Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: 7dgTF5+N+QzrhCE0y94wfaO3Bx+X30j824YlqRU/1+w=
Subject key identifier: 39:C3:43:A5:12:8A:D4:B2:53:1C:F3:ED:E9:14:FF:1E:BF:A0:A5:E4
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 019D329ACF67E93CC6350703983A0F4816EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 0D
Signing time: Sat 28 Mar 2026 04:01:39 +0000
Manifest this update: Sat 28 Mar 2026 04:01:39 +0000
Manifest next update: Sun 29 Mar 2026 04:01:39 +0000
Files and hashes: 1: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: xIKUx6abYjiIlwStzVuHXqrQKmBM64K3f8EKcniVD6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:cf:67:e9:3c:c6:35:07:03:98:3a:0f:48:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Mar 28 04:01:39 2026 GMT
Not After : Mar 29 04:01:39 2026 GMT
Subject: CN=39c343a5128ad4b2531cf3ede914ff1ebfa0a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:9f:b2:57:58:64:05:2f:cd:3b:b2:49:de:
53:cc:1f:59:77:8f:2f:82:bd:ac:e9:e8:48:73:d6:
4c:41:72:1c:67:18:fb:7c:3b:5e:39:73:9e:73:aa:
6e:c8:c1:35:fc:93:62:fd:02:fe:8f:4b:a5:b7:be:
69:32:b8:58:78:1e:48:16:3b:79:e6:e9:d2:97:f8:
91:3f:c5:4f:61:f7:54:58:d8:74:8e:f7:70:1b:8e:
c3:1b:06:a9:4e:25:cf:e1:d3:58:f2:b9:e0:aa:03:
eb:7a:cc:c3:9c:98:a0:1e:79:7f:0a:c6:7e:16:be:
63:29:f4:ec:65:ef:89:dd:26:a8:e6:9c:a8:55:44:
26:4c:41:69:11:77:b7:dd:60:42:e5:82:1b:13:93:
43:f3:47:fe:d1:8f:dc:df:14:db:92:d3:a7:d2:98:
ee:7f:e4:45:35:ae:95:4b:42:aa:74:06:e5:43:a2:
59:35:8d:cc:92:52:6e:2b:42:0a:4d:de:c3:34:ad:
2c:95:0b:35:e5:b6:c3:0a:09:f7:12:b4:27:2d:e5:
9e:ac:3c:8e:dc:51:eb:42:b6:84:44:7e:5c:a3:07:
2b:df:e6:04:7e:ad:bb:9e:f3:a2:82:76:62:b4:9b:
e7:87:83:f1:28:5a:1e:0b:e9:13:7b:f1:06:42:19:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:43:A5:12:8A:D4:B2:53:1C:F3:ED:E9:14:FF:1E:BF:A0:A5:E4
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:43:66:b5:76:4d:5b:dc:b3:6a:21:1f:cd:78:c0:6a:e0:04:
d8:3a:24:e8:ce:95:f9:68:f7:c3:5e:a4:83:76:95:46:bc:45:
ec:9f:90:b3:cf:6b:1a:5a:78:6a:df:12:fc:d1:09:59:6f:11:
96:4e:b6:de:bb:4e:48:57:f1:48:7c:f2:67:01:f3:3a:4b:4c:
95:8f:1d:d3:f6:b4:b5:1a:95:17:25:1f:5b:bd:ff:b0:a4:c0:
39:45:5e:b3:e6:59:49:ca:99:18:bf:9e:71:ae:57:95:72:ff:
c1:bd:2d:d4:64:f0:25:4e:9f:e0:54:5f:1b:26:cb:5e:a2:8c:
df:92:4c:1a:cd:52:98:9e:7a:4f:eb:bb:56:ee:f2:66:5e:a4:
32:72:08:a8:92:bf:41:1f:03:03:cd:31:90:68:0e:08:ba:2a:
3a:b8:c6:8f:21:24:1e:de:d2:a5:be:a2:37:55:5b:69:73:53:
a6:af:52:d2:09:27:30:30:cf:db:0f:b4:67:e8:14:e5:5e:9e:
b6:e3:fd:de:6e:12:e5:c9:5a:fd:d9:ea:7d:4e:2b:cc:9c:10:
0b:f6:44:0e:ad:e8:9a:ca:24:28:69:c6:a7:18:32:cf:8e:bb:
85:0a:0d:90:77:c9:83:5c:2d:49:7a:6a:ad:6b:2e:9e:9a:45:
f1:c8:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:55 2026 by rpki-client