Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: UScNI2xiVgZlRekx9B1GC8Pls7sPHppoNEgHGLL0TKc=
Subject key identifier: CF:87:34:C1:F4:5B:35:E9:89:BF:7B:99:EA:9F:B6:9C:6E:F5:A6:CD
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 019CAD59BB7DEAB4CA9262F067AFB918BF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 11C3
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: smB848/9lEGOk5ox/AHOvmJh3FyFNckp0cbnejq7oz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:bb:7d:ea:b4:ca:92:62:f0:67:af:b9:18:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=cf8734c1f45b35e989bf7b99ea9fb69c6ef5a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:20:56:78:bc:e5:4d:a6:54:9b:7b:bd:cf:
9a:a8:0f:e2:53:be:fe:d0:e8:76:61:8e:ea:a3:2c:
dc:73:ec:4b:47:9e:e3:d7:59:43:25:98:18:11:d8:
2e:fc:d3:55:d9:58:53:f2:e2:a7:03:67:cb:d1:15:
1e:bd:ae:b8:03:91:a6:38:54:d7:16:df:65:6c:69:
1c:0d:85:a0:91:d1:7e:d7:10:af:5f:fa:74:d5:4d:
f2:9a:b2:9d:ee:3d:77:7b:89:97:63:05:f0:90:22:
51:4b:7e:14:ab:76:17:21:59:bc:c7:cf:55:3e:d4:
bb:c1:71:55:b3:60:3c:d1:6e:6b:2a:ef:c0:57:ba:
d2:94:53:f5:0c:7a:40:d2:1e:f8:19:e7:6b:c8:19:
75:36:1c:34:42:75:49:a6:47:1c:ee:a6:75:4d:6f:
82:8a:c4:8b:63:db:1a:96:d2:7c:6b:b4:cd:3b:19:
4c:5d:6a:e5:82:ad:47:b9:50:0a:fc:35:1a:4a:52:
71:e8:f8:1d:70:c1:28:2b:be:c5:e0:f7:5b:e8:2b:
a5:8b:94:f3:78:71:2b:ed:1a:66:8a:ae:fb:91:1f:
17:67:64:30:1f:9a:7c:01:2d:51:3b:b5:f1:f1:7a:
6a:b7:73:07:57:c9:4f:48:ac:8c:4c:60:69:a1:fd:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:34:C1:F4:5B:35:E9:89:BF:7B:99:EA:9F:B6:9C:6E:F5:A6:CD
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:f9:21:37:b1:4d:3e:c4:06:64:92:94:48:74:85:35:98:
07:fb:50:db:63:b0:00:7b:2a:15:23:58:98:de:8d:8e:b9:49:
6d:5a:1f:29:e6:11:1d:47:75:98:bf:c4:53:b1:ef:ac:d3:d0:
de:3a:46:55:21:35:f9:2c:3a:bc:f3:18:2d:d1:56:f0:53:43:
f1:ae:7a:eb:f5:ee:25:b4:d5:52:9d:61:a7:4b:f3:95:de:18:
ba:9c:e7:b3:56:b2:27:4a:92:4b:81:02:21:fc:04:f9:38:c5:
6b:c8:d7:40:ec:4b:04:91:a5:a7:c6:98:0d:b2:69:72:60:fc:
d5:d0:4a:ef:a3:9b:35:cb:c2:6f:77:e4:0f:80:a8:32:d6:72:
66:3b:b6:49:d2:69:c6:f6:f4:ae:15:9c:93:64:89:d6:48:73:
75:4d:60:51:ac:b7:56:8d:7c:78:60:64:e7:91:67:6f:6b:89:
ac:b3:e5:60:ec:cf:ac:a8:89:38:03:a6:af:d2:0e:26:f2:e4:
38:7b:e4:18:0f:13:cd:8e:23:b5:75:a6:b7:b9:ce:e4:8b:83:
02:1e:fa:3a:4b:99:5b:a8:d2:e3:ec:a4:19:32:6f:f1:57:91:
da:db:79:04:80:ae:a8:63:98:44:bf:ca:41:ab:14:3e:b4:b1:
fa:a6:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:13 2026 by rpki-client