Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier: d5U/hoScv47jmyM+AOEily5McxMLwM557UA8EjTV9hU=
Subject key identifier: 9B:07:67:B1:13:E7:B1:87:9E:17:CE:A5:0A:1B:71:01:90:1E:78:59
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial: 019D27723E0A4C1BDDBDFCE6DF28E4B98C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number: 0AEB
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: q5xz4ffzJ/ABk7ykdPRp0hliqTtfb1cPfGJael5XvCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3e:0a:4c:1b:dd:bd:fc:e6:df:28:e4:b9:8c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=9b0767b113e7b1879e17cea50a1b7101901e7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:bd:5b:82:c1:c7:37:8c:dd:f9:a9:9e:21:
4f:27:f1:60:00:49:27:7c:35:9a:96:bf:4c:84:fd:
7d:e9:7f:76:0c:e4:4b:6d:44:1e:81:fe:0a:cd:3c:
5d:a5:c7:b1:cc:c7:ff:d4:41:34:4f:0d:c1:94:94:
c4:21:4e:c9:70:ea:40:7b:e1:7f:15:41:cd:96:fa:
d0:73:80:13:1a:19:4f:5b:4b:e5:82:05:a5:8f:2d:
89:57:47:9a:56:7f:f9:42:00:6f:10:1b:6f:cd:5c:
34:67:55:78:f3:e2:28:f6:67:f1:d4:0e:ad:33:b6:
87:fe:0e:91:9a:da:0a:dc:f3:bf:2b:3e:ee:06:ba:
3a:b7:31:ab:a2:db:cf:b2:7d:bc:bc:8c:0e:6c:01:
23:9a:10:45:8f:01:f7:0e:49:83:c1:92:71:f4:06:
09:f1:ba:e0:76:74:3f:b9:4c:f4:1a:dc:c7:cd:a3:
47:be:e6:a6:7f:5f:cb:14:68:78:99:0e:10:84:f7:
bb:bc:53:38:e2:9c:ba:f5:22:b7:3a:ad:aa:11:57:
30:03:9f:b0:7c:09:6f:d9:52:05:a9:b4:f7:61:61:
fa:47:73:dc:fb:ab:aa:be:58:ab:9e:a1:2c:8d:4e:
97:e0:35:c3:45:c3:6d:ef:e4:a1:d3:73:bb:40:e3:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:07:67:B1:13:E7:B1:87:9E:17:CE:A5:0A:1B:71:01:90:1E:78:59
X509v3 Authority Key Identifier:
keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:22:0d:c6:b3:0b:81:cb:13:29:5c:07:5e:12:3f:50:49:b7:
6c:b0:54:41:95:3f:ad:60:df:ad:a2:93:b2:d0:d4:12:84:6f:
90:73:29:ef:71:f7:7d:5c:8b:d2:6a:98:f3:1f:b3:70:8b:d4:
d4:0d:0c:f9:fb:09:f5:c5:2b:11:a1:cb:fd:6a:5c:ac:e0:e4:
f4:15:61:c3:3c:97:53:8c:a6:23:35:cb:e0:18:ce:54:e7:15:
7a:de:e3:e0:6b:66:83:ec:26:66:92:5f:38:0b:7a:8b:41:bf:
33:64:54:c9:06:0d:93:1f:85:d2:03:51:d7:d1:5c:64:96:12:
98:a7:ef:1f:84:9a:e8:1f:f2:be:c6:53:6b:cd:28:c2:95:79:
63:a3:2b:94:8b:3c:cb:18:74:65:49:c2:cd:9f:f2:3e:13:a3:
1b:58:fd:3c:5e:88:e3:e7:7e:bc:d1:d6:39:1c:65:ae:5f:2d:
8f:fd:8c:f3:57:e3:7a:b8:da:f7:45:ac:e3:91:a9:92:41:02:
b5:c5:7a:21:95:09:e0:7b:b0:c0:fd:ba:83:50:79:8d:ff:1c:
d0:f3:31:1b:8b:11:3b:f7:ce:59:8a:14:80:a8:80:7a:d6:92:
fc:2d:38:fc:fa:3c:13:c3:1a:62:62:4f:5f:99:88:c7:bc:0e:
c3:fe:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:57 2026 by rpki-client