Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: pDMzE53vgDVqU4kFzixlkBukgtvAXsVvYbuiM42RG40=
Subject key identifier: 23:CA:55:41:BD:A3:AB:2F:AD:7F:05:7C:6E:28:DB:EA:C8:63:97:6E
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019CAC476E7DA2C2E28829CBA8B4C2405347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1593
Signing time: Mon 02 Mar 2026 02:01:28 +0000
Manifest this update: Mon 02 Mar 2026 02:01:28 +0000
Manifest next update: Tue 03 Mar 2026 02:01:28 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: OzeLQcGhF5lxrmhigk2+WIuINKoIS4PpEppb5+WUlxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6e:7d:a2:c2:e2:88:29:cb:a8:b4:c2:40:53:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Mar 2 02:01:28 2026 GMT
Not After : Mar 3 02:01:28 2026 GMT
Subject: CN=23ca5541bda3ab2fad7f057c6e28dbeac863976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:76:c8:69:24:96:dd:ac:08:1e:e9:e4:82:
b9:87:e9:5c:01:67:0e:2e:a7:b2:49:10:13:68:e2:
68:77:5d:73:4f:7e:c3:57:c8:e9:45:12:57:61:df:
5e:52:a8:3d:c1:8a:ce:db:67:85:e9:ad:80:ff:d5:
29:b3:ca:6e:a1:9c:e7:95:20:9e:6a:42:0a:1a:4f:
d3:a2:be:f3:38:5c:b2:fe:13:f3:56:3f:88:f1:2f:
67:b9:c5:67:d9:14:8c:60:97:09:ca:76:cd:1f:07:
0b:cd:c6:8c:a1:54:ca:54:fa:51:2e:e6:67:2f:d7:
c3:49:f0:8b:f1:97:46:11:1e:8e:71:ba:28:0c:e1:
12:f6:55:a1:76:fb:27:12:c6:bb:5e:f7:2b:44:bd:
1b:5c:e9:0a:d5:66:40:be:9e:d9:ae:6a:f4:e6:e6:
7b:e0:85:7e:96:69:02:89:2b:9d:a5:15:63:a8:ba:
5c:17:65:bd:7d:f8:24:2e:d7:d0:c8:12:46:12:ce:
a9:8d:48:ca:a5:ad:20:cb:c6:7b:97:10:ad:5e:f7:
f0:1d:55:d7:54:f4:0d:ee:c8:bd:51:46:84:ce:00:
16:e4:ca:57:d5:2b:62:cd:f0:00:b6:07:88:9f:c6:
5f:b4:da:5e:e1:fd:fb:5c:cc:86:61:8d:ea:33:e6:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:55:41:BD:A3:AB:2F:AD:7F:05:7C:6E:28:DB:EA:C8:63:97:6E
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:41:d6:2a:af:c4:bb:c9:31:6a:22:e0:cc:3a:1c:8c:7a:
8b:4f:79:c0:d9:df:c2:70:4d:83:75:4f:cd:63:71:c8:1f:4c:
38:1a:35:33:3f:84:75:00:e3:e4:8a:60:db:d7:34:b1:5d:bd:
5f:d3:6d:7d:68:16:af:f6:47:68:63:82:ad:c8:a7:69:13:d5:
0f:58:8f:3c:0a:84:07:5a:69:df:ef:7a:32:a9:22:d0:60:7f:
10:ba:35:72:d5:89:82:d2:ad:83:aa:d3:89:6f:c7:6e:b9:1e:
9a:02:9e:f8:91:b3:4d:6e:7a:0e:3c:2c:5c:b8:3c:de:6a:59:
cd:23:33:33:bc:0b:fc:c2:fc:d6:6c:5d:cd:39:16:e0:08:6e:
62:83:c5:92:4c:7c:9e:95:11:da:ae:78:8f:c0:78:8b:31:29:
a4:dd:d7:41:34:ca:65:aa:72:ad:0a:b0:ad:9b:1a:25:08:28:
f9:8e:48:6d:4f:84:c0:dc:1d:7b:3f:58:2a:c5:8a:ae:87:e8:
d3:a6:f2:79:21:2a:e8:bd:13:65:ee:35:51:c7:9e:2e:96:8b:
0f:c6:da:08:e0:4c:cd:05:1f:22:dc:22:c5:2a:31:03:79:6d:
ce:02:d7:87:c9:9d:1f:d6:cf:ee:84:9d:fb:0a:8b:ac:26:d9:
06:84:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:31 2026 by rpki-client