Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft (raw, json)
Hash identifier: 7Qf2gKgZXZcvfazyUt8p+dslLsd2RscIyyJrj/LuauA=
Subject key identifier: B1:F4:A7:93:43:65:16:8B:DF:C4:4B:2E:98:14:11:63:79:53:23:94
Authority key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
Certificate issuer: /CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Certificate serial: 019D2703C68D720C3DE42DB8864897020142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
Manifest number: 0825
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl (hash: bF3HzKfFtQUo/tZg2mYpUxAAJ07aX5VONXJ2kCaJNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c6:8d:72:0c:3d:e4:2d:b8:86:48:97:02:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=b1f4a7934365168bdfc44b2e9814116379532394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:ce:8b:f0:b3:83:71:72:79:27:a5:76:e9:
6d:2b:c0:84:58:d0:1c:76:0e:e1:ac:e8:7b:35:d4:
1a:f5:bd:c7:28:d9:86:f3:76:1e:ad:51:60:12:79:
c2:d5:38:15:19:d6:cf:14:b9:af:3c:51:e2:a8:9d:
ce:6c:78:40:4f:7e:96:62:5c:64:0c:f9:b4:fc:7a:
eb:e9:68:de:e5:4e:ff:a9:72:c6:64:59:5e:52:c0:
14:3d:d3:9d:39:11:15:25:94:cf:81:10:af:b6:f7:
5b:a1:fc:51:26:51:26:e7:f2:8b:cb:da:a9:68:57:
d7:c6:00:78:e1:7d:ba:f8:c8:0e:21:91:3a:1c:06:
0e:04:ad:29:cf:37:c8:a1:a2:72:68:3c:d0:a6:25:
d9:67:89:4a:be:80:1d:35:20:2c:b3:95:6a:5a:38:
58:ea:23:fb:60:e9:70:f2:00:6c:52:10:36:fb:7b:
fc:69:69:db:2f:5e:c7:8a:51:10:88:56:74:bc:79:
00:58:4c:9c:11:91:81:ac:95:a9:e7:87:58:d3:80:
9b:b7:fb:19:34:db:93:f0:28:ef:0a:b6:91:dc:36:
02:11:63:f4:61:96:40:aa:6a:a1:13:a0:ed:f6:88:
7f:69:7f:7e:4a:41:3a:6d:9b:ba:7f:15:f7:47:98:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:A7:93:43:65:16:8B:DF:C4:4B:2E:98:14:11:63:79:53:23:94
X509v3 Authority Key Identifier:
keyid:B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:69:e9:23:b0:f8:37:32:fa:3b:e6:c9:95:b0:7b:92:36:
61:62:18:57:18:fb:bb:ae:ea:a7:97:bd:1a:c3:ac:05:ec:16:
c6:87:d0:15:da:8e:54:42:d7:15:b0:b7:d8:b3:bc:69:37:1b:
30:2f:ed:bc:51:9c:d9:11:11:db:7c:e2:2f:2a:3a:d3:16:29:
78:18:d1:c5:96:ab:a9:aa:07:c7:57:9a:7d:bb:f5:16:eb:8e:
76:b3:58:ee:66:d1:5e:29:44:f4:5f:24:db:80:f3:e4:f0:d3:
6c:83:fb:d5:72:14:17:e5:09:a6:f6:d4:33:18:fc:3f:be:32:
5f:2e:8a:c5:b4:a4:52:67:6b:ed:be:f4:5d:41:4d:04:cc:4a:
b2:69:81:0b:7b:9f:81:26:1a:58:86:a7:1c:cf:87:31:46:c0:
8f:95:4a:12:a8:9e:75:b2:2d:05:e2:6b:b2:0b:08:1f:d5:1b:
cf:de:78:d2:08:cf:ae:09:94:82:e8:f8:01:5d:77:89:ce:8d:
da:a3:d5:42:31:be:22:ee:21:63:f3:68:b5:0e:8c:24:cd:86:
8f:41:c6:90:87:22:a8:16:39:e8:a1:52:01:05:7c:40:7f:d5:
01:a5:50:44:30:27:f5:89:11:f0:cc:7e:bc:17:29:5c:8e:1e:
09:71:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:05 2026 by rpki-client