Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: XieKAfEhn0d9UPX3/c9fCmV9iHrA/Gk2mA9vsZnHyo0=
Subject key identifier: 1C:16:25:46:7E:2C:D2:7B:3E:B7:55:EC:B0:12:A3:24:74:B5:04:6E
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019D98F41499B71C4D596797F7352C3C1071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: fgcuu3w3N15oVpVYMor3n2Py2TVSe5ulj1dz3MvDdBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:14:99:b7:1c:4d:59:67:97:f7:35:2c:3c:10:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=1c1625467e2cd27b3eb755ecb012a32474b5046e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:ac:5e:2b:14:70:32:e1:51:0f:2c:d7:9d:
53:22:79:96:0d:0c:a4:fc:cf:23:ac:00:2b:16:67:
e8:15:d3:3e:c1:60:fc:c4:e2:66:11:97:3a:0e:5b:
8c:0f:14:be:7c:bc:7c:cb:5a:3b:8d:c6:fa:ef:3f:
fb:be:a7:8a:8a:ba:42:98:21:64:63:45:36:58:6b:
e6:81:e3:73:34:dd:d4:fc:c0:39:a2:fd:e0:44:ca:
a0:7d:f0:3c:4b:e3:20:27:15:93:18:78:99:d2:ac:
9c:5c:df:5f:2c:28:d8:52:a0:b4:54:38:bb:89:8d:
77:f8:1e:89:c1:94:4b:76:75:ec:ba:27:2c:76:ba:
df:c5:78:35:1a:50:f5:8d:97:48:0c:ca:4e:47:80:
75:f7:cf:2f:03:0e:7f:cb:d5:39:1e:25:a0:0e:20:
c2:4d:a1:04:b1:84:3d:9c:59:19:d3:53:f7:f1:7c:
e1:95:6a:59:ec:d7:1c:ad:3f:79:4b:50:42:43:b0:
95:45:cf:e2:61:01:b1:54:21:59:cb:ae:06:48:d5:
7c:40:c8:02:d3:c1:7a:32:98:00:4a:80:ff:5f:40:
8b:5e:c4:e6:29:ec:16:d3:bd:6a:50:7b:31:be:1b:
56:59:b8:96:7c:5e:3a:44:a5:0b:32:2c:70:7d:61:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:25:46:7E:2C:D2:7B:3E:B7:55:EC:B0:12:A3:24:74:B5:04:6E
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1e:40:6e:f5:df:b6:0d:e2:a1:c6:cd:3f:ff:31:18:9a:e1:
5e:65:7e:fc:e5:5f:79:09:54:68:4d:c2:bb:5f:e2:47:e5:99:
e6:b4:40:3b:d8:b1:b3:d2:e9:78:02:80:dc:11:1d:80:96:e4:
49:75:e9:c9:b2:84:d3:f0:24:8c:e0:90:1a:22:11:80:75:85:
43:16:25:eb:2d:53:c9:28:24:97:3e:5c:1e:87:22:33:47:29:
db:b0:c0:50:88:c1:6f:0a:67:0a:8e:d8:f0:96:e4:c7:92:a0:
85:d2:20:26:b4:c2:0a:56:31:4e:d5:2d:09:85:ba:4b:13:2f:
1a:53:d2:1f:1b:3c:dd:b7:8c:85:e3:26:66:9d:4c:12:23:19:
90:bd:bc:64:ae:77:87:db:1c:68:41:c3:d1:10:50:3c:ed:06:
2b:09:3c:9d:3a:52:fc:79:6d:2c:6a:61:97:e3:e5:5d:11:f7:
d8:9a:3c:73:1c:d0:63:b3:9e:08:af:04:4f:07:b6:c4:aa:34:
e4:06:ff:e5:59:87:b8:3c:91:e3:6f:d9:b7:77:08:d2:b3:4f:
5b:37:8e:00:2c:de:15:20:52:f6:fe:3e:0f:b2:56:01:6c:d3:
1e:09:8a:54:c2:43:c4:ba:72:0f:fa:88:d1:a6:e6:c4:b6:78:
f6:97:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:48 2026 by rpki-client