Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: uIYaGlgw+ph9ZFuhQIGNvOLCzULw1alaG4oxA4DEGp4=
Subject key identifier: AC:36:72:5E:E2:0F:31:52:DC:D2:F3:2A:3D:02:21:D2:B9:4F:33:EB
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019DA5677F1E0729C5F506C1456F48D70B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1614
Signing time: Sun 19 Apr 2026 11:01:56 +0000
Manifest this update: Sun 19 Apr 2026 11:01:56 +0000
Manifest next update: Mon 20 Apr 2026 11:01:56 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: 1/t0EUIWrbCfJOAkG+lR7yGE5U3DHIGzlmtfOcqosJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:7f:1e:07:29:c5:f5:06:c1:45:6f:48:d7:0b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Apr 19 11:01:56 2026 GMT
Not After : Apr 20 11:01:56 2026 GMT
Subject: CN=ac36725ee20f3152dcd2f32a3d0221d2b94f33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:0e:82:ad:dc:f8:f8:b5:99:ac:c0:0e:94:
1e:96:55:ea:aa:f8:16:cc:fb:44:7c:76:af:fb:04:
f2:97:44:9a:c8:40:40:46:23:ca:7c:38:0b:39:7f:
93:05:c7:fc:50:03:92:37:8e:88:14:c3:ef:c3:16:
dc:cf:de:76:f9:f7:29:d0:8c:88:76:05:c6:8b:c1:
95:cf:74:8c:5b:c9:2c:a6:f1:57:5f:4b:0e:55:a1:
d0:ba:1e:1a:bc:04:6e:ba:3e:4e:ff:7f:e8:dc:10:
a8:9d:53:78:3a:79:10:ad:52:4e:10:5d:52:16:2b:
a6:b3:f9:d8:91:4e:fe:37:47:47:3e:fd:f1:9f:69:
aa:e3:a9:7a:2f:ec:11:c2:e8:c2:5b:74:bf:bd:d0:
6d:ad:8c:ba:b1:5b:5d:44:11:7c:ad:61:80:ec:ed:
3c:98:65:6a:43:0a:eb:f3:d3:73:63:b9:16:10:b9:
44:62:bc:e0:1a:d6:d2:20:9e:35:e3:8e:95:c9:bc:
1b:e6:a1:7a:77:42:c7:fd:7d:d1:26:e7:02:06:c0:
32:f1:45:27:84:72:c4:1a:f4:6c:55:a6:ba:42:77:
60:3f:8e:fd:09:b1:59:2e:f7:c9:77:9c:c9:c4:80:
e6:09:31:fa:4e:50:8a:6d:2b:60:08:50:45:f4:e5:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:72:5E:E2:0F:31:52:DC:D2:F3:2A:3D:02:21:D2:B9:4F:33:EB
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7d:28:89:d8:34:4d:f5:58:07:1e:45:ad:43:53:bf:2d:41:
ea:fd:e3:0b:ad:6a:df:f3:22:84:81:ab:32:dd:4f:7c:4b:c7:
47:35:cc:47:1c:ee:4d:c5:8c:d3:06:1a:ed:9c:36:ad:51:32:
c1:c4:65:ac:2c:70:a5:58:11:85:b1:e4:f0:f2:d5:36:2a:60:
27:ac:a9:03:5c:07:1c:2e:ea:98:69:ed:ff:56:1d:af:30:33:
e0:93:8c:a6:ef:a7:9c:1b:5b:fd:9d:e6:2d:a2:93:ea:4b:71:
bc:73:40:20:c4:e1:78:0b:21:c1:b8:fa:d3:04:16:e6:85:7a:
24:89:35:e9:00:41:7b:ea:91:44:23:69:89:2d:74:f0:00:61:
a6:19:52:10:ae:c8:d2:aa:0c:e5:3e:63:c9:12:22:83:9e:6b:
8f:e3:32:91:b8:6d:14:30:53:c8:4d:66:1e:61:03:b5:db:bd:
b8:6c:85:8a:4d:b2:1c:d4:10:98:2a:30:61:1c:07:ee:9b:5a:
83:1c:59:e2:92:20:b7:41:37:1f:c0:f2:0e:58:38:bb:fc:e7:
25:46:3d:38:76:2a:9a:39:f3:e2:2b:ef:e8:8e:63:49:58:00:
fc:19:60:d5:a2:d4:57:e0:fe:df:99:b4:69:2b:29:51:ad:f7:
8f:19:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:14 2026 by rpki-client