Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: BzumAiaIZR9ilLVQe9Ek4QaORDarXpo67omUaCdKD/g=
Subject key identifier: 71:E2:12:7F:73:2F:B1:3D:DA:EE:29:77:2D:ED:D5:A0:A6:C0:9A:A9
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 019CABA1F73FBE8128E774D2A1577A678896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 0CB7
Signing time: Sun 01 Mar 2026 23:00:44 +0000
Manifest this update: Sun 01 Mar 2026 23:00:44 +0000
Manifest next update: Mon 02 Mar 2026 23:00:44 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: J32khiwdYS/Rk8jPvAFngduJNrObNa7xd/+Rq+6DkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f7:3f:be:81:28:e7:74:d2:a1:57:7a:67:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Mar 1 23:00:44 2026 GMT
Not After : Mar 2 23:00:44 2026 GMT
Subject: CN=71e2127f732fb13ddaee29772dedd5a0a6c09aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:d2:1a:fe:87:3d:fb:55:14:eb:f8:da:1e:
2b:45:04:bf:47:b8:b5:9a:ff:c9:15:2d:05:e4:09:
5e:2b:a2:23:6e:b5:c2:f9:2a:3e:7b:ba:23:9d:d1:
86:b0:bf:8d:63:8e:84:4b:b3:6a:44:b3:79:ce:1e:
57:cf:37:d9:d4:d9:c9:15:1a:fa:fa:72:39:f5:79:
4b:3c:75:29:8d:2a:0e:40:b4:c8:e9:6a:23:ce:ee:
2b:40:ad:ec:5c:19:f1:64:47:6d:d6:57:7a:7a:85:
ff:9c:d1:d0:0c:36:4a:8a:ca:4f:e6:a7:07:d5:2c:
b0:2c:65:9d:33:a9:25:87:70:9e:e3:6a:a8:88:dc:
b9:80:62:f4:24:bd:f9:11:64:3d:27:38:ea:4d:3f:
a0:4e:de:f3:70:73:fe:6a:8f:09:98:a0:7f:99:ea:
52:a0:3c:f3:56:fb:ee:34:29:10:57:d5:63:71:02:
8d:52:30:88:c9:e5:51:ed:de:65:19:6b:af:53:b3:
0d:d0:1c:6f:97:7d:56:b7:fa:4f:7c:37:a5:48:cc:
8e:6e:40:ae:a0:ad:d9:74:1e:c3:eb:02:1a:1d:17:
72:5c:f5:f6:7d:09:cf:d1:58:4f:36:9b:c1:3c:6c:
04:24:40:75:71:13:78:35:4e:a7:f6:a4:55:17:4f:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:12:7F:73:2F:B1:3D:DA:EE:29:77:2D:ED:D5:A0:A6:C0:9A:A9
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4d:44:57:6c:bd:da:8f:38:f8:ee:ce:42:08:87:b0:28:39:
db:21:8e:cd:69:8b:9a:8e:20:3d:d5:ed:fd:c8:1e:5a:e3:98:
0b:4c:2b:14:8d:c7:7f:b7:85:e8:f0:a7:63:eb:1b:33:88:45:
7f:b2:57:0c:09:85:61:25:fe:91:ab:3e:4f:55:7d:ea:b3:21:
1e:b5:f2:b6:f4:ac:ee:37:bb:ea:00:a4:2d:ba:4f:26:56:4a:
3f:0d:70:4c:74:9f:26:f4:1a:ff:bc:9a:78:95:b7:75:59:fa:
b5:fb:95:56:b1:4e:0d:e3:30:26:fe:3c:6f:21:d6:1b:76:81:
c0:10:48:08:5d:b2:7d:5d:1a:44:a4:6b:88:d0:d3:4f:2d:55:
04:93:61:93:88:3a:de:8a:70:a7:e1:c1:79:41:b2:9d:cb:35:
b2:59:c5:64:35:1d:f4:29:c7:ca:83:50:02:b8:19:d8:f4:ee:
74:54:94:bb:7a:4f:2b:f7:52:00:d0:aa:69:9e:89:54:32:9a:
3a:e9:21:8e:f4:0a:a8:44:44:88:28:8f:62:3b:a9:de:16:86:
18:3b:a5:d0:d8:66:44:de:9b:ac:1f:21:9f:86:4c:82:e7:d5:
78:1f:b2:37:d3:a7:3b:9c:61:b6:02:d3:f1:75:21:da:56:e8:
b8:13:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:17 2026 by rpki-client