Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: hVDIgEaLGGKq7VhHqLgIt/OBSBLT4mHWCn5AmwQ+e5o=
Subject key identifier: AD:D5:C9:99:70:23:92:65:CC:FC:72:FA:AD:99:F9:E5:1D:AD:99:16
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019CA97CE7DBD1729C8D03CA8F659F49F8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0F6B
Signing time: Sun 01 Mar 2026 13:01:01 +0000
Manifest this update: Sun 01 Mar 2026 13:01:01 +0000
Manifest next update: Mon 02 Mar 2026 13:01:01 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: Sk3TRhPRxccQLZFLgkLlrINCKwywEO1B2rgnSMxQ7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:e7:db:d1:72:9c:8d:03:ca:8f:65:9f:49:f8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Mar 1 13:01:01 2026 GMT
Not After : Mar 2 13:01:01 2026 GMT
Subject: CN=add5c99970239265ccfc72faad99f9e51dad9916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:0a:ea:f5:38:98:73:f5:04:48:45:3e:cf:
cd:c8:30:96:86:48:9b:ad:cc:08:02:90:2a:e6:64:
d1:eb:73:70:de:e8:2e:b6:22:f8:8f:17:37:89:1a:
03:36:17:b3:6f:7e:22:e4:e4:79:f3:13:17:c3:07:
1b:0a:6b:36:23:0c:5f:e4:24:a4:c5:73:c1:2c:2b:
0c:78:dc:2c:1a:da:63:1f:60:0e:89:47:db:5d:7d:
ab:93:51:5b:90:8e:58:b8:34:2f:e9:e8:a9:c6:39:
52:e7:fc:b2:3b:06:80:da:28:ed:52:18:2b:2e:df:
a5:ef:89:2a:ba:98:58:db:e2:fd:0d:13:63:fe:54:
85:15:5a:85:e1:17:12:6e:57:09:61:aa:c3:71:f6:
70:76:65:61:b4:28:1c:31:e1:8f:dc:69:aa:6b:ad:
79:31:6c:9d:ca:4e:37:04:a0:73:aa:b6:d4:5f:a0:
d7:dd:8c:b4:d9:06:53:70:6f:6b:5f:02:7c:a3:21:
69:a2:b8:cc:db:87:83:71:e3:b1:31:5c:13:7b:90:
18:d5:e3:af:cd:03:47:37:42:e8:e8:23:08:72:84:
f9:79:37:54:bb:69:89:a7:e4:cd:b6:57:fd:6c:d2:
08:7e:76:20:a5:46:50:fc:b8:1e:ef:33:2d:d6:98:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D5:C9:99:70:23:92:65:CC:FC:72:FA:AD:99:F9:E5:1D:AD:99:16
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:01:f3:c6:2f:97:11:bb:55:20:98:a2:e2:f1:99:d0:59:
dd:c0:6b:6a:da:a2:9e:48:6a:94:33:bc:0a:eb:2b:5c:21:ee:
3d:6c:dc:ef:d1:09:5f:61:63:50:00:2a:d9:8f:1f:3d:d3:fd:
51:36:5a:95:ff:73:6e:06:7d:c0:fc:d3:e7:aa:ff:28:87:85:
4e:d9:ff:a1:40:35:3b:bc:b8:21:8b:96:be:8a:ab:d4:1e:2f:
6b:89:ca:de:2a:46:47:19:e5:12:99:c3:1e:6e:57:f7:bf:96:
3b:db:4d:52:2b:71:a6:de:4c:8e:70:b7:ef:06:25:ba:ab:a0:
26:75:bc:72:62:5d:cc:05:6d:97:05:19:91:d7:24:42:ac:f8:
61:5e:12:88:18:ed:76:c9:aa:75:97:f0:e1:6f:c8:07:31:7d:
0b:e1:e0:71:0f:cf:9a:1b:8a:d9:5f:8f:a1:f2:e7:a8:17:24:
5f:ad:24:ab:46:23:c4:f2:79:40:d4:e4:34:1b:07:36:b4:2a:
1c:b4:ec:2d:37:59:e7:2d:b7:87:4c:c7:7c:72:d2:c1:26:ab:
54:05:5f:74:0f:01:cc:f7:fa:50:ef:34:2c:c5:62:de:71:9f:
99:78:2f:54:38:6e:67:9c:50:c0:f7:51:2e:02:81:89:e2:f2:
e8:0f:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:32 2026 by rpki-client