Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: XIPkwOFWBcO6N1FQ+e6ONL/ylfxz0UPD4aht6XHip2w=
Subject key identifier: 2E:B7:F6:88:31:8C:D6:14:4A:30:00:59:F5:65:64:41:EB:6B:0F:7C
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 019CAD5962401D5ECAD0DD0BB6068B8D3B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 09D4
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: B9Vvcbs4nAObvhBiBAC2TZjrBTmDkf/fpHO90+3iQqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:62:40:1d:5e:ca:d0:dd:0b:b6:06:8b:8d:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=2eb7f688318cd6144a300059f5656441eb6b0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:cb:44:6d:ab:d6:0e:17:d1:9b:e7:1c:73:
49:8f:1c:f2:da:fe:49:10:e2:93:c8:28:6e:8d:28:
49:3a:14:37:cf:0e:e8:5b:17:d7:f7:46:99:c3:22:
77:0f:27:2f:38:4f:81:91:de:00:d2:7d:60:20:db:
36:89:69:e2:d2:a7:9b:76:26:b7:62:b1:3b:a5:5d:
2d:e5:1f:f7:f0:b1:66:8d:42:9e:e4:69:12:1e:65:
81:7c:bf:a9:32:f6:03:76:21:99:4a:e5:c9:47:d1:
b4:5a:85:21:3a:2b:c9:3d:30:8b:fd:12:b2:1c:c4:
3b:5c:e4:78:2a:05:61:9d:e5:1a:5c:cb:a6:fe:0c:
be:d9:d7:37:4f:4c:1d:c8:15:65:05:89:29:f8:14:
64:66:90:95:c1:af:47:35:08:60:6b:4e:16:7d:a9:
a5:e3:14:4b:24:64:86:04:61:fa:9a:93:49:1d:4e:
5b:38:9f:e3:69:5a:98:e7:b3:6e:e0:1a:84:13:e0:
f7:e6:c2:ce:85:11:c5:e7:a1:89:1b:a6:ae:3a:70:
bf:47:11:f1:14:85:bd:0b:23:ed:96:66:e2:64:53:
3f:c6:c9:62:39:42:b5:50:f6:b2:92:05:94:50:77:
06:53:5e:4c:03:19:b6:27:2d:da:cb:e9:ee:c5:b0:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:F6:88:31:8C:D6:14:4A:30:00:59:F5:65:64:41:EB:6B:0F:7C
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d4:68:a7:be:f7:94:99:94:b4:bd:e4:18:7c:b2:d6:f6:6b:
9f:e4:33:3c:0c:8d:6e:1c:63:de:92:1c:d7:e8:c4:9d:49:c1:
d5:10:94:1b:fa:07:c3:aa:1e:94:95:50:2f:0a:15:87:80:fc:
8e:0f:fd:4c:89:69:53:75:d4:ea:a7:2c:73:e3:18:5f:d9:70:
14:5d:f4:c1:01:df:8e:ae:aa:82:c1:b8:05:48:66:5a:5d:ba:
4d:da:8c:f7:b4:1e:9f:33:90:a5:af:be:b8:31:e3:d0:31:69:
35:ea:60:9b:2a:3a:28:c5:e7:61:a0:06:ae:11:2e:cb:c8:6b:
2c:80:05:1b:bd:12:f8:e2:2b:b6:67:ed:f5:5f:31:71:9d:df:
e1:02:49:6b:d7:ec:72:92:a3:24:ff:99:69:b4:2c:9d:be:2f:
c6:9c:d8:6d:b9:89:0a:d2:11:6f:94:7e:22:b4:45:87:b5:39:
f7:69:46:da:c6:ee:7e:c5:a5:4c:0c:f1:85:e3:a9:f6:e8:1d:
0c:ce:36:03:5c:77:f9:f8:7c:6b:7b:05:e6:fa:a1:d4:fb:7d:
58:2d:9f:57:ac:a3:15:e2:09:9b:87:41:76:15:3a:e2:67:0a:
2d:4c:53:e9:b3:ca:37:b4:d3:27:bf:4b:eb:08:6c:df:fb:72:
6c:04:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:19 2026 by rpki-client