Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: 0Wok7todOsED+nVxuWztJFW+SJHPJLViFMdQpb2HfHg=
Subject key identifier: ED:92:C7:3B:7A:15:E1:86:89:20:5D:F2:7C:31:DD:DA:56:0F:95:4C
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 019CAF4833A90F4E4DC2696B53070C94C5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 0BED
Signing time: Mon 02 Mar 2026 16:01:10 +0000
Manifest this update: Mon 02 Mar 2026 16:01:10 +0000
Manifest next update: Tue 03 Mar 2026 16:01:10 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: aL+qLi7L1TIFyHoakvLOeggAwJtI+PzK3gpUKaVgDK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:33:a9:0f:4e:4d:c2:69:6b:53:07:0c:94:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Mar 2 16:01:10 2026 GMT
Not After : Mar 3 16:01:10 2026 GMT
Subject: CN=ed92c73b7a15e18689205df27c31ddda560f954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:3c:39:2b:8a:8b:d6:07:0a:49:12:af:fe:
bf:eb:14:57:96:02:96:76:ff:98:f7:9b:66:5f:2e:
dd:42:49:90:79:f2:83:72:cc:c5:f9:22:44:94:5c:
19:76:36:f1:e1:7e:cf:60:c6:ef:77:c2:e2:2b:1b:
b2:99:d3:c4:46:8c:b9:fe:ca:70:93:8d:2d:44:24:
4d:0d:cc:43:78:cb:a6:ec:cc:0d:46:d1:21:15:de:
65:a7:cd:f7:69:cf:fd:7e:4c:89:ca:83:e9:8a:f0:
f9:8f:6d:95:82:1a:67:bd:9d:40:5b:89:5b:69:9f:
05:4c:dc:76:d3:59:82:dd:f3:84:d3:6d:ff:33:3a:
97:be:a4:05:a7:a2:77:ca:73:d1:a9:ae:8c:7b:d2:
98:ce:ad:eb:35:83:57:47:41:36:a7:c8:4a:9f:ca:
d2:1b:72:43:17:3f:d6:e3:31:f3:d4:a4:22:79:b9:
99:78:70:ff:f4:45:71:85:79:f0:05:38:1d:46:9b:
f4:59:cb:7a:cb:36:31:80:4c:0f:75:a4:97:7a:75:
e2:ee:f6:e4:29:41:b1:e8:16:f8:13:b9:76:b1:40:
33:26:a7:8d:5e:c2:48:85:1e:d6:6e:1b:1d:2f:ed:
76:e2:23:22:b1:a4:32:c2:be:cb:2c:0a:45:83:09:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:C7:3B:7A:15:E1:86:89:20:5D:F2:7C:31:DD:DA:56:0F:95:4C
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:3d:a4:26:86:14:81:f1:ef:5b:ec:00:b7:bc:2c:7d:c7:
6d:36:fd:05:d9:c6:4f:0a:e4:df:30:7f:fd:16:d8:f0:44:9d:
38:26:a4:8b:c8:a3:fd:2f:ce:cb:80:24:18:c0:74:b8:02:1c:
22:85:3c:28:e3:7c:75:14:c6:73:52:f9:f2:33:af:ba:02:b9:
f4:6d:4d:0b:0e:01:ea:51:30:f3:b2:cc:ec:86:81:24:cb:bf:
1f:a9:43:39:9e:d4:14:2f:c5:6a:a9:3c:ed:c1:ec:1d:c8:45:
94:60:7c:c8:61:3a:8e:6f:57:6f:cd:22:d4:c5:dd:6b:3c:10:
31:d6:62:28:e5:ed:83:d1:a8:5d:de:68:79:32:76:ee:45:b1:
4b:56:6a:e6:bc:c0:b3:b9:bc:6c:3d:d6:b2:f6:e1:04:e8:e6:
43:08:7e:80:6f:ee:b0:1e:00:5c:bd:5a:62:b4:52:b8:35:9f:
2c:6a:46:2c:92:51:85:f6:ab:65:96:45:5f:55:bc:30:d0:58:
a6:75:79:59:4c:1a:78:c9:84:2a:04:d5:37:62:3b:76:20:75:
de:98:3a:38:f0:dd:ef:48:73:75:c4:e6:0c:30:7d:24:d6:28:
c1:c7:60:78:4b:ba:d4:22:d2:db:5e:25:7c:e4:55:1a:d5:82:
9d:06:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:11 2026 by rpki-client