Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
File: TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json)
Hash identifier: ZQlZDIucZVA3O0ND2oAg0gH8xWAnMdeH5GrVf9O8o7w=
Subject key identifier: 4F:96:89:4A:EB:B5:47:12:B5:6B:37:D3:8B:CB:E0:C4:8D:A9:C1:27
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Certificate issuer: /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial: 019CABD9A414A5363290DCDF35A27EBD0D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
Manifest number: 0FCA
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: U9fBACbbbG01hn1BQCYwNW5OIqmlRPO0YMnJKVnJo/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a4:14:a5:36:32:90:dc:df:35:a2:7e:bd:0d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=4f96894aebb54712b56b37d38bcbe0c48da9c127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:84:c1:b4:71:c0:db:de:66:84:3e:e2:36:
86:3f:e2:b9:62:d2:9d:60:a0:29:1d:4f:58:2a:f3:
1e:77:33:c4:7d:2c:54:d2:24:be:f5:7a:7f:f1:9b:
e6:77:58:c1:ef:b4:f5:6c:c6:8c:88:5c:80:d7:b6:
69:28:ec:18:60:df:e9:f7:de:16:ac:ba:3e:6c:cd:
83:4f:9c:cc:c5:07:d2:76:58:2f:dc:45:0f:8e:4e:
c9:f4:51:60:ae:7c:ff:47:17:93:bd:dc:31:c0:31:
51:06:19:8f:b3:36:41:77:47:1e:4e:31:56:52:90:
26:92:1c:c7:9c:20:a1:ef:dc:3d:90:77:f6:db:65:
cc:1d:b3:59:34:de:a6:34:8d:ab:7c:49:22:63:a9:
30:4b:63:37:0d:fd:eb:f6:f4:e8:22:96:3b:23:ec:
e7:f6:1a:cc:b4:92:dd:9b:0d:bd:2b:2d:00:1f:7c:
9d:9c:d4:aa:4b:33:14:c4:bf:06:3f:0a:7d:c3:9d:
76:d6:f2:4c:5a:31:3a:c6:e3:63:95:ec:c9:24:b1:
79:8d:ce:a5:49:39:00:9f:73:fe:c2:1d:b0:91:10:
b3:6f:a6:4b:09:6a:ec:07:c6:d2:61:76:fd:e4:15:
90:f8:5c:a2:fb:27:6b:cb:e5:35:69:2f:c0:b0:8c:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:89:4A:EB:B5:47:12:B5:6B:37:D3:8B:CB:E0:C4:8D:A9:C1:27
X509v3 Authority Key Identifier:
keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b7:ab:47:ab:6b:75:e4:d1:4f:66:88:3a:01:ae:15:d5:60:
71:c5:a9:52:61:02:be:36:ad:78:0e:f6:bb:06:df:09:f2:3a:
21:a4:08:4d:3e:5a:46:c4:95:6c:0a:96:e2:35:67:75:71:b2:
82:ff:e7:82:56:a7:44:ed:db:4d:64:90:07:7f:d9:dc:87:8b:
19:55:16:9e:07:59:f8:3a:bb:77:2d:7e:37:03:e6:fa:f7:fd:
f7:6d:74:37:e7:26:71:d0:ad:f6:3d:b7:66:30:62:1f:0a:3c:
ba:92:f9:2f:b4:d1:0b:42:4f:00:ae:bc:1f:a8:b5:c9:3a:a4:
5b:c4:cd:53:9b:fd:57:c1:3c:49:5a:4d:a1:3e:d6:be:35:a8:
10:4e:ce:e7:0b:bc:3b:cf:ec:5d:35:7c:ba:d7:3c:6f:d2:82:
3c:53:5f:65:d0:aa:59:50:7b:0d:bd:c1:86:83:5a:f0:c8:74:
8e:6b:db:a5:25:4e:0f:5f:f9:39:9a:8a:0f:39:53:2a:1e:05:
85:a1:16:2e:e0:04:5c:96:62:04:32:98:c6:fb:01:1f:42:ca:
c7:3d:55:97:36:75:49:af:a2:6c:fa:81:06:2a:c3:d5:7d:ef:
9a:54:c8:22:f0:7f:73:d3:c4:29:b3:bf:fa:85:d8:08:ca:28:
51:e0:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:31 2026 by rpki-client