Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: 9EKAjeDRbo/BtTy1QdmBJ3a6Rcnqhy8dgwLZr+5P6Js=
Subject key identifier: F4:56:07:3D:6F:56:0E:B4:05:45:C9:CC:21:71:CC:38:A0:FD:CA:29
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 019D2C97F085C6A471284C8ACDBBBA3F3520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 188C
Signing time: Fri 27 Mar 2026 00:00:48 +0000
Manifest this update: Fri 27 Mar 2026 00:00:48 +0000
Manifest next update: Sat 28 Mar 2026 00:00:48 +0000
Files and hashes: 1: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: e1+oGrz8oKCPnaojuULOvIqYAJZGEg6xqVnEWRbl/cs=)
2: Xo1iMQ3Ij7PUWeAGoOzLhIVZke8.roa (hash: hvxy9UVnq6BjnNCsQhrvZPVQxyWtXfd0lX9H8Cmba5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:f0:85:c6:a4:71:28:4c:8a:cd:bb:ba:3f:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Mar 27 00:00:48 2026 GMT
Not After : Mar 28 00:00:48 2026 GMT
Subject: CN=f456073d6f560eb40545c9cc2171cc38a0fdca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:a7:b7:07:42:e2:7f:77:e4:3a:25:46:60:
05:14:68:37:2a:a5:a0:3f:58:d7:fa:85:c9:5f:a3:
1e:f3:79:65:05:0b:80:ed:9d:b7:65:12:6e:0c:17:
89:2e:dc:21:5d:ab:07:fd:93:a8:ad:9d:38:f4:59:
3b:30:4f:e6:48:ba:f1:9f:cf:ce:14:e4:fb:e9:52:
7d:0c:ad:1b:b6:47:35:7c:d6:91:33:20:80:ef:a5:
0d:ac:63:ab:a8:fb:a4:5a:54:1e:14:69:1b:5b:0d:
04:86:c2:74:76:fd:ef:e8:59:79:74:31:bc:13:29:
a5:30:ea:79:2d:e1:2e:46:34:7b:ed:22:f8:36:9c:
15:32:4c:43:62:22:6a:ca:bd:f3:54:90:6e:40:44:
33:12:e8:25:e0:d7:25:3a:2f:83:84:6b:c5:de:48:
e5:f1:a3:40:87:20:1f:9c:9d:cc:a2:f5:fc:76:30:
e6:0c:eb:af:4f:75:93:d4:f7:58:85:57:2e:44:ce:
44:d0:10:d7:7d:68:ae:26:a6:8a:8c:ac:e4:21:a7:
75:b3:38:cc:45:92:bf:8c:44:2f:d5:49:b0:7b:35:
6f:2b:a7:7c:17:35:b5:be:63:e2:38:75:56:4f:07:
1f:ac:52:1d:96:80:be:39:73:ea:ec:0f:da:6e:6f:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:07:3D:6F:56:0E:B4:05:45:C9:CC:21:71:CC:38:A0:FD:CA:29
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ee:42:f9:25:98:d7:7d:58:09:46:c4:2e:45:56:99:c4:51:
95:8d:03:8e:40:9e:74:f4:02:f1:4f:21:12:e4:20:7f:a1:3d:
33:f6:a4:da:79:76:df:77:38:77:7c:5d:f8:36:da:c4:e6:62:
af:1b:21:3f:b2:a9:12:ab:6f:06:2f:30:66:c0:d5:29:e2:20:
f2:1d:28:d6:80:fb:c2:e1:7e:7a:f2:07:b1:31:5c:4c:f6:54:
95:7a:b2:12:c4:97:ee:cc:b8:0a:72:b8:26:fd:cf:c1:a2:73:
d3:dc:f3:3e:2f:3a:a4:63:5e:fc:ff:fe:4d:e1:4a:59:73:aa:
23:dc:a9:05:83:af:5a:8d:fa:ff:96:1d:23:e2:b2:0a:2a:f7:
df:e8:f3:be:55:24:95:7f:35:0c:48:60:da:17:64:82:df:1d:
ce:6a:bb:66:a2:70:04:51:8e:e0:ff:96:b1:39:eb:46:e6:82:
fe:e4:23:ec:e1:46:b4:20:c3:76:16:cf:24:de:f8:28:66:36:
bb:b2:5a:0c:8c:44:0a:f2:5b:c7:fc:e6:27:ee:4e:ed:12:e7:
c3:49:9a:24:6d:46:46:1f:1c:1b:d4:19:fb:02:0f:34:55:9a:
2b:ce:e2:45:6c:b9:11:1c:e9:df:3b:3e:9b:47:c3:76:b1:42:
eb:79:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:02 2026 by rpki-client