Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: IVinGw6jTTwONqk22/kb0MeIOYQ1PbAvwWNSWvbKXC8=
Subject key identifier: 3C:E7:CF:4B:64:6B:DE:49:01:FF:E5:14:2D:EB:30:B7:6A:A1:E1:CC
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 019D28F2393422A08BE481C238EFFF42F679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: OuRvAfPWifznuQyAxcrk2DqpLCmXG+SfV4pvBpBBdLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:39:34:22:a0:8b:e4:81:c2:38:ef:ff:42:f6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=3ce7cf4b646bde4901ffe5142deb30b76aa1e1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:d1:87:ea:99:6a:bc:44:9e:78:5e:f3:2c:
1d:34:94:b8:df:98:1f:29:de:63:a3:61:8a:d3:4c:
b9:c0:d4:32:df:8f:68:fa:59:22:75:de:61:76:f4:
8c:39:3c:bb:0c:c0:e3:d3:4d:a1:3b:e7:f5:14:48:
24:84:78:b5:eb:77:68:ec:3a:e8:42:0b:7a:fc:30:
10:aa:7c:ec:5f:86:79:6e:d0:7e:59:cc:4e:2f:d3:
4e:7b:3b:52:b9:ac:40:7e:fb:48:ef:0b:e0:d0:b6:
f8:33:09:67:79:9d:dd:bd:00:90:d3:c6:a7:dd:de:
85:ca:5f:cf:b2:88:93:a5:9c:24:f2:a4:94:05:5b:
63:9c:29:b3:41:4a:c0:ad:6b:42:2c:c8:5f:f4:87:
24:0b:68:c3:c5:8d:d1:fe:48:f1:02:12:2a:f3:f1:
f0:23:ea:72:5a:3b:e7:27:09:c0:8e:db:88:99:f9:
d6:a7:48:3a:4b:b6:d4:ea:51:44:a0:53:7f:09:31:
63:bb:1c:46:0d:fd:00:40:12:1c:10:77:91:6d:21:
7b:69:16:f1:b9:d3:1a:48:d4:38:82:2b:65:b3:0f:
da:36:59:b1:99:54:50:36:85:5c:10:36:cc:90:21:
d7:f9:76:b5:c7:fe:0f:f4:be:99:ef:cb:50:8d:c5:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:CF:4B:64:6B:DE:49:01:FF:E5:14:2D:EB:30:B7:6A:A1:E1:CC
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:14:8d:91:3c:b9:e9:e8:1b:80:81:43:0a:78:52:d1:f7:
5a:94:3f:8a:2a:f5:24:3d:8a:c0:79:d0:e4:13:97:f8:fb:77:
70:49:02:e5:87:3b:b3:93:6e:d4:11:0b:6b:1b:ba:f4:17:d5:
96:ea:13:2a:62:aa:bf:fa:89:cf:d6:c5:11:f3:28:3e:32:9d:
25:3c:a9:b5:50:b5:29:bb:83:08:d2:93:bd:df:d2:4f:bc:e4:
42:dd:8d:b1:1d:e9:7d:1a:30:96:a6:19:64:25:81:6b:c7:37:
80:82:63:87:eb:47:55:48:13:74:1c:8d:50:5e:68:5b:61:05:
68:1f:6a:d7:0b:94:99:44:6b:ba:31:54:b3:92:ee:17:eb:82:
56:a5:16:5c:64:0e:e3:b2:ac:35:7c:2a:0c:9f:cc:13:fa:ba:
46:f9:86:6e:8f:20:ee:69:7a:c1:b8:12:63:37:a5:b7:1c:fa:
a9:dd:f6:12:ca:d5:23:15:88:e5:ee:b8:8d:3e:3d:aa:52:c4:
c9:55:1f:2f:01:a3:5a:22:16:3c:cc:48:f4:cd:16:c5:2e:7e:
56:5f:fa:b2:c4:10:68:82:f6:19:31:cc:ce:7d:e5:29:5d:f3:
ae:e5:cc:1e:13:03:3d:73:a7:b8:38:73:d8:7a:9b:5c:e9:c9:
32:4a:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:24 2026 by rpki-client