Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: 4alGyplV29hiGxUdTEHHuYmiGkpUj6KHhcLCZPX82zo=
Subject key identifier: C3:C0:56:3B:E9:44:F9:1B:06:D9:20:DD:6A:C8:55:54:CB:58:52:6E
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 019CAFB5B7A6CBB5E82AFBBBD485316F4D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 0A98
Signing time: Mon 02 Mar 2026 18:00:47 +0000
Manifest this update: Mon 02 Mar 2026 18:00:47 +0000
Manifest next update: Tue 03 Mar 2026 18:00:47 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: THDf0nTqdCYtw/V54/A8tsOjpIoy6AUFgKUwotAQL+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:b7:a6:cb:b5:e8:2a:fb:bb:d4:85:31:6f:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Mar 2 18:00:47 2026 GMT
Not After : Mar 3 18:00:47 2026 GMT
Subject: CN=c3c0563be944f91b06d920dd6ac85554cb58526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:8d:88:47:be:c6:1c:f4:8a:67:88:41:99:
5d:39:15:e2:7f:bb:24:ec:21:21:f3:86:ac:4a:06:
6f:09:98:40:5b:fe:1a:69:52:23:43:c4:f5:9d:84:
db:f7:02:65:b3:85:09:44:9c:50:9c:9e:50:33:0e:
ac:53:6f:6e:ea:22:ea:e3:b8:01:b7:f1:27:80:73:
54:3d:99:b7:9f:ed:6f:75:48:87:0d:e9:7d:42:aa:
bf:0a:28:79:85:08:b6:e4:be:b6:43:10:8b:26:88:
b5:bb:b4:2a:33:15:ae:04:f2:28:86:41:7d:9d:1b:
70:fd:02:de:db:c9:d0:61:da:1d:57:b4:5b:df:c3:
d2:a6:0d:ad:e7:59:7c:e2:5d:0e:b5:7f:f6:6e:a9:
34:28:3e:fe:f8:01:0e:6e:1a:e0:36:8f:b4:7e:84:
36:8b:22:83:4b:e3:b5:25:70:4f:27:63:95:14:87:
d7:75:b9:05:f5:a1:09:eb:e8:30:2c:0e:35:71:3d:
cf:28:9a:e7:29:ef:5d:e0:f5:f0:c3:1c:41:f9:ba:
35:6f:24:0e:d8:bb:7b:f6:a5:be:78:dd:3d:64:25:
f9:f6:29:dc:72:15:e3:b7:88:d4:b1:4e:60:97:14:
8a:77:a2:ca:de:3c:f0:60:60:e3:8b:77:e2:dd:a1:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:56:3B:E9:44:F9:1B:06:D9:20:DD:6A:C8:55:54:CB:58:52:6E
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:e2:8d:66:90:0e:10:1e:b7:01:3b:08:8f:0f:cd:ec:d4:
56:26:3f:67:9e:88:29:dc:05:03:4b:9f:f1:82:bd:c0:78:05:
a6:80:d9:e9:59:23:6b:89:f5:52:db:6e:53:e2:45:17:4e:54:
6c:8c:d7:99:de:a6:df:3f:04:2b:c1:82:41:33:aa:7a:87:c6:
cf:e1:b8:57:24:cf:41:f7:28:55:77:4e:2a:e5:80:ce:dc:48:
f2:11:a5:ed:58:33:76:cf:0a:6f:09:df:77:5a:df:8a:c7:60:
8f:0b:c5:80:f7:32:d0:34:26:f9:0c:e0:65:66:06:74:07:be:
ff:9d:5f:f9:be:e4:14:c7:12:74:a6:d3:c5:d1:c0:b5:67:6c:
6e:cc:fc:b8:54:2d:df:32:55:ea:e2:5a:ed:44:7c:b0:4e:81:
cd:a3:84:85:a9:f4:73:fa:6c:f2:63:25:dc:bf:ca:16:3b:96:
24:da:49:58:8c:6c:5e:52:d3:f8:5a:34:61:7d:63:23:27:f1:
99:7d:e6:c3:45:05:b2:15:1e:3a:b1:86:e6:bf:bb:f8:93:45:
8f:d2:30:5a:2e:1d:11:3d:b4:5f:d3:cb:b1:40:7e:02:fc:5a:
2f:b3:b8:45:b2:d1:07:b2:b6:57:60:ef:a1:92:77:f6:7d:68:
02:3e:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client