Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: oXSZwsnJX7l1EWhRNlWHT1P4vioxuBXc9CmArP5EYa0=
Subject key identifier: 75:6E:89:F3:C0:81:E4:85:B9:AB:23:21:60:0F:4E:3E:C0:22:4A:32
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 019D33E35906E2E7BFF08E3D6290B61821FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: 038A
Signing time: Sat 28 Mar 2026 10:00:30 +0000
Manifest this update: Sat 28 Mar 2026 10:00:30 +0000
Manifest next update: Sun 29 Mar 2026 10:00:30 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: bB4+ekQpyACaLmzj/P/RqeCfGFUNrcE7d3rj8NVRV70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:59:06:e2:e7:bf:f0:8e:3d:62:90:b6:18:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Mar 28 10:00:30 2026 GMT
Not After : Mar 29 10:00:30 2026 GMT
Subject: CN=756e89f3c081e485b9ab2321600f4e3ec0224a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:57:63:f7:f1:2a:db:77:8b:de:17:f1:40:
9a:20:85:6c:07:52:39:16:71:f4:de:cf:4b:01:2a:
92:18:cd:7c:75:98:9d:54:4f:0c:5b:c5:bd:30:d1:
e1:e3:2c:f2:29:11:54:e3:23:32:c3:da:2f:0e:86:
d1:fb:b5:2d:b1:8d:9b:53:4d:57:6a:cb:40:7e:9c:
24:b7:2d:9a:3d:ba:33:ba:df:7a:74:8e:2f:85:97:
71:8b:6d:64:e8:5a:fc:94:46:ee:d5:bb:78:6c:7d:
56:ff:4a:06:fa:30:55:c0:6b:e4:5e:67:09:8a:2a:
db:36:20:8f:2e:8b:84:2f:7b:9b:67:23:45:d5:e4:
88:7c:3e:e2:9d:37:00:bd:61:8b:ed:65:03:98:55:
06:87:4c:d4:e5:22:cf:58:eb:11:14:d4:0b:fa:98:
05:7f:7c:a3:d8:db:7a:3f:d2:f3:05:94:b4:32:5a:
0e:b0:c0:44:f0:bd:9a:d2:07:17:d1:c1:5d:33:44:
f4:fa:42:d4:63:6e:41:71:20:eb:c0:75:8c:92:74:
b0:18:c3:3a:91:f1:ef:fd:11:bd:f8:80:95:4e:c0:
4e:57:8f:a2:bd:91:e1:03:de:72:48:e7:21:fe:31:
96:fc:79:79:f6:0d:c6:62:90:e8:36:92:43:a1:e1:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:89:F3:C0:81:E4:85:B9:AB:23:21:60:0F:4E:3E:C0:22:4A:32
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:ae:e3:b4:9a:2b:b3:7d:ee:2f:aa:92:60:f1:bd:65:21:
93:38:84:94:f6:53:f1:92:3e:4e:86:28:4f:e2:cd:40:56:5b:
96:2b:31:86:e9:66:67:39:7b:16:ac:21:d8:a5:c4:6d:bf:83:
8a:2a:90:ba:f1:df:72:58:6a:a6:45:35:60:34:5a:34:5a:bc:
f9:6e:84:5c:89:3a:4d:5e:a9:c8:40:87:00:9d:9f:58:08:0c:
3f:9b:cc:ea:05:79:aa:74:ce:b8:65:00:b6:ca:19:bd:5d:2c:
3a:4d:36:10:ee:f6:d3:5e:48:9d:18:9c:8c:9c:36:31:c5:8a:
19:35:1e:d2:2e:23:44:72:ad:f6:31:78:2a:d0:f3:80:d1:ce:
3e:19:78:fb:78:00:c4:cd:fe:46:4b:3b:3e:5e:f0:d4:1c:c5:
2f:0c:88:7e:09:1b:26:5e:d6:eb:e6:49:87:6b:2e:e4:c2:0e:
9b:09:50:e2:f5:d7:37:6f:00:1d:09:b7:cf:e9:8c:bb:8d:c4:
a7:2a:11:38:d3:53:16:08:4b:fa:22:a5:ca:4f:fc:ad:05:86:
d9:6e:2c:a4:0f:79:37:41:d9:06:15:a8:d3:c0:66:01:35:c1:
d0:11:e7:99:04:f0:65:11:8c:04:67:a0:7c:b7:ee:dc:25:ea:
4b:7e:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:39 2026 by rpki-client