Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
File: TCo9adv570f1kQnH9rIwKq8tsLw.mft (raw, json)
Hash identifier: WW50Wq1fHh9Yt/hKjHb+PNJ28c68oIcwq0P7xSJrbB4=
Subject key identifier: 4B:70:27:1B:6D:DD:1D:D6:22:94:5D:00:C7:BA:A6:13:97:40:AF:5B
Authority key identifier: 4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC
Certificate issuer: /CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc
Certificate serial: 019D2884D39094DB6A475D73C9175BA54FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
Manifest number: 0161
Signing time: Thu 26 Mar 2026 05:01:26 +0000
Manifest this update: Thu 26 Mar 2026 05:01:26 +0000
Manifest next update: Fri 27 Mar 2026 05:01:26 +0000
Files and hashes: 1: TCo9adv570f1kQnH9rIwKq8tsLw.crl (hash: oEwaxFjynLdpUApJOBUeP0f/d2tnmEv37Wp260nlM1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d3:90:94:db:6a:47:5d:73:c9:17:5b:a5:4f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc
Validity
Not Before: Mar 26 05:01:26 2026 GMT
Not After : Mar 27 05:01:26 2026 GMT
Subject: CN=4b70271b6ddd1dd622945d00c7baa6139740af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:5a:fe:54:6e:70:55:e1:99:09:50:83:c8:
63:8c:36:92:23:64:a0:21:4a:10:06:15:ae:ee:af:
04:85:58:f9:df:78:d1:0a:e6:1e:74:f5:54:61:fb:
eb:8a:c3:28:45:22:60:bb:df:f7:f4:9d:a4:48:b0:
0e:29:c1:2f:e6:64:55:92:77:15:07:26:12:66:e5:
e3:23:a0:27:be:49:42:e5:30:50:7b:27:db:e3:a8:
27:f5:d8:a4:f6:a4:c7:39:fe:06:78:e0:59:d0:8c:
05:02:0b:6d:61:5d:32:1f:ef:55:87:bd:fa:74:4e:
22:92:d6:3b:2d:b9:db:4c:bd:12:8f:4d:c1:a1:00:
01:99:71:71:ee:70:b3:5f:7f:5b:09:00:ba:ee:da:
4a:01:14:8f:e7:11:b3:a5:34:87:7c:ad:be:57:b9:
06:9b:77:e3:37:da:6c:6b:63:82:17:6e:36:99:ed:
81:2a:66:b2:f6:05:3f:12:c3:c3:73:37:96:d6:89:
7f:b0:e7:bf:3b:21:8f:76:ec:b9:78:70:25:3b:78:
17:7d:40:c5:81:0c:17:30:1d:ae:83:5d:e9:95:94:
aa:ef:d8:44:10:cd:0f:28:71:f0:0b:95:44:fc:74:
97:d4:03:eb:43:ad:11:db:26:1e:ab:7d:dd:af:a8:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:70:27:1B:6D:DD:1D:D6:22:94:5D:00:C7:BA:A6:13:97:40:AF:5B
X509v3 Authority Key Identifier:
keyid:4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5c:ce:88:44:37:07:41:d2:9d:1c:f1:2e:99:c1:43:5f:07:
6d:7e:e5:92:fe:2d:32:c5:06:7a:9b:88:c5:ce:a9:12:2a:32:
b7:4d:8e:75:12:32:6b:5f:b6:22:4d:fd:d8:f9:07:ff:36:6c:
7b:d9:a6:a9:f7:da:39:f9:ce:21:db:f9:af:b4:0c:cb:8c:51:
4d:7b:89:44:8d:5a:87:40:d7:29:3f:f8:86:ff:32:8c:47:aa:
5a:84:43:3f:83:1c:88:02:fc:9e:ee:78:32:59:5f:a8:fb:ec:
89:5d:8e:1a:2c:15:08:aa:4a:ee:c4:d9:90:60:e7:73:ee:cc:
c7:fa:01:b4:b7:70:1f:ba:27:69:ce:b4:ec:36:e0:3b:d6:85:
d9:7a:a4:ab:80:a6:18:3b:bb:73:f4:f8:56:b2:cb:68:f7:ee:
66:9b:52:20:e3:72:5c:4e:93:f2:fb:70:6a:bc:ff:3a:83:ec:
c5:a9:44:ae:82:21:8f:9f:91:9b:c6:17:78:40:17:69:46:e6:
80:1b:cb:c8:7b:92:3e:35:25:22:76:b1:24:6e:60:cc:ba:f9:
04:dd:bc:7e:be:09:3a:84:0b:82:1c:81:d7:aa:77:8f:0f:7b:
cc:70:bf:dd:65:5d:e0:f2:a2:7a:c7:27:58:f7:56:a8:4b:46:
3e:a6:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:38 2026 by rpki-client