Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: +1ZayHzIDFWniBeGvw6+kQjGyEcISPQaHPqgL+M76Zw=
Subject key identifier: 90:EC:55:0D:5D:CB:18:3C:B2:49:E0:38:CE:BB:FC:4E:31:7E:05:42
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 019D25BA00A640F4846E32ABE83965CA3DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 16:00:39 +0000
Manifest this update: Wed 25 Mar 2026 16:00:39 +0000
Manifest next update: Thu 26 Mar 2026 16:00:39 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: eKxhql3LDB36t3mXyG3VCEHlgQap0bp2gtCJegwqv1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:00:a6:40:f4:84:6e:32:ab:e8:39:65:ca:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Mar 25 16:00:39 2026 GMT
Not After : Mar 26 16:00:39 2026 GMT
Subject: CN=90ec550d5dcb183cb249e038cebbfc4e317e0542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:81:ac:3d:35:86:8c:9b:ff:bf:ec:d1:90:
66:21:7f:2e:08:ff:68:2f:91:fa:48:88:6a:34:6d:
22:ef:03:19:c2:16:59:d5:dc:67:ac:04:a3:05:bf:
f0:a3:f3:f9:65:30:c9:de:be:ea:00:58:2d:e9:ee:
96:df:50:c7:0d:50:98:f8:2d:bd:65:f2:54:22:64:
2c:b5:57:06:8e:38:01:9f:f4:52:d2:51:59:2c:59:
39:03:77:99:3a:9d:d9:92:7f:57:41:87:32:ed:05:
12:9e:a3:6d:e3:f2:37:c1:0e:fb:ae:0c:8c:20:44:
f2:ea:0c:10:8a:5c:1f:5a:25:6a:61:ee:f6:a1:48:
97:1f:6c:b3:2f:57:8c:c6:a2:44:53:c3:a3:66:99:
fd:16:2e:3e:cb:4d:a8:ec:65:72:62:65:f7:ef:36:
5e:13:2c:61:b4:fb:1b:cb:88:e8:4e:b1:9f:1a:6f:
21:67:da:ed:b9:36:4b:74:23:db:d4:05:2e:f8:40:
db:9f:53:3f:e5:fd:43:fe:55:36:2b:25:25:ef:eb:
56:79:a2:a3:38:71:b1:e9:f0:f1:6e:1d:4c:42:4f:
94:a8:8b:2c:9d:48:6a:de:77:68:a6:34:06:6d:51:
e5:7b:fd:8f:85:27:f2:82:ed:15:04:81:ab:9f:ab:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:55:0D:5D:CB:18:3C:B2:49:E0:38:CE:BB:FC:4E:31:7E:05:42
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:c5:60:3f:93:8e:b7:de:9a:1c:67:ad:2d:d7:08:48:ce:
e6:f9:1d:7b:2c:21:6c:44:a9:40:ce:9c:a2:fc:0a:d1:f2:2f:
e6:c0:9e:7f:fb:a2:69:1b:d5:ae:70:ff:b7:3b:e3:e3:fe:23:
bd:ad:4e:d0:71:de:2f:97:d7:87:fa:88:a5:5c:c3:0c:d8:a7:
d7:5e:db:a8:df:06:20:9a:4a:56:b6:8c:b1:f0:3b:23:67:29:
c7:1e:c1:87:48:cf:69:20:55:b2:35:bc:cc:aa:5b:5e:30:7f:
a6:e0:10:d9:72:ca:b4:31:41:c2:b4:58:73:81:83:2e:a1:ee:
71:b4:6b:4f:9a:04:a3:c7:f2:5d:fe:df:3b:43:11:37:2a:8b:
1e:7d:3d:f9:25:b7:81:29:0c:70:7b:f5:1f:21:44:1c:8b:24:
cf:0c:ac:a3:de:ec:1c:ba:2f:38:8e:5f:98:ce:fa:8f:3a:09:
cb:52:06:35:84:e8:d9:52:c0:4e:98:db:a8:5c:e4:08:98:2b:
c5:73:70:03:d9:99:31:4c:80:7c:17:31:c7:bb:5e:5d:4f:3a:
25:c5:2d:a2:35:f0:72:da:2a:a2:fa:49:8e:c2:66:3e:46:9d:
ad:68:58:fb:73:68:06:17:ed:f6:25:4b:c5:b6:c1:f4:08:73:
4d:5c:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client