Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: SVPiS9kX8FHYyN9eZK1wMN14tguTeupspWQPO1rmXKo=
Subject key identifier: B4:54:5A:E1:C4:E0:E1:3D:19:18:33:7E:AB:96:D9:E8:84:0A:60:60
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 019D28BBD1FE584DCDC8B43694CC9BD04D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 11BF
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: zhsK+9TWeDNQmPj7VfvFKoyLDewOnJZZ+gwuGizBheE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d1:fe:58:4d:cd:c8:b4:36:94:cc:9b:d0:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=b4545ae1c4e0e13d1918337eab96d9e8840a6060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:b3:00:f6:3e:6e:23:9b:1f:0d:7c:96:7a:
d3:74:a5:88:2c:81:ab:ed:d3:39:55:53:a5:ee:e9:
23:c8:8c:0d:14:a5:f1:79:be:ea:5a:07:9c:f1:f9:
18:f2:42:49:a5:87:cc:a7:e9:8f:95:1f:ca:38:67:
da:65:c6:ee:4a:f4:fc:f9:b1:bc:8a:68:13:df:89:
ac:7b:6e:1e:69:22:b0:e9:87:5a:c8:44:c3:c4:26:
d1:ba:5f:06:4c:57:f2:85:fa:7a:d3:f0:66:0c:c6:
85:bd:bd:7f:be:4a:d3:52:bf:0f:be:19:c1:80:1b:
39:b8:fc:5f:db:9a:71:40:a1:1d:61:56:8e:3e:c5:
22:35:47:ba:50:dc:16:45:10:05:69:73:0b:cb:15:
62:fa:21:81:77:80:63:93:d9:6f:6f:ac:82:eb:f4:
eb:23:5d:b5:9e:85:43:d2:99:70:f0:5e:1a:a1:0d:
bb:91:4c:a9:6a:4a:52:73:ae:05:28:35:61:ac:46:
d0:f1:a5:09:b8:45:d0:e9:c6:59:1e:ae:ca:4b:e0:
a5:02:44:0e:29:95:ba:3b:3a:ea:d2:9c:f6:15:42:
21:b6:af:f5:c5:d1:8a:8c:19:f5:db:4c:35:03:16:
9e:fc:02:d8:82:a2:fd:cf:ac:43:76:c1:31:f5:d3:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:5A:E1:C4:E0:E1:3D:19:18:33:7E:AB:96:D9:E8:84:0A:60:60
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:f8:97:8c:0c:2a:a4:45:e9:d9:4b:93:de:16:ec:f6:5a:
e3:5b:12:61:85:5a:73:0b:cd:0f:3f:98:85:4a:2e:07:d1:a8:
cf:ac:95:52:07:e2:bb:e1:20:9b:41:5f:e3:0e:49:9f:ab:45:
51:0a:6a:82:61:e0:52:63:e8:73:0a:6b:f4:13:92:e2:17:5e:
39:fa:88:1b:be:fa:72:16:fe:5a:ee:f6:20:70:b3:cb:2c:f8:
de:15:65:25:6c:3c:ff:af:0f:2c:c8:18:dd:30:ae:16:78:66:
ea:2e:0c:36:4c:93:c1:fb:56:4b:0b:d8:4b:6c:08:bf:93:fc:
03:97:fb:9c:b8:12:a1:2d:8c:ea:5b:f2:c5:c4:ab:36:6a:22:
68:4e:1b:c1:c5:1d:3f:ff:89:ec:35:5f:5c:c5:f3:96:92:33:
fb:cf:db:b0:d0:ab:cd:9c:d2:1e:15:b8:d2:d5:7a:60:3d:c4:
65:2a:83:74:24:d8:b5:11:f2:1b:86:cc:5c:1a:4c:5c:bf:48:
8d:6a:53:be:0d:bf:2a:22:c2:4c:b1:28:d9:57:6c:2e:da:ab:
eb:f8:51:c5:3c:55:4c:4e:58:ed:7c:1d:f0:03:57:a1:df:c1:
08:be:9d:e2:b2:ba:85:62:f4:12:06:80:02:ca:52:f0:ad:71:
84:ba:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:50 2026 by rpki-client