Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: s0aDyRBBnvOXI4pWVJ/pDMnrUapnM6LOy4pGkmNHRKM=
Subject key identifier: B7:BB:04:7D:72:BE:E0:28:5F:22:8B:3F:A5:3C:2B:8B:6C:10:9A:3A
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 019D98F54E9B42C6F08F753FE3F3A26E5181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 09A3
Signing time: Fri 17 Apr 2026 01:01:46 +0000
Manifest this update: Fri 17 Apr 2026 01:01:46 +0000
Manifest next update: Sat 18 Apr 2026 01:01:46 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: FfA49OLg2qxwuf7FK4ZVmQFB+MGB42Yg4gxJwLVX4mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4e:9b:42:c6:f0:8f:75:3f:e3:f3:a2:6e:51:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Apr 17 01:01:46 2026 GMT
Not After : Apr 18 01:01:46 2026 GMT
Subject: CN=b7bb047d72bee0285f228b3fa53c2b8b6c109a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:87:94:9c:3e:27:9c:02:ac:e2:96:a8:3b:
4b:e8:5c:38:0d:08:5f:a8:7a:3d:3a:ec:19:95:1b:
b2:bd:0e:55:fb:bd:01:07:0c:cf:69:32:15:90:e2:
09:28:70:c1:bc:a2:34:71:09:64:6c:f2:1b:99:eb:
ad:ec:04:8c:11:aa:99:b7:dc:93:b3:ee:eb:8f:70:
55:b6:9d:f9:73:a9:d5:71:8e:8c:01:c6:ec:17:0c:
5e:c0:e7:e9:1c:11:53:02:24:80:79:41:71:44:a1:
fb:24:24:ef:06:18:13:87:b5:22:91:de:7a:3d:3d:
1b:8b:59:a4:9d:69:7b:91:47:a1:6f:c3:f9:b5:9e:
bc:38:50:5b:63:08:16:9c:1a:2d:92:c4:0c:52:69:
29:b2:ac:a9:ac:e0:15:80:a0:fc:16:de:63:52:cb:
be:62:b6:b3:28:08:13:eb:48:92:57:62:e8:f5:3d:
bc:5a:a2:50:89:72:22:98:36:b9:8e:4c:f7:dc:8f:
a5:3e:94:05:d9:19:f6:a2:0d:94:68:c6:b4:e7:63:
93:0a:c7:40:70:bd:28:7b:f5:08:ac:a7:ea:eb:56:
7e:aa:eb:9c:69:dd:ee:86:56:4f:e6:bd:cb:2b:97:
08:31:6f:a1:cc:44:d9:d4:05:08:da:1d:0a:f9:c7:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:04:7D:72:BE:E0:28:5F:22:8B:3F:A5:3C:2B:8B:6C:10:9A:3A
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:76:64:0e:23:5f:b8:50:a4:12:1d:94:fb:c4:fc:c4:71:bd:
0e:cf:e5:b1:27:f5:44:82:ad:c4:b7:ef:69:e6:a3:06:33:6e:
da:fb:10:3a:d7:ed:a8:39:3e:16:c1:03:13:26:c6:9b:76:c1:
87:7b:f3:bc:d4:8b:90:8e:30:81:6f:88:f3:ea:fd:c7:5d:58:
14:5c:fc:6d:18:dc:a2:47:c8:73:03:e4:51:04:3a:fd:5d:04:
1f:e6:f4:34:e6:6a:0b:aa:37:84:43:93:e6:e5:6c:4d:57:97:
74:1e:b3:ac:af:54:06:65:fe:6f:39:86:1b:15:87:49:ff:54:
f3:3d:b7:2d:ac:20:56:4c:23:db:07:1b:52:74:54:ce:ef:56:
38:de:2a:b9:ab:3f:29:20:a3:21:ee:78:dd:b3:e8:0c:ab:dc:
88:b6:67:e2:82:62:0e:44:d0:92:d6:23:31:88:ba:d5:e8:ec:
08:d6:f4:f8:6d:7b:e8:e7:9f:e3:27:22:74:b4:ea:6e:a0:bc:
82:f7:01:20:d4:1f:e5:36:fd:b3:2c:a7:b7:06:2a:8c:ea:a8:
f6:e9:cc:2f:67:8f:ba:76:7d:b5:25:0e:4d:c0:3e:a2:8b:2e:
68:92:35:59:13:ac:09:ab:22:5e:ff:b8:41:fb:da:a4:aa:29:
a9:65:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:33 2026 by rpki-client