Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: sxqGadpQEBIOpGecGpScnEv6SWlq/oHc5yeOJTs6p6M=
Subject key identifier: 68:8E:C1:39:09:89:A5:8C:D9:7A:14:02:D8:0D:4B:DA:C9:42:B5:0B
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019D29CED3DF4A838D4FD5A64721F7E2ABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 11:01:53 +0000
Manifest this update: Thu 26 Mar 2026 11:01:53 +0000
Manifest next update: Fri 27 Mar 2026 11:01:53 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: D8gnA+tTQSQQOKC5N9avbDEZPlByyzZ6zxaVkmyLw4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d3:df:4a:83:8d:4f:d5:a6:47:21:f7:e2:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Mar 26 11:01:53 2026 GMT
Not After : Mar 27 11:01:53 2026 GMT
Subject: CN=688ec1390989a58cd97a1402d80d4bdac942b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:99:42:01:69:e0:36:c2:48:4d:c8:f2:d7:
bd:d8:3e:4c:91:08:de:d5:66:57:b2:88:7a:21:87:
c6:0b:ca:0e:b2:da:b3:cc:58:49:4a:31:0f:1f:f0:
a3:ce:a4:56:e5:4b:cd:ea:53:13:06:b5:f4:82:c1:
c3:8a:c8:f8:f3:fc:a2:88:21:3c:d7:bd:3e:b6:aa:
8c:50:22:05:eb:2a:1d:a9:38:d6:ff:4a:7d:ea:95:
23:87:17:79:9c:ee:86:d1:cc:17:19:20:98:69:5a:
24:36:32:59:cf:14:8c:6d:51:ab:b5:fe:0f:c5:6f:
85:d5:b5:9f:d8:1b:28:6a:44:c0:93:04:d5:88:2d:
04:c6:2e:1a:60:ab:42:ca:98:4c:01:da:6a:4e:34:
c2:7c:84:c0:c4:d2:41:e0:45:14:cb:ea:c8:8c:99:
e3:77:c7:cb:f0:71:a8:6f:5a:f4:04:d8:bc:3a:b1:
58:dc:b9:c1:07:ac:d6:44:fc:27:fa:5f:fe:7c:c7:
a8:17:9a:c1:40:48:86:db:74:83:3d:57:11:af:25:
4c:9f:51:f7:c6:21:fe:62:98:20:19:01:b4:89:71:
ae:70:1b:c0:36:0f:e9:7b:31:3f:29:d9:0d:ab:17:
04:6c:32:e7:e1:7a:b4:b5:55:ba:36:33:d8:16:9e:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:C1:39:09:89:A5:8C:D9:7A:14:02:D8:0D:4B:DA:C9:42:B5:0B
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:5f:64:09:af:7d:b0:57:6d:68:57:a5:dc:72:6b:58:6f:
ef:a3:dd:04:54:52:a8:7a:ab:8f:7c:1f:28:5b:74:b0:47:63:
37:2f:ca:e4:c4:de:93:38:0d:2d:4a:a0:11:be:f8:06:f8:04:
5c:34:6c:3f:5a:26:e4:0a:73:0c:2c:dc:18:52:2b:e6:81:d2:
be:bc:d6:20:c3:03:ab:29:d3:f8:e7:ba:20:44:f3:47:77:4b:
ce:66:2c:c2:e0:83:fc:6a:ae:63:f0:72:d6:c0:eb:3f:08:fd:
ab:a6:f1:40:f5:e0:34:0e:11:ae:10:ec:b4:4a:03:c1:ac:d0:
5d:99:5b:fa:57:47:ec:57:2e:49:ab:7f:37:fb:55:db:e2:3b:
90:30:4f:40:9f:6b:57:5d:60:19:7c:60:b2:0a:ff:60:c5:15:
e4:c3:59:ec:99:43:8d:dc:6b:c3:ef:b2:85:92:07:3b:8e:51:
3f:bf:23:f2:e3:32:7d:41:6a:56:af:f9:8d:f2:35:d0:6a:c1:
59:5c:63:6d:2c:88:91:29:4c:e2:6e:a4:3e:34:e3:f4:31:28:
d8:d5:20:ba:1a:31:c9:ce:a6:35:88:bd:21:a5:f3:2d:5f:28:
7b:b9:13:03:d1:7b:52:9a:a6:16:4c:52:97:42:3f:36:c2:2e:
a9:c1:31:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztPfSoONT9WmRyH34qvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1
NTYyN2UwHhcNMjYwMzI2MTEwMTUzWhcNMjYwMzI3MTEwMTUzWjAzMTEwLwYDVQQD
Eyg2ODhlYzEzOTA5ODlhNThjZDk3YTE0MDJkODBkNGJkYWM5NDJiNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLeZQgFp4DbCSE3I8te92D5MkQje
1WZXsoh6IYfGC8oOstqzzFhJSjEPH/CjzqRW5UvN6lMTBrX0gsHDisj48/yiiCE8
170+tqqMUCIF6yodqTjW/0p96pUjhxd5nO6G0cwXGSCYaVokNjJZzxSMbVGrtf4P
xW+F1bWf2BsoakTAkwTViC0Exi4aYKtCyphMAdpqTjTCfITAxNJB4EUUy+rIjJnj
d8fL8HGob1r0BNi8OrFY3LnBB6zWRPwn+l/+fMeoF5rBQEiG23SDPVcRryVMn1H3
xiH+YpggGQG0iXGucBvANg/pezE/KdkNqxcEbDLn4Xq0tVW6NjPYFp6NpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiOwTkJiaWM2XoUAtgNS9rJQrULMB8GA1UdIwQY
MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut
MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1
LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSZfZAmv
fbBXbWhXpdxya1hv76PdBFRSqHqrj3wfKFt0sEdjNy/K5MTekzgNLUqgEb74BvgE
XDRsP1om5ApzDCzcGFIr5oHSvrzWIMMDqynT+Oe6IETzR3dLzmYswuCD/GquY/By
1sDrPwj9q6bxQPXgNA4RrhDstEoDwazQXZlb+ldH7FcuSat/N/tV2+I7kDBPQJ9r
V11gGXxgsgr/YMUV5MNZ7JlDjdxrw++yhZIHO45RP78j8uMyfUFqVq/5jfI10GrB
WVxjbSyIkSlM4m6kPjTj9DEo2NUguhoxyc6mNYi9IaXzLV8oe7kTA9F7UpqmFkxS
l0I/NsIuqcExYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:01 2026 by rpki-client