Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: /oovM/QUSnI54H1oLTo1pFKiO0E1H8+zyeeecLGsCZU=
Subject key identifier: DF:2F:58:A2:9A:26:1B:90:A4:46:E8:37:C2:44:F4:F2:9A:08:1A:7A
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 019D9AE285A679CECBF177502EF43B8420E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 1689
Signing time: Fri 17 Apr 2026 10:00:29 +0000
Manifest this update: Fri 17 Apr 2026 10:00:29 +0000
Manifest next update: Sat 18 Apr 2026 10:00:29 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: fO2/R5Q0VCwGDQzIUyza2j0qgjO/nLXGzj470AU+pGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:85:a6:79:ce:cb:f1:77:50:2e:f4:3b:84:20:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Apr 17 10:00:29 2026 GMT
Not After : Apr 18 10:00:29 2026 GMT
Subject: CN=df2f58a29a261b90a446e837c244f4f29a081a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:f4:c8:92:f1:bf:47:67:fd:7d:44:73:8c:
f0:cd:c4:f9:4a:c9:7a:8c:5a:3b:b6:a2:18:ae:1f:
4e:00:97:b1:51:f7:a5:8d:64:87:56:91:56:22:00:
c3:a3:ce:a4:bc:d1:5e:79:45:5b:2e:7d:c8:78:78:
83:83:9d:15:b0:9c:82:ae:1a:a6:22:9d:b7:13:8b:
d6:81:b8:9e:32:3f:fd:87:f7:0e:ab:c4:87:02:a9:
6f:41:8b:a9:e9:a0:2e:21:a1:3e:fe:0d:49:f9:06:
0b:f6:a7:15:3b:dc:79:64:1e:80:3b:37:bc:a6:b8:
b6:7f:34:d0:1a:f6:c1:5f:74:07:22:09:78:7c:35:
72:3f:f4:a1:40:53:33:3f:25:90:5f:d2:58:da:e6:
ce:40:20:64:8c:50:64:7a:f3:31:82:43:78:e9:df:
8f:77:ad:f4:44:46:15:7e:d3:21:f7:5d:6d:80:e5:
ac:36:3c:83:0c:a7:9b:0f:bb:08:a7:a9:e9:44:4a:
64:b3:11:c6:cd:f7:70:6f:b1:d2:d4:fb:b6:9a:f7:
2e:52:6a:a6:79:49:65:e1:6d:cd:22:cb:ef:18:54:
c4:24:38:83:00:49:a2:ab:bd:b3:0f:7d:9d:86:f1:
ef:f7:a8:db:4e:b2:69:aa:86:a0:94:13:9c:c1:60:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:58:A2:9A:26:1B:90:A4:46:E8:37:C2:44:F4:F2:9A:08:1A:7A
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:95:a3:c9:97:f7:78:da:b9:e2:4e:d8:0d:45:5d:6f:9c:bb:
28:8c:9b:f9:c1:3e:03:73:28:30:20:71:51:5e:7b:77:2c:54:
3c:f3:18:31:eb:7c:06:e2:a8:10:dc:f8:b2:8f:d9:0d:dc:79:
d4:35:79:e4:8c:0f:7d:f0:d8:0e:f9:0b:4e:0b:81:c6:6b:d4:
8d:cf:19:13:25:cb:c4:b2:35:51:cb:14:7e:7e:d9:d9:b9:3d:
eb:47:ab:76:28:26:37:e1:9e:cf:6d:b3:eb:03:af:7b:f2:62:
40:a0:95:70:0f:6e:f0:b7:bc:06:be:58:7b:b3:71:bd:64:e8:
cf:91:aa:c0:1e:d2:f6:93:5f:f4:c4:c9:22:ea:28:ad:10:b4:
a6:93:bd:82:71:de:56:00:bb:40:1c:7d:43:30:8d:c4:a6:45:
c4:9a:d5:c1:fe:bb:ef:32:72:24:0b:73:2f:81:62:b3:fc:b8:
cf:7a:a8:bf:cb:43:dd:d3:4e:b2:f7:18:bf:f2:f1:ec:e0:58:
f2:a5:4b:8c:de:75:ba:27:19:f5:1e:ab:d0:b1:eb:15:77:30:
03:41:94:7b:52:34:ba:00:1e:b1:35:1a:42:73:33:0e:05:a8:
cb:9d:e3:4c:27:5d:c6:df:c8:d3:21:c2:ee:da:59:13:3d:14:
23:2c:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:12 2026 by rpki-client