Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: lezP8EZHyEJ7dwj17gfwVridREFVeVa2M1z87Lw5znA=
Subject key identifier: 3F:31:7D:91:44:9D:7C:25:9C:A2:0C:5E:54:D3:14:DC:D0:D4:DA:A2
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 019D3262CA6FEAC458FDDE13166C5B8F259D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 1888
Signing time: Sat 28 Mar 2026 03:00:28 +0000
Manifest this update: Sat 28 Mar 2026 03:00:28 +0000
Manifest next update: Sun 29 Mar 2026 03:00:28 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: aOlXw+qz9s7o7KS5Ur/KQv16DixMWzFSUXov0ikAQ1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:ca:6f:ea:c4:58:fd:de:13:16:6c:5b:8f:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Mar 28 03:00:28 2026 GMT
Not After : Mar 29 03:00:28 2026 GMT
Subject: CN=3f317d91449d7c259ca20c5e54d314dcd0d4daa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:6d:58:9f:88:65:4c:cf:0e:5f:31:0d:c7:
92:e9:95:1e:66:62:55:35:10:76:fb:ea:dc:8f:32:
d5:d1:66:3a:85:b9:38:ad:fa:ce:60:df:da:13:c9:
71:52:61:4e:09:1b:4a:8a:72:d6:66:d4:32:5b:69:
fb:80:33:09:85:d5:49:e0:32:9a:8b:a2:05:39:4b:
1c:01:b8:89:1e:72:22:f7:0e:c7:55:c2:76:de:7e:
bd:b2:62:94:85:c0:b8:00:fc:d8:cc:57:45:c7:4f:
fa:8a:f8:f8:71:57:7c:a5:4c:56:b5:49:e3:af:f2:
f4:2c:c2:e3:c6:05:97:ac:92:f6:3b:16:5f:dd:8e:
8a:74:e4:6b:37:40:52:51:d9:2c:d0:cd:2f:5b:51:
68:41:78:5c:94:bf:87:07:e9:cf:db:4a:c3:1f:a7:
53:83:35:2f:df:90:c0:80:8f:6a:cf:9c:d5:2e:cb:
d9:52:72:af:3d:99:00:7d:9a:4d:f4:bb:ad:42:d0:
e5:5e:c7:71:8b:1c:5e:6b:ca:5c:4b:37:89:6b:26:
56:93:8e:53:dc:4d:ad:28:58:95:ca:f8:03:ed:43:
a5:fb:d0:c9:e7:2f:ec:53:ce:75:f6:e8:2c:cd:d4:
ab:ae:ac:b1:15:3d:1a:02:3d:60:f0:d9:af:8d:8e:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:7D:91:44:9D:7C:25:9C:A2:0C:5E:54:D3:14:DC:D0:D4:DA:A2
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:35:a7:2b:25:d1:a1:36:24:77:56:aa:d9:a1:82:66:36:
75:1a:c2:46:45:47:f1:c1:ed:07:d0:75:33:8f:3d:36:79:fd:
6c:e7:ca:c0:5f:07:fe:46:87:89:e3:eb:78:17:50:0e:67:46:
7d:cd:c4:79:07:22:69:0e:5d:4c:92:05:64:e7:6c:a2:b5:ce:
ff:0f:92:b7:73:cb:47:15:ed:80:a1:cf:89:e7:06:8d:11:22:
ae:47:39:38:49:38:ac:2c:16:f3:b0:b8:f0:89:ea:f2:30:81:
9f:9a:89:05:b8:c8:f5:31:05:41:c3:80:2b:b3:5a:1c:01:c1:
0d:88:eb:b5:85:9b:a7:2c:99:47:a2:06:43:78:eb:f3:14:56:
4c:d9:da:03:8c:c3:1c:3b:dd:01:4d:8a:8e:87:1c:43:2f:5c:
1e:6d:64:60:ff:9d:36:dc:ee:19:8b:be:cb:82:e5:e5:40:f8:
2b:84:88:f3:ed:a9:d1:7c:4e:4d:52:ea:9c:94:a5:69:e3:38:
30:3f:0e:ad:c0:72:87:1d:6d:05:a9:08:ca:11:63:16:dc:3f:
3c:a5:f4:28:b1:86:51:d5:bb:41:16:05:1b:0d:a0:7b:a7:98:
a9:68:81:98:dc:54:23:68:0f:35:29:03:a2:b8:66:a0:4e:5b:
c4:44:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:58 2026 by rpki-client