Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: PTemqu62Cmii02eiNUX4qz0Cl0nTgB4gQ/n2i5J2JQ8=
Subject key identifier: 15:5D:A4:57:D1:18:C3:C5:49:1C:56:44:98:C3:2A:CF:77:1F:1E:B3
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 019D28F33DCE420D2D123F4FC833843E950E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 0BC9
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: DbXswLQQE4haO1aVzbJotQyV6Ax8CsBpo5N35tDnY90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3d:ce:42:0d:2d:12:3f:4f:c8:33:84:3e:95:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=155da457d118c3c5491c564498c32acf771f1eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:39:c7:1c:c7:50:d6:4e:d8:73:fa:e2:69:
d2:e7:2b:29:c8:43:57:ee:bf:7f:b2:14:24:7d:85:
4a:46:d7:e2:6d:e0:b9:b1:4b:4d:30:c6:60:55:1d:
2e:02:23:c5:0a:18:7f:56:12:95:1c:de:43:f4:fe:
33:ea:92:0e:aa:5e:73:28:68:be:79:4c:68:65:1f:
55:5e:9c:e3:f0:de:86:2f:39:d9:7a:54:48:15:90:
ab:bb:a7:86:b3:f5:7b:86:ff:04:9e:4d:a4:c8:a9:
c8:4f:5f:7c:3a:c8:59:fa:be:c0:4e:b9:7f:c8:93:
9b:cd:e0:be:8e:4b:a4:56:c5:f0:fb:44:db:f0:5a:
ff:78:68:6b:71:95:62:30:58:98:ef:27:57:5a:ce:
bb:be:7e:e5:4b:e1:34:b0:d8:60:48:61:35:31:c3:
d1:40:ef:5c:66:06:2c:21:71:16:45:1f:3a:a7:0d:
a3:a0:70:8e:07:5e:41:76:bb:94:8d:c1:53:8d:e8:
f7:ff:c8:22:df:6c:69:6f:ec:15:d3:6e:02:72:7b:
7e:91:70:bb:cc:fd:5f:80:b4:39:02:26:38:9a:fd:
85:bd:49:2f:fc:98:48:e9:b4:f1:97:01:da:bf:4b:
48:36:44:bb:2d:55:34:e9:59:8e:a8:c9:43:e6:dd:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:A4:57:D1:18:C3:C5:49:1C:56:44:98:C3:2A:CF:77:1F:1E:B3
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:e7:d2:bd:87:df:a9:08:a9:d2:db:b3:88:d7:25:41:05:
7d:41:8a:92:46:99:23:90:81:59:85:c7:f7:ca:f6:79:83:9d:
05:c6:ae:54:56:67:0b:e5:a9:e8:7b:a1:69:20:03:b1:10:c2:
e2:3d:22:52:a8:46:f7:27:80:15:c8:75:13:f8:37:f7:a5:69:
8b:c3:ff:ed:19:89:0e:96:36:0d:8d:1e:0d:90:60:3e:9f:28:
69:c7:c8:15:44:d0:29:7f:33:5e:2e:1a:f8:d7:80:b5:9c:9b:
cf:6e:b7:68:af:6d:56:f2:ed:42:64:30:fc:bb:04:bb:b4:a1:
fb:9a:90:b5:a0:cb:f7:e1:86:b7:67:36:f0:d0:31:29:f6:15:
56:d1:bc:20:3d:c5:6f:d5:f5:52:d0:96:3b:ff:c4:62:98:23:
67:97:2d:f8:04:d6:bd:b3:76:3a:aa:d9:7b:40:7f:1d:d8:7a:
36:d7:5e:9c:58:d1:a8:56:66:10:f1:d0:60:c6:35:d1:82:4b:
cc:3d:93:b4:4a:d9:16:21:f6:7c:5c:18:1d:20:c4:ed:a8:11:
b8:1e:20:d0:c3:55:32:94:90:73:cc:e8:b3:d1:f2:1a:ec:e5:
af:c8:08:45:1a:bf:b7:91:31:63:e8:b9:63:c2:bc:a6:8d:73:
f4:69:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:32 2026 by rpki-client