Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: +eHhZd2yU52ZygR6v1VrBuJAHOpV07GotGM1ZCUj7As=
Subject key identifier: 88:18:7A:D1:65:25:4E:79:D7:6B:CB:4F:CE:D6:86:67:BE:F6:41:6A
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 019D2772830952E20F28B726382A1E1F39B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 0977
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: tzStkcD2AUNlzJpVcB3o391slrZ3QekNqTpvqeZOJhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:83:09:52:e2:0f:28:b7:26:38:2a:1e:1f:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=88187ad165254e79d76bcb4fced68667bef6416a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:c2:b9:d9:fe:77:8b:7d:90:4e:a8:8a:ef:
ae:80:d3:81:0b:5f:88:78:58:76:37:3b:2e:23:46:
70:c4:24:8a:fd:cd:c8:a8:1f:da:5b:c6:5b:a7:8f:
e5:2d:87:f1:bd:6b:1e:e6:7a:45:9b:06:ee:cc:89:
c2:ba:3e:e9:21:b7:f6:0f:ee:2e:f4:21:dc:9f:6f:
27:83:21:9a:78:6f:ff:c8:f5:91:87:39:b5:13:be:
8f:f5:cf:c9:eb:bc:e9:3f:f4:88:75:d9:65:16:05:
c2:ff:93:47:7b:48:77:53:3b:10:b1:ba:62:cd:95:
6a:28:7d:66:d1:5c:b6:bd:98:ce:07:f7:9b:94:3c:
7f:aa:8c:33:df:77:be:ec:58:58:5e:a4:d0:4f:91:
e0:f4:f3:ae:61:7e:31:1f:50:c8:01:92:cd:66:42:
9a:dc:98:c7:d5:5f:e3:7e:1c:e4:02:d7:3a:a3:2f:
a7:e3:40:1b:7a:4f:4b:bd:76:1e:d3:bd:7a:70:d8:
f0:d9:6a:ec:d9:c2:d7:d7:97:bb:b0:30:5d:09:df:
f4:dc:9b:83:38:3d:49:b1:84:13:cc:8e:fd:05:df:
e0:75:3e:5a:2a:6d:83:e0:8d:a0:ce:e7:d3:b8:d3:
65:20:0e:b0:86:d7:26:df:28:68:18:e3:1b:4c:95:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:7A:D1:65:25:4E:79:D7:6B:CB:4F:CE:D6:86:67:BE:F6:41:6A
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7e:70:ab:c3:62:58:b1:86:9c:9a:fa:40:9f:c0:54:18:46:
8e:98:d6:d3:4e:6e:a7:1a:ef:16:07:4e:bd:38:dd:00:cf:93:
70:5b:0b:b4:1e:43:a2:5e:97:8f:67:ac:dc:b7:5b:77:fc:e9:
e0:19:63:dc:d7:e0:a3:7d:24:a4:d6:8c:9b:83:34:7e:89:fd:
ee:dc:65:2b:42:7d:9e:b5:3b:1d:3f:4f:68:4e:90:56:96:7f:
75:a7:bf:89:b5:4d:ec:89:ed:1d:56:4d:b9:57:35:2b:9c:5a:
88:16:c1:aa:53:e8:a1:f7:85:cf:54:77:e4:b2:43:f0:6b:72:
d3:5e:76:8c:26:70:37:30:6b:a9:0d:37:1e:f9:f6:b9:d9:b7:
30:7b:46:c7:05:1c:64:ef:73:10:73:14:02:5e:23:48:2b:72:
7c:10:b1:b0:d9:6b:84:cc:58:22:48:0c:ab:54:87:b2:b3:51:
7e:2b:09:3b:88:6b:e9:de:3e:da:74:18:73:cc:39:4c:38:66:
da:01:62:79:65:0c:81:ea:13:23:52:b4:3b:25:13:40:97:57:
c6:e9:68:c2:9e:f0:b9:fe:e2:2b:71:72:7e:a4:3d:07:a3:bc:
81:d5:e3:43:db:86:a9:65:66:f6:8c:16:cb:f6:a1:31:9a:d6:
9f:58:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:19 2026 by rpki-client