Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier: BN4oWP/Y4roCasALUVMD1R5+tX8NOsGuPwtbzyRLSCE=
Subject key identifier: 3D:08:26:6A:42:24:48:94:5D:E4:D9:18:81:26:C6:E1:92:3B:56:70
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial: 019CAB6B49076330C75BDCE2CA1281D7B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number: 1203
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: gJndVCfd1lT+0Zh0Y+5zndQpdRj5/Iiy7sBYp3sSjBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:49:07:63:30:c7:5b:dc:e2:ca:12:81:d7:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=3d08266a422448945de4d9188126c6e1923b5670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:67:5a:07:01:f6:29:a7:7c:34:bd:76:e2:
c7:5d:08:23:00:d0:73:fc:3b:0b:21:a8:4d:5b:1e:
f8:fa:9f:96:b1:87:9f:0e:5e:d6:cc:ac:5f:fc:5d:
4a:d3:8c:5c:c8:d1:3a:67:00:f5:81:08:c8:cd:c5:
0d:a2:e4:48:b6:b1:a9:48:8a:34:48:a5:af:f4:9c:
25:1d:d0:2b:ad:05:a3:85:b7:81:69:b4:5f:2e:c7:
34:aa:ef:b9:e4:3a:0d:56:b2:87:5f:bf:68:ac:b9:
12:d1:9e:dd:cd:64:ae:8e:67:28:92:a0:5b:5d:a4:
46:76:51:3b:be:a1:9d:9d:90:60:2d:e2:3b:e0:3a:
46:b1:23:d2:ab:ea:23:27:54:7b:04:58:89:a8:60:
bb:f4:d2:e8:c9:06:be:dc:2b:97:8c:02:53:4d:22:
38:5e:2b:cc:b4:44:10:8e:c7:b6:a5:59:ec:84:90:
e0:77:f0:f9:7d:f7:cb:71:f3:60:e5:9c:d5:76:38:
a7:cc:91:46:92:1f:6a:06:f6:41:d0:78:2b:43:0c:
63:48:bf:fa:b3:16:9a:61:db:78:d0:23:23:48:8b:
98:97:ad:4f:42:71:a0:0b:01:36:bb:78:6a:56:58:
c5:98:4a:c1:c3:76:32:ad:c1:cc:3b:36:e8:a1:99:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:26:6A:42:24:48:94:5D:E4:D9:18:81:26:C6:E1:92:3B:56:70
X509v3 Authority Key Identifier:
keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c4:9f:65:a7:d8:c6:45:3f:ef:fe:00:42:39:39:75:87:7a:
33:b4:71:e2:48:43:40:48:42:8c:7b:5b:5b:3c:b5:ce:13:af:
ed:87:98:42:2c:26:d1:75:2b:30:38:ef:69:74:b2:b4:fd:0a:
63:e9:8c:8b:ea:b9:92:ff:12:20:b9:d9:06:14:67:91:b3:89:
f2:37:03:29:6b:bf:90:10:a8:fa:cb:b6:20:13:2c:8b:79:63:
c5:0e:ab:f9:bc:60:1c:70:21:fb:7f:42:70:d7:b3:f1:e7:eb:
8c:ba:c1:fb:a5:0c:1c:4d:bd:ab:a3:5c:e8:d5:bc:85:c8:e2:
7a:b0:ae:d7:6f:f1:91:07:6e:96:c8:21:14:a4:74:08:b2:90:
8c:1a:fd:f5:3e:01:26:9a:48:9d:eb:78:6e:50:2f:57:73:cb:
5a:2f:e0:8b:2a:34:d3:ab:25:dc:a4:ee:b6:2c:f0:44:54:22:
ec:e2:be:54:70:ca:33:e5:20:9e:43:9e:59:88:8b:55:b7:29:
20:e1:90:e3:96:b0:64:8d:c4:7e:a1:65:c8:92:3f:2c:ac:3b:
98:1c:ba:9c:0c:7b:07:ed:43:e7:a9:1e:34:5b:1a:55:32:0c:
c9:64:b8:66:6a:76:84:3e:ba:82:4f:86:aa:7d:a4:37:d2:b7:
f4:97:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:00 2026 by rpki-client