4d:0b:ff:dc:ed:75:76:36:fe:6e:2a:
8a:8c:44:a9:12:15:24:91:de:86:82:a3:95:e8:14:51:71:67:
0c:6b:19:2f:9b:f4:5f:e7:f3:9c:e3:25:65:c9:e8:45:08:a0:
b5:9e:33:d4:e3:ed:ed:e4:f9:0f:72:b4:7e:f7:9d:37:35:75:
4b:dd:2b:a1:83:07:f2:2b:65:b1:18:1f:df:ce:b4:34:2f:06:
00:99:10:21:df:af:e4:ec:1d:41:d8:7f:be:95:e9:98:47:c0:
b9:dc:02:d3:c9:6b:49:66:2f:e9:35:cc:aa:e3:25:c1:17:0f:
d6:d8:0c:b6:22:cb:9f:29:66:33:e4:a6:c9:77:27:c1:46:6a:
2c:a0:14:45:58:e3:f4:73:38:76:be:06:88:ed:cd:26:fb:b9:
6b:97:e5:46:6a:fc:28:61:ba:6c:df:7c:47:76:73:87:c3:2f:
2a:bb:56:0b:dc:da:8d:5a:87:21:45:93:0a:e6:c4:19:6f:04:
d5:8c:81:56:ea:dc:51:0e:c8:04:15:19:14:2d:af:8f:df:a4:
2f:da:78:ed:99:77:46:79:d5:72:fa:f2:f9:19:7a:5b:59:60:
5b:de:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:30 2026 by rpki-client