Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: DTrMs9MfMIv9iwGtrI1GWzqSFYW8dgXy32gYSIMCeo0=
Subject key identifier: C8:1C:3F:92:81:C3:27:83:D6:BE:3A:A4:70:15:2B:71:99:57:AC:D5
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 019D996236CBDBA03637C5A913FD29B85000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 0B11
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: XDIyxJDr+PkgMTgmXFLX+mbHL1WPzf69TJGBtXhKZ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:36:cb:db:a0:36:37:c5:a9:13:fd:29:b8:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=c81c3f9281c32783d6be3aa470152b719957acd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:5e:93:02:e0:ca:20:94:bf:71:b6:91:15:
aa:99:20:38:37:78:71:8c:71:e7:11:a6:75:03:9e:
3a:28:24:63:75:00:98:17:06:bf:7a:86:28:69:dc:
57:27:12:64:d3:a7:c9:d4:a3:4f:ce:75:5c:90:21:
1e:8e:0a:4e:92:8a:50:63:53:40:54:08:bd:40:65:
6c:d9:20:a2:7a:22:92:ab:1c:f6:95:0f:8a:75:0d:
0d:ba:56:8a:19:6f:db:d6:cd:d3:67:f0:4a:70:ec:
64:64:61:9b:e9:09:92:d0:3d:5d:e1:b8:6e:25:69:
ef:5b:9b:76:ff:26:44:47:7a:9e:ee:57:aa:3c:ac:
ef:5f:73:9d:fd:6c:91:09:65:dc:44:48:16:18:69:
fa:4a:34:5f:bf:8a:df:e0:78:04:ec:e8:0f:71:50:
ce:80:f9:10:fb:11:ee:d7:c6:4f:6e:fd:7e:7b:fa:
22:e3:53:4b:1a:73:09:14:82:76:75:a4:2a:64:8a:
ce:84:7e:ed:00:8e:87:2f:1d:f0:89:db:db:8d:53:
24:72:59:b3:24:3f:70:67:47:15:b8:fb:a8:a7:c0:
43:67:f8:be:c4:1f:1a:6d:c2:ca:ec:0a:2f:86:a9:
b9:72:1a:c6:f9:30:fc:36:52:44:01:78:81:36:a5:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:3F:92:81:C3:27:83:D6:BE:3A:A4:70:15:2B:71:99:57:AC:D5
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:0d:b5:2e:39:df:6e:ea:fc:93:b1:61:2c:1e:b7:32:86:
66:18:89:f5:f5:f9:07:42:53:dd:4e:f8:81:43:ed:d9:0c:84:
09:10:31:55:43:95:43:70:84:b5:9d:a3:af:9f:b5:af:49:81:
65:e1:52:c2:5f:e2:ab:11:81:35:d1:85:9b:ae:fb:49:0a:b7:
34:63:25:81:70:f3:f6:20:f5:94:54:aa:53:f1:05:24:36:ad:
47:c5:1c:40:f9:5a:28:6f:d0:80:16:b7:68:d2:5a:0c:99:a8:
ba:6d:22:96:62:81:1c:d6:bf:54:ea:e4:41:be:9f:df:1d:fa:
38:77:85:08:0f:d2:c2:d2:05:66:67:d3:28:62:b0:74:31:13:
de:e0:e2:20:21:d4:b5:22:29:57:6e:1b:a4:d7:87:11:40:f5:
94:b1:50:36:51:36:ad:06:e1:85:ef:73:f9:82:74:05:92:62:
42:10:1e:1d:e9:a7:d8:f1:25:2a:46:af:1c:ad:e4:01:e0:4a:
96:98:cb:3f:bf:17:a5:3b:70:03:d7:c5:88:c3:04:9c:01:35:
11:94:be:17:ab:78:ae:99:f1:1d:ed:3f:83:98:36:25:cd:b1:
2d:f6:2d:7d:b5:96:0f:d8:3c:3e:86:64:30:ec:0d:be:e6:9a:
2b:b7:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:31 2026 by rpki-client