Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: rP8Nu5sECZFgbR9eW/QdlO/kD1plcuSNO/TdI78qi0I=
Subject key identifier: 1F:57:8F:07:E8:00:96:59:1C:B6:83:94:49:ED:3A:6E:F8:AA:A7:65
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019D333EDD69E51076BAEE9AF0717405B8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 07:00:51 +0000
Manifest this update: Sat 28 Mar 2026 07:00:51 +0000
Manifest next update: Sun 29 Mar 2026 07:00:51 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: MIr0sHqdxBz9niWQ07gmgLfB7k+5c3vBJO9neTfxuz4=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:dd:69:e5:10:76:ba:ee:9a:f0:71:74:05:b8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Mar 28 07:00:51 2026 GMT
Not After : Mar 29 07:00:51 2026 GMT
Subject: CN=1f578f07e80096591cb6839449ed3a6ef8aaa765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f2:85:67:e7:64:0d:25:9a:e9:55:46:79:05:
dd:9d:c4:1e:64:7b:40:af:d1:0f:4e:ae:16:5f:20:
78:7c:89:e1:a7:97:da:55:95:e8:79:ea:67:39:c3:
49:bb:a9:84:67:85:dd:d0:89:71:34:79:78:49:a6:
05:02:bf:ed:45:bf:77:7d:96:f6:e0:23:2a:c8:02:
ad:a3:6d:32:31:34:07:a6:c7:c1:41:d1:14:e9:5c:
5a:d2:4a:06:0e:39:89:10:6e:9c:d7:68:e1:c3:1b:
d8:c9:4e:ef:85:4a:f5:f9:91:d2:e3:dd:6c:48:a2:
b0:e6:e5:dc:19:4e:df:ef:ea:26:82:98:e7:37:37:
17:f6:d6:83:7e:16:d2:ea:5e:f7:75:50:3a:b5:d5:
83:2c:b8:e0:5c:66:52:79:c9:eb:3a:96:69:47:91:
49:91:2f:71:00:02:49:dc:a4:77:eb:74:05:7f:2c:
6a:9d:ec:5a:09:d9:92:11:88:d7:d3:f9:8d:d4:e1:
94:9a:4e:0f:99:45:ed:05:e2:4a:7d:39:43:73:cb:
a9:16:c7:df:c0:f0:da:f4:96:c0:ea:43:1a:4d:e6:
9f:20:42:a2:93:94:5d:27:62:13:d4:19:dc:f8:50:
2d:df:47:00:c4:bc:b4:7d:a1:58:8f:4c:df:5a:1e:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:8F:07:E8:00:96:59:1C:B6:83:94:49:ED:3A:6E:F8:AA:A7:65
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d7:e4:3c:c6:25:18:77:6f:2d:42:61:e3:45:cf:af:27:cf:
6b:8a:70:80:6b:b5:e7:9b:47:3a:7e:31:cc:ed:fa:26:32:73:
0b:22:cf:ee:e7:df:f0:a0:b5:da:a5:56:98:09:27:db:ef:33:
51:8d:ab:57:07:fd:b8:18:1a:7f:80:ec:15:78:d5:5a:65:f7:
64:67:40:9e:b7:66:1b:ff:36:70:34:5f:14:37:52:14:55:67:
67:bf:81:49:54:bb:34:ff:9a:81:2c:f3:a3:73:ee:7e:19:f6:
59:13:53:c6:7b:a1:36:37:6a:83:80:ea:eb:b8:aa:3b:2b:a9:
0d:56:fa:88:4c:ef:b9:3a:3a:27:03:63:64:07:cd:18:b1:de:
c6:8e:15:1a:d8:05:d0:5f:71:d7:bf:11:2a:67:74:4a:6d:90:
e6:da:87:ae:37:b2:a0:9f:1b:e5:c2:58:8c:47:f0:8b:6e:e6:
63:a6:97:9b:9f:aa:92:68:70:b1:a5:2a:0e:4f:bc:93:52:3a:
e3:11:cc:31:83:b8:48:e5:7e:59:4e:76:57:9b:49:e7:8f:01:
34:3d:07:a3:11:80:34:24:a6:5c:14:72:a6:f9:99:06:d4:ee:
5f:42:33:cf:71:03:c5:38:35:79:15:be:bb:c9:1b:26:89:5e:
cf:54:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:26 2026 by rpki-client