Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: sGqwlATSoWDyaCprNieNVvMg+AjgpmPB7lXolQMW/y4=
Subject key identifier: CD:0E:C7:2C:46:90:8F:CF:4E:71:54:61:6F:6A:B9:FE:28:78:E2:CA
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019CA9457411A1997B4B3A8852271A6B26AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0249
Signing time: Sun 01 Mar 2026 12:00:27 +0000
Manifest this update: Sun 01 Mar 2026 12:00:27 +0000
Manifest next update: Mon 02 Mar 2026 12:00:27 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: NfJ2FWytX2jGao95jhQe1X7rM68bKW5ZxXm7JomZhfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:74:11:a1:99:7b:4b:3a:88:52:27:1a:6b:26:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Mar 1 12:00:27 2026 GMT
Not After : Mar 2 12:00:27 2026 GMT
Subject: CN=cd0ec72c46908fcf4e7154616f6ab9fe2878e2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:1a:eb:c5:9d:7b:45:06:78:1b:9c:1c:4b:
23:81:13:43:36:14:21:03:0a:e6:87:af:c1:c9:bf:
a3:d4:fe:1c:d8:b1:ce:57:4e:64:16:b1:e1:67:e0:
d4:28:9b:26:0f:90:06:e7:f1:96:bc:88:aa:b8:14:
b3:11:11:ea:14:9b:ac:c2:80:92:80:c8:c5:91:e4:
2a:be:60:87:19:7f:47:03:b6:24:0e:55:8a:20:1c:
d7:9b:87:b9:bc:c4:ae:75:72:46:63:fb:3e:9a:ed:
53:aa:b6:af:e5:9f:bb:e9:20:15:c0:db:62:6d:ca:
74:45:be:e1:43:85:56:72:d5:d5:76:d4:2d:3f:ca:
50:91:80:25:48:33:19:92:be:2e:0e:9e:e3:e2:1c:
52:b2:73:fe:8d:11:07:5c:f6:fe:7c:99:46:f5:d4:
c3:49:dc:8d:6d:02:c5:b6:83:11:c8:8f:27:f8:c2:
7d:81:b2:4a:a5:0f:79:f1:6a:59:e5:71:a3:35:72:
ec:0c:d0:91:be:36:f6:71:1d:0d:f0:46:c7:76:d4:
9c:ca:cf:5c:23:c2:22:e4:7b:d6:b7:21:56:d5:62:
dc:8c:52:2d:a4:df:ad:a1:97:2c:15:74:91:5d:80:
3d:00:c8:14:d2:89:c6:a0:42:bb:ef:ee:cd:51:f4:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:C7:2C:46:90:8F:CF:4E:71:54:61:6F:6A:B9:FE:28:78:E2:CA
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:ed:9a:e2:d4:8c:be:1b:b8:76:2b:93:a2:e6:10:86:de:
2f:36:4b:29:54:a8:a9:06:25:93:c2:dc:97:8b:98:03:ff:9f:
cd:c0:bf:e2:40:50:58:2a:d6:6b:61:f5:d2:5e:5e:9f:f1:f5:
a8:65:8e:10:86:07:cb:93:40:c8:6c:40:fd:2f:1e:1a:8a:4c:
83:6b:d0:c6:a2:8b:b8:ad:64:b7:e8:2f:66:56:9b:1f:a2:ba:
4f:14:9f:c0:3a:fb:07:09:ea:b5:32:18:4d:e1:59:93:72:88:
6b:74:c4:6c:a6:2d:b7:4f:1a:43:5e:20:48:65:b8:15:9c:f3:
36:f7:07:ee:08:61:9f:4f:6a:6c:98:dd:a8:2b:cc:2d:e6:ac:
02:34:a7:bc:76:46:19:3b:63:a2:96:dd:e3:e0:a8:22:c3:fe:
be:0e:03:b4:a0:71:bd:25:fe:b3:f6:56:84:ba:1a:3f:3d:35:
47:4e:13:19:ed:ed:31:f3:ff:d9:69:4b:a4:cb:a3:6b:a6:f4:
07:e0:b1:8a:c7:f2:9b:46:14:3c:1a:78:0d:fd:25:b4:98:37:
6c:b8:97:0c:c1:2c:8f:3d:67:14:6d:2a:f8:1f:9c:0c:ef:f5:
e8:e7:a2:78:0d:51:5a:fe:78:9c:ba:5d:15:fe:36:eb:f6:73:
44:c7:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:36 2026 by rpki-client