Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: OOI+7UtyRpiEwvJzSa/DJcrgTev1uv9pHIRZV7u+aJU=
Subject key identifier: 2C:5C:12:B4:7B:78:7A:25:E9:C8:07:66:73:50:F8:29:7B:CE:78:8A
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 019CAB6B237EDE7A5BC379CFFE68F784C3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 160D
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: WxBpbGUzTvwdv5RtPppS4qeV2pY7wn6tMj/qN3Yai0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:23:7e:de:7a:5b:c3:79:cf:fe:68:f7:84:c3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=2c5c12b47b787a25e9c807667350f8297bce788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:d5:40:1b:8c:55:79:8e:10:cf:29:57:0c:
d5:3f:74:7d:2c:1c:98:31:39:cf:c0:48:d1:4c:62:
d2:78:c0:42:03:ce:53:b5:68:ea:f4:07:08:49:58:
d8:a5:27:31:28:4a:70:0f:16:14:a9:39:81:0d:8b:
ee:10:7c:e3:86:74:27:56:f2:9b:f6:7b:e4:84:8a:
68:58:ac:94:ae:6c:6e:30:26:28:cf:53:63:47:0d:
f9:52:ca:d0:b7:b8:01:36:c0:35:9c:e4:fc:fd:d6:
88:b8:86:e7:f5:7d:c4:e8:6d:b2:2b:ed:60:8e:cd:
91:af:ce:31:52:28:a2:b5:bc:97:94:3c:0f:b0:6f:
4c:85:39:64:57:72:53:37:5d:43:37:07:15:6d:af:
32:21:33:20:97:4f:fd:f5:48:26:12:54:1b:48:82:
d7:09:77:d4:4e:e3:90:85:cb:51:53:50:c9:7d:15:
f3:f9:b9:8c:66:0a:6a:d0:33:af:50:48:c7:11:f9:
64:c1:bb:ff:7e:d5:86:ed:82:a0:ad:d7:4c:1e:f5:
48:78:2e:5a:fb:96:85:0f:c2:97:cb:f2:93:17:ed:
37:25:ea:3a:be:6a:82:36:88:6a:1f:84:34:2e:a1:
94:7c:2c:7b:bc:6b:79:5d:f3:f6:a5:86:ea:43:f6:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:12:B4:7B:78:7A:25:E9:C8:07:66:73:50:F8:29:7B:CE:78:8A
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:44:54:fa:f1:2c:75:2a:df:a8:d5:3a:50:9a:59:3b:b4:
c1:0e:0f:e1:db:90:82:25:3d:90:53:aa:56:61:f6:df:d3:5d:
bd:b8:bf:51:75:bb:b0:95:d0:39:bc:d9:7e:f1:1d:12:62:ec:
ac:5d:19:78:af:57:42:28:68:a7:09:fb:17:00:87:b6:39:4d:
bf:71:73:80:d3:f8:92:27:cc:51:91:26:2c:5f:7d:a3:a6:87:
f8:36:fe:5a:5e:c9:6b:42:9d:f2:a6:21:99:6d:ee:c4:aa:11:
71:6c:72:c7:c2:69:35:45:9b:b9:9e:bc:fb:f2:47:60:ac:7a:
95:b5:ed:40:61:8a:65:d0:4e:7b:2d:21:ff:54:f0:9b:88:b8:
62:da:9c:57:fb:f5:48:ab:39:f0:df:f1:82:c4:88:89:b7:13:
97:6f:8d:57:a9:69:9b:cf:65:ad:5d:b7:af:a5:c4:21:0f:8f:
50:01:dd:78:a6:2d:fb:24:8f:12:02:6d:8e:8b:55:e1:d4:f3:
3d:e7:a5:9e:de:78:4a:06:d7:47:fb:d6:79:b2:d5:aa:38:45:
20:d0:69:41:84:e2:b7:36:dd:a6:f2:29:cd:a0:e9:bd:1d:45:
59:b5:2c:cb:4e:77:9f:1c:a9:83:c4:f4:55:02:79:04:64:b9:
ea:72:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:10 2026 by rpki-client