Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: 13ZD0B2HOjJqhnTKtZb+kwXUkpy8xv3cd8Q/Wo+dfN0=
Subject key identifier: DC:32:B0:C2:03:A7:CF:DC:31:13:F9:A1:14:5B:A2:72:8B:D8:61:E9
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 019CAAC6FEAF410E2EE0A1AD7D3F4C85E2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0D15
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: PRKEo4J7jtIbUbm68LcXFLO7+LzizwzjvdgK2FeRMUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fe:af:41:0e:2e:e0:a1:ad:7d:3f:4c:85:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=dc32b0c203a7cfdc3113f9a1145ba2728bd861e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:f3:46:1b:0d:ae:a0:cc:fd:d2:6d:5b:7b:
9f:a1:72:a8:8b:34:16:5f:42:5b:39:21:33:81:8b:
6d:da:d5:38:d1:e1:d0:a9:47:0b:b5:7b:95:28:3f:
52:18:0c:64:b5:36:b9:6d:2a:55:b4:ed:6c:e8:cd:
cb:f3:a7:84:04:32:0f:db:7e:38:af:f7:39:2a:b9:
ee:f5:5f:b9:83:72:57:56:65:d9:e1:f0:b0:55:2d:
b9:7e:4e:33:26:e0:c2:1e:73:f4:76:67:53:ad:c2:
60:38:dc:3a:20:05:f5:21:01:39:f2:6a:e6:4e:ca:
fd:ab:ed:4d:56:72:ec:f1:9b:5d:e3:27:df:db:22:
8e:bc:b3:a1:27:d7:8d:de:49:1d:d1:7d:23:3f:5a:
e2:b4:74:18:65:f5:8c:42:4b:62:68:29:f0:8e:ae:
6b:6f:15:c4:dc:30:c8:b2:01:43:93:f9:34:20:0c:
9b:ff:23:70:22:fe:63:4e:45:a4:b8:56:c8:58:80:
31:78:ee:1f:8d:f0:26:98:c2:51:6f:50:97:4f:94:
bc:40:a4:08:31:e9:54:c8:71:54:bd:a4:8c:b8:cd:
ef:2f:53:d3:4f:0a:e2:33:e6:0e:80:04:9d:1f:91:
15:a0:0b:0e:54:09:cf:5a:f5:47:9f:1d:82:67:93:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:B0:C2:03:A7:CF:DC:31:13:F9:A1:14:5B:A2:72:8B:D8:61:E9
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ed:1e:1d:2e:ec:57:79:81:cd:ee:a2:80:91:6b:b0:36:ff:
aa:91:a1:05:28:4f:88:f8:9f:40:83:c1:62:d3:2a:94:63:38:
f7:54:5b:b7:bc:06:77:9e:ec:b9:ea:a7:34:2b:e4:41:54:a9:
f9:93:83:f3:a7:c1:e0:7a:13:17:43:a2:b9:58:3e:0f:a2:fc:
72:38:8b:e2:e4:2e:c2:a2:24:93:a2:0c:8b:bf:84:e7:09:44:
15:48:07:84:f3:0d:9b:e4:18:e2:a3:a2:4e:84:7c:2f:bc:4b:
78:1e:df:81:c9:54:78:78:88:c4:c3:d6:e5:97:db:04:df:03:
e9:d9:9a:1d:ee:01:2a:a9:f1:86:6d:92:fc:e8:57:78:87:97:
b7:f6:e3:07:55:55:bd:85:85:70:41:0d:23:5c:c2:e0:ef:ee:
8a:3e:e4:1f:bb:97:0f:30:f1:76:4f:23:c0:01:4b:9a:bd:bc:
6d:bb:2e:81:af:0c:5b:a5:bf:5e:9e:10:88:c8:51:fb:0e:89:
d6:76:66:e8:60:d1:fb:ed:bd:ab:70:f8:50:e1:0d:42:37:50:
c3:cc:3e:bc:4e:30:52:c1:79:84:6e:8e:4a:42:fa:44:18:ea:
d2:50:55:7a:51:f8:d8:14:05:ea:61:31:41:05:b5:e1:94:4a:
bf:dc:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:03 2026 by rpki-client