Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: 6SgXImAfSMFUIxn3rGgeGm7E6Oq12th+HAoRzLwf9mQ=
Subject key identifier: 93:A7:78:C9:96:A4:72:E6:A3:0B:C4:73:1F:AB:BC:14:9F:BF:FC:7C
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 019CAD59EB770E03E5A9927B38511A09987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0EB1
Signing time: Mon 02 Mar 2026 07:01:17 +0000
Manifest this update: Mon 02 Mar 2026 07:01:17 +0000
Manifest next update: Tue 03 Mar 2026 07:01:17 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: a5+Vph2MIE9i4lyxJB3uoB+B98sIZODIYd4FfwNZHgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:eb:77:0e:03:e5:a9:92:7b:38:51:1a:09:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Mar 2 07:01:17 2026 GMT
Not After : Mar 3 07:01:17 2026 GMT
Subject: CN=93a778c996a472e6a30bc4731fabbc149fbffc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:40:f5:4f:19:92:94:86:ca:de:37:fc:d5:
9b:b9:0e:e9:64:50:b6:12:1d:ec:e9:bf:f0:84:f9:
ec:47:27:59:bb:90:9d:7d:03:74:e1:d1:09:91:18:
16:77:cf:9d:cd:b0:27:f1:18:88:41:c6:5b:cc:22:
37:4d:01:ae:8f:59:49:f4:42:d1:e5:3d:6e:83:4d:
80:b9:e8:52:37:a5:af:93:c2:58:19:f8:a2:3b:5d:
de:3d:ff:6f:d2:50:1b:44:dc:40:da:43:0c:ff:51:
e4:ec:85:9a:70:26:1a:87:e1:ea:d0:38:b3:b2:07:
8a:6c:b4:b0:b8:b4:7e:ff:0b:94:20:7e:52:30:db:
9b:3d:ca:cc:12:19:f6:0e:f0:ca:a7:c7:b6:27:85:
5d:60:ee:91:14:77:ea:e1:b5:cc:6a:53:bc:ae:75:
c0:df:7c:43:b6:03:07:fa:da:0e:19:af:8d:dc:96:
61:d8:58:3f:42:c2:9c:eb:6c:5c:14:d8:11:0c:29:
40:2b:6c:7f:fd:a1:0a:53:ab:be:05:36:4b:a4:50:
cb:7a:a6:21:f1:bc:de:c3:4e:98:9b:95:57:a2:e5:
4a:af:e0:89:1c:1a:99:79:3a:50:b8:33:7f:f6:60:
8a:d5:3b:2c:87:ba:98:a0:2f:38:c0:10:b1:87:8c:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:78:C9:96:A4:72:E6:A3:0B:C4:73:1F:AB:BC:14:9F:BF:FC:7C
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:a6:a5:72:57:95:04:4f:25:7d:d9:5a:60:2f:07:93:e0:
a3:2b:d7:55:f1:0d:24:f6:c3:d6:40:12:c4:63:7f:cc:7b:13:
8d:1b:91:fa:d0:83:2c:47:02:e0:e4:e3:6d:99:bf:88:dd:5c:
bc:9c:5d:cc:74:eb:09:3e:f0:60:cd:2b:5d:a9:ec:ec:26:01:
f6:6b:f2:0f:29:86:3f:72:f3:71:a3:eb:31:1e:82:74:3f:ad:
ee:a8:1c:30:14:e2:d3:ea:31:de:12:23:6c:fb:82:b0:42:e7:
ea:86:71:5d:76:df:05:69:83:83:c0:ed:08:60:c0:39:72:ba:
5c:d2:61:ba:ab:f5:fe:e8:14:7a:fe:44:9d:e8:45:91:f7:7b:
21:82:49:90:e2:76:e0:ec:11:b4:c7:64:71:39:e1:b0:f0:0c:
fd:07:99:97:9f:e9:de:9a:ec:f3:0d:1a:45:10:a3:92:ba:ab:
e3:7a:8e:85:8d:26:32:c2:93:b2:c3:60:f9:a2:fc:a8:04:90:
c3:82:71:f0:c1:82:87:62:aa:52:23:53:b0:b4:9c:e0:ae:f2:
ad:49:fc:d9:59:cf:77:67:63:ea:53:5e:e6:be:62:7f:11:a8:
b1:17:1a:03:3e:e9:4c:33:d0:e8:d8:86:c3:cd:41:0b:c8:36:
73:58:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:17 2026 by rpki-client