Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: WPDa4cQvxSBJajBo44J6J+9VT+SUOWY8mYivELCFX88=
Subject key identifier: 58:C5:DE:1C:80:CD:53:69:3A:FE:2B:E2:6D:2B:DF:A8:63:EE:E2:B8
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019D281673B7191816B0BEBD2C21E15C32C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 1ZKvZx+bSafdsQHtUgD9+ThA49/jNHFaZMdahxF3OuA=)
2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:73:b7:19:18:16:b0:be:bd:2c:21:e1:5c:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=58c5de1c80cd53693afe2be26d2bdfa863eee2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:0a:ca:a8:8e:f1:ec:ac:6e:cd:24:2e:c8:
af:b5:5b:ea:71:c2:64:b9:ff:98:04:08:69:f8:77:
60:ba:50:86:68:8e:eb:13:10:77:f6:c9:7f:48:59:
ef:06:bd:a0:44:8e:b1:f2:e6:e0:11:c6:8a:f6:d3:
0b:dd:ce:6a:bf:a6:7a:b2:53:dd:1e:03:5e:74:39:
f6:70:45:01:ef:d0:73:da:d9:1a:4f:8f:dc:e8:fd:
92:e9:b6:dc:d0:a2:54:06:00:59:6c:d2:6c:15:f7:
7b:7a:86:7e:3c:1a:47:2f:bd:c9:51:16:1f:a7:5c:
7b:a0:45:2d:fb:0d:e1:56:01:91:48:1d:16:eb:1b:
cb:52:76:a8:78:13:f8:66:42:3e:1f:4e:e7:a6:17:
0b:7a:31:fd:42:01:93:d1:f5:ab:a8:42:2f:c9:7d:
50:f2:a0:63:f6:e4:82:6a:b6:61:7f:75:0f:ed:cb:
0a:c5:b8:10:e6:ee:25:68:04:09:b7:e0:e1:6f:6c:
58:41:dd:85:3e:e9:c2:df:f5:03:f8:c8:f5:1d:1b:
92:c9:6f:ae:81:7f:99:cf:dd:0b:05:23:72:9d:4d:
94:98:36:d5:0d:d4:f7:06:7b:3a:99:dd:ea:3a:ab:
5a:d4:79:3c:5a:9d:b1:14:7f:3b:f8:67:cb:40:8e:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C5:DE:1C:80:CD:53:69:3A:FE:2B:E2:6D:2B:DF:A8:63:EE:E2:B8
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:1b:3e:67:36:1e:e7:5c:22:af:99:b4:59:e8:ba:1e:ad:
53:ac:dd:9f:8a:a0:ab:9b:be:9d:d0:55:09:3a:89:12:b4:3b:
f5:84:a8:4b:77:66:2e:ac:d0:34:a5:3b:f9:e4:21:16:7a:36:
98:e5:7c:e2:dc:90:36:4f:dc:ea:63:84:dd:33:44:f8:fd:a3:
0d:f4:e3:1c:98:9a:98:dc:db:18:48:55:0b:0a:7c:e7:05:86:
20:e7:e7:af:dd:90:9e:35:c1:1a:d6:11:d5:a0:fb:1c:e9:07:
d0:21:cb:3e:23:a0:9d:d5:a1:f7:3e:36:63:30:3f:75:19:b8:
40:f2:b4:6d:f6:39:4b:a3:35:f7:3b:1d:a4:c3:3c:ea:f1:b3:
06:2b:0e:4f:3f:70:3f:b0:a8:24:dc:bb:ee:ce:75:f4:47:15:
11:1d:98:df:2e:26:c0:de:48:ef:9f:f5:d7:8d:f6:8b:ea:0d:
cb:e0:ac:70:c9:61:64:18:6b:a4:08:d2:54:6e:65:5d:55:bb:
6b:bd:62:b7:98:c3:e0:e9:5d:1d:db:f8:bb:fd:c3:43:b4:63:
f7:27:8f:ed:10:f5:d3:56:99:d3:45:b3:7e:f5:07:a1:24:a4:
e6:3c:dc:e6:bc:a0:a5:73:75:61:cf:bf:0f:18:57:f3:1c:f9:
3e:82:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:26 2026 by rpki-client