Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: iyNW3ItiqGnU6VPpW7l2kjej5NBAYfvUblu4nrsycEs=
Subject key identifier: 27:A5:EF:D7:CA:8F:5F:F3:9F:DC:E6:26:D9:B8:24:76:A0:50:EA:CB
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019CAB6AD3803E2C7AF03849D2ED8D897971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: vfEaMUVDiFA+ehTUAQ6vuIKDG154Tn4O2Bs9W6B5PVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d3:80:3e:2c:7a:f0:38:49:d2:ed:8d:89:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=27a5efd7ca8f5ff39fdce626d9b82476a050eacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:26:d7:38:97:64:b5:f3:68:d7:54:b1:da:
18:55:bf:e6:7e:f1:3e:29:d4:06:21:a2:42:8a:3a:
15:5a:48:cb:2e:f3:88:39:bb:13:c3:c9:93:92:4d:
d9:72:a0:fa:34:f0:b0:e2:b0:7a:a9:fe:14:b4:9d:
fe:43:d5:10:97:a4:b5:5d:9c:db:7d:f4:6d:6a:c4:
aa:55:ef:01:7f:e1:cb:1c:4f:70:8d:55:74:3d:2c:
92:5a:74:a8:02:4c:f9:dd:0a:18:82:99:79:5b:be:
08:a8:b3:c7:42:14:bc:17:5b:e8:bb:46:1c:59:cd:
9d:d1:11:44:60:3c:da:09:01:50:ea:9f:02:00:37:
00:d9:43:06:ee:aa:6f:57:dc:61:28:c2:15:5c:6f:
b1:d9:04:5a:27:8c:1f:f9:b5:b4:d4:8d:f8:09:b9:
40:2d:eb:b2:ef:98:43:a6:03:a7:dc:d5:02:9a:4b:
b9:15:ad:cc:34:53:dd:b6:49:24:9e:9f:47:b8:ca:
b3:17:00:7e:0a:a8:f9:d3:fc:2d:ca:28:43:3c:40:
5b:70:8e:86:eb:41:c5:b8:db:4a:95:6f:6f:32:93:
07:60:3b:83:1f:55:93:83:db:0a:16:25:ac:74:20:
f7:35:b2:93:cf:97:0d:e3:8e:02:29:b6:6f:8b:78:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:EF:D7:CA:8F:5F:F3:9F:DC:E6:26:D9:B8:24:76:A0:50:EA:CB
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:c1:d5:fa:d9:bb:82:89:4a:6e:c1:ea:09:9c:a3:30:b8:
2c:3c:c6:79:dd:28:7e:80:34:f3:95:71:40:61:79:f3:9a:8a:
e3:3e:ea:69:e5:4f:ff:d1:99:88:bb:8a:5e:b1:5a:94:a7:b8:
a0:fd:cc:4d:7b:4e:00:69:3f:a6:41:3b:57:25:50:d4:16:32:
e3:18:06:ab:d6:8d:26:f1:18:0d:9d:8c:d1:10:35:8f:59:3a:
5a:99:60:37:6e:57:c4:ae:dd:48:f9:6e:38:49:08:a1:5e:f3:
3d:30:c8:b6:0f:42:8d:fa:e5:4a:d4:92:c5:e8:e1:1f:81:97:
a8:53:e0:99:15:92:a2:07:63:26:ff:22:c3:fb:38:bc:a2:1a:
9a:7e:80:3e:bb:63:e2:0c:1c:d6:de:52:04:88:6c:ed:a9:19:
d3:67:26:54:d8:84:44:27:26:89:b3:ef:0f:b4:bc:35:38:0a:
0c:97:38:69:c2:bd:40:eb:3e:4d:ee:35:00:95:79:a5:cd:94:
66:79:d3:95:2e:b0:54:65:a6:b2:38:d9:2e:26:50:89:7d:72:
28:7d:7a:7b:15:d4:bc:9e:3a:1f:ca:ee:a3:c8:ee:5a:16:72:
b4:93:a3:ae:48:1d:58:7e:92:31:1d:b5:d0:ac:c1:bc:48:84:
df:77:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:21 2026 by rpki-client