Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: wyDf04gqh/Bwd1Gldq/BN/8Nx4nzSUK3Nza49Q+0zbw=
Subject key identifier: 11:2F:5F:2C:9D:9E:CE:D9:00:13:13:E2:41:4A:68:9A:C7:26:42:37
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 019D9C2C8AB134ADF61497E9D6AD30B09F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0D92
Signing time: Fri 17 Apr 2026 16:00:57 +0000
Manifest this update: Fri 17 Apr 2026 16:00:57 +0000
Manifest next update: Sat 18 Apr 2026 16:00:57 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: sLATr/1+1iK/4Ef8xJAdgmzd0R5EI6HDO4LAPLIz85w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8a:b1:34:ad:f6:14:97:e9:d6:ad:30:b0:9f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Apr 17 16:00:57 2026 GMT
Not After : Apr 18 16:00:57 2026 GMT
Subject: CN=112f5f2c9d9eced9001313e2414a689ac7264237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:78:00:6b:8c:9d:3d:aa:7a:bb:08:3d:0c:
75:25:37:35:fb:e4:96:f1:31:c2:1f:21:1b:8a:67:
93:81:20:07:a0:d5:7c:c4:4b:40:5b:bd:43:2b:2b:
45:fa:41:1b:29:c0:1f:2d:c8:18:66:6b:41:0a:8a:
d1:c2:71:1b:a3:8e:39:bc:80:43:a1:15:99:db:d6:
37:ac:fe:ac:14:61:18:ea:3c:81:f5:33:0d:42:49:
cd:43:eb:a7:18:f3:d5:fe:a6:9b:08:e1:32:8f:3c:
de:8e:2a:83:5b:0f:29:06:76:57:b4:69:2a:25:16:
c1:96:33:0c:7e:0c:f1:8b:18:bd:89:26:c1:78:ad:
e6:48:b3:c0:d9:8e:52:18:79:33:71:b7:48:01:79:
45:06:31:7f:1b:54:82:39:5c:72:1f:4f:e2:dc:82:
0f:1f:cd:5d:fb:0d:25:d8:bd:c3:28:bd:12:b1:f8:
16:d3:f2:c3:4d:aa:11:93:92:84:c5:f1:e6:d8:49:
c9:63:2c:ac:7c:44:ee:02:75:30:c7:a8:25:8e:64:
cc:f2:97:a0:1b:8b:46:20:c2:46:6c:a1:10:f6:ad:
3b:cc:04:2d:4b:d1:ea:7e:f2:28:54:79:79:51:bd:
e6:34:0e:e3:ad:05:bf:ef:de:4f:93:41:8f:f8:07:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:5F:2C:9D:9E:CE:D9:00:13:13:E2:41:4A:68:9A:C7:26:42:37
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:71:f0:91:e7:98:44:07:49:d0:b8:d3:34:73:cd:92:29:
60:6e:61:56:9f:da:a3:5a:5d:bb:bf:a6:db:7b:a5:b1:e7:0b:
94:f7:9a:ab:a9:48:df:ce:cb:65:1d:45:90:64:7e:bf:9c:ed:
62:01:ba:7b:46:7c:a0:b4:7b:2b:f1:67:3f:0d:6c:d2:04:d4:
a0:f2:90:3f:28:a8:bc:a8:bf:98:4a:9d:01:38:4e:8d:02:84:
bd:a0:0e:d7:f6:a5:13:2f:8b:94:8c:37:92:aa:bf:34:0a:2a:
63:97:50:e4:45:70:c1:82:b5:c4:21:db:14:de:31:d3:58:f2:
d3:24:54:a2:05:7b:4f:23:23:0b:bf:b5:d7:c4:99:a4:cc:bb:
00:5c:56:8f:38:df:af:3f:6a:70:9a:b0:1e:1e:e0:11:14:0e:
1f:95:3c:07:1a:f2:5f:a6:b1:ca:85:a6:d8:c4:38:d5:06:0e:
91:bb:b2:3f:5c:5e:c2:2f:7d:d1:7f:72:38:9e:36:80:4b:66:
a9:89:e2:ef:8e:94:19:53:95:e5:0b:b2:3a:31:1f:3d:2e:52:
4f:14:53:7f:56:1b:e5:78:e5:d1:2d:f4:c4:03:83:30:43:b6:
d8:e5:99:75:8f:3b:cd:96:8e:3e:c7:2a:22:e8:85:bb:39:16:
99:60:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:04 2026 by rpki-client