Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: b6R1CYC/jAtwusQupkaNpeEPYEfYRuEhOhiloelokJk=
Subject key identifier: CE:27:7D:4D:73:5D:DE:BB:B1:FF:47:04:1F:5D:0B:29:87:7B:29:9B
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 019D98F494A7B104354A4526EFC8BAF5D48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 127E
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: U4r+WUJ1EJy54JlwgMfXTxFw9EUqVvkPWlqIvprRlu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:94:a7:b1:04:35:4a:45:26:ef:c8:ba:f5:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=ce277d4d735ddebbb1ff47041f5d0b29877b299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:45:60:b2:3d:24:91:32:04:09:a0:e5:7b:
9f:2c:5b:73:65:ee:9e:28:55:66:a2:72:9e:f3:23:
54:b4:33:6d:fe:92:b6:31:9e:fb:e9:34:61:9a:08:
06:c1:bc:88:25:54:5e:ca:45:ce:02:8b:28:8b:c4:
e6:3f:64:ab:15:26:5c:65:0e:de:ea:ba:8c:89:c8:
49:9c:11:35:d9:d7:b5:19:69:27:bd:63:39:ab:90:
ee:35:87:c0:06:ea:4f:5c:18:17:08:d5:a4:a3:62:
39:06:6b:ca:83:09:35:5c:14:f1:df:e7:08:1a:14:
9c:9a:9b:1c:cd:eb:c7:b5:b2:06:79:e6:19:bc:07:
d1:a2:a1:42:14:26:05:b6:22:db:40:8b:cf:33:2d:
e3:52:78:cc:73:2e:c0:d2:cb:d2:6d:04:d3:ee:1e:
6f:f0:80:b9:50:9f:3e:2e:a0:29:9e:39:8f:a6:7b:
e1:4e:0d:5b:4f:5f:e8:5e:29:72:18:a8:c6:4b:49:
5b:b2:22:56:14:18:22:7b:4a:1a:d4:b8:f6:63:93:
74:73:45:ca:99:ad:38:4d:e5:e0:5e:94:58:7d:97:
ca:d8:a0:42:40:7c:b5:d1:f2:dd:04:5e:d4:58:8b:
c3:8b:8b:c0:90:2b:d9:81:1f:70:4c:2c:6e:20:64:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:7D:4D:73:5D:DE:BB:B1:FF:47:04:1F:5D:0B:29:87:7B:29:9B
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5e:12:47:bf:30:bd:dc:3e:ac:19:eb:bd:4e:bc:0c:3c:53:
37:a2:95:98:16:59:3e:f9:b6:14:f6:80:36:42:0f:83:f3:4f:
36:b4:db:ad:a3:ff:a9:05:52:d2:05:b1:ad:0a:17:56:8a:05:
bf:3e:59:90:f3:ac:b4:3c:96:7d:f9:ee:7f:b8:04:10:41:b7:
33:de:7c:bc:e7:5b:e5:73:df:c5:95:34:93:75:b8:98:aa:9d:
a5:f6:1c:a4:7f:35:99:66:77:50:54:c8:fd:dd:90:a8:df:f8:
0b:e9:d0:9f:a2:dc:3e:46:ac:28:a4:4c:aa:39:98:8f:21:8b:
13:dd:35:76:bc:60:3f:a6:cb:4d:f8:ad:40:90:1c:71:af:03:
11:7f:3e:ff:88:67:8e:b6:96:12:88:e5:59:eb:c6:30:be:e8:
d1:2c:50:06:14:eb:20:fe:98:46:73:8a:c8:27:bb:b5:f3:e0:
ba:71:2a:2d:64:f8:f1:2a:06:bd:4d:a8:83:62:4e:b0:f2:cc:
90:f4:b9:79:5d:72:b1:e1:b3:ea:dd:df:6f:c3:1c:59:2e:36:
f6:7f:30:4b:81:1a:83:5e:30:26:7b:e0:27:48:75:65:fe:0f:
b3:a7:b9:e9:d1:76:02:a8:36:e5:71:f2:86:91:ac:92:db:06:
8c:89:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:57 2026 by rpki-client