Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: 4MaA4k+1W7Dxg2KmiIkY0M2HPk0lttujqQQgbaP06AE=
Subject key identifier: FC:6E:58:9A:71:19:D0:DC:39:64:33:4B:89:75:DA:0B:61:6B:41:EB
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 019CAED9E41EF84B7FA58B25BCCF46C1F869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 0203
Signing time: Mon 02 Mar 2026 14:00:41 +0000
Manifest this update: Mon 02 Mar 2026 14:00:41 +0000
Manifest next update: Tue 03 Mar 2026 14:00:41 +0000
Files and hashes: 1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: FbuGykWSXvDdcM9KFlUaTiPvsj8m0IpEyJ7pJiY1XN4=)
2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:e4:1e:f8:4b:7f:a5:8b:25:bc:cf:46:c1:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : Mar 3 14:00:41 2026 GMT
Subject: CN=fc6e589a7119d0dc3964334b8975da0b616b41eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:a3:9f:8e:a1:9e:3b:b3:54:a8:35:46:cc:
60:0d:76:b1:0e:16:ef:9c:2a:a2:41:f3:28:5d:dd:
1f:55:f5:51:db:05:e6:94:ee:9e:ef:b1:0f:5e:e4:
93:82:84:bc:eb:62:87:52:97:0d:02:d4:bd:a4:48:
c7:76:6a:68:01:98:4e:7e:83:d8:38:c4:b7:8a:99:
0b:d3:33:6a:f5:53:ac:1f:53:4d:b2:93:e9:ab:a6:
c9:d7:a3:8a:7f:5b:95:0e:7d:2d:c7:02:40:24:ab:
a0:69:dd:85:9e:4d:c9:e9:e6:59:30:90:8a:d1:b3:
78:7f:8d:29:4a:83:f0:bc:6c:dd:4a:10:cf:0c:c3:
f9:1c:8e:63:02:7e:43:56:c7:08:aa:ea:c1:08:ce:
8d:77:7d:88:9a:27:d6:03:9f:e4:f5:61:c2:eb:7d:
fa:b5:9a:cf:a5:1b:c4:7f:ca:7c:18:1e:60:13:41:
31:3b:db:68:63:d8:91:c2:d2:15:56:ce:16:09:39:
0f:e9:d9:44:94:3b:74:11:60:8c:22:0d:25:80:38:
86:69:4f:34:9d:8c:97:72:0f:2d:41:df:5b:14:fe:
0f:f0:8c:8c:35:5e:e6:f8:76:8a:82:58:84:83:29:
10:ee:7d:0b:76:40:3b:48:bb:05:89:f5:bf:e2:30:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:58:9A:71:19:D0:DC:39:64:33:4B:89:75:DA:0B:61:6B:41:EB
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:d0:a5:80:db:6e:dc:f4:b4:60:5d:76:9b:8b:e3:46:7e:
23:f6:04:52:87:4d:bd:4b:6d:f4:ad:c6:c9:6a:a9:ba:a9:5b:
49:56:76:4f:68:2d:26:a3:0b:fa:31:26:71:c5:5e:c2:44:33:
50:55:63:10:47:bd:05:0b:73:68:0c:00:0d:2f:4b:20:ca:26:
46:b9:98:49:77:d4:2e:3d:bf:4f:e0:dc:e3:bf:61:65:9c:ad:
89:28:4f:85:a9:42:15:7e:39:39:d2:b4:24:0e:47:ed:91:e6:
2e:7b:7d:26:d9:c4:76:4d:05:38:67:c0:50:92:cc:9d:ab:f1:
a3:e2:22:51:44:cf:94:46:d7:4a:e4:1f:ed:3f:5d:81:a6:a0:
7a:e7:9f:73:98:d0:f3:85:21:76:04:b8:b0:86:0e:3a:8b:1c:
ef:e0:d2:ca:4d:6b:da:0e:68:6e:76:10:9b:11:b0:ef:4a:88:
3e:86:b9:7d:65:6e:87:88:3d:d1:cf:8f:48:15:f7:fa:6e:b9:
36:90:a9:4d:5f:16:28:17:0b:d7:8d:c4:2e:8c:b7:0e:56:fc:
b9:41:b0:eb:54:74:80:eb:bd:d8:29:cb:54:17:97:5f:76:80:
98:a0:ff:b5:86:28:2f:2d:db:c7:dd:bc:ec:e9:8c:e4:74:7b:
f3:7b:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:23 2026 by rpki-client