Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File: TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier: P2KSNVDxuZQLr7lThN0gvYxySaswq7f6DEyw0Zeh+Pw=
Subject key identifier: A0:48:AA:7C:C9:A3:AF:E2:98:DD:B3:0A:CA:57:F2:55:E2:D3:F6:BF
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer: /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial: 019CACB501301A8FC45FF6DEE872CC08C039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number: 1604
Signing time: Mon 02 Mar 2026 04:01:09 +0000
Manifest this update: Mon 02 Mar 2026 04:01:09 +0000
Manifest next update: Tue 03 Mar 2026 04:01:09 +0000
Files and hashes: 1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: nO7lJO/MRjWMb7QhVAVbirP4DgEPrtF5+M9YKXZuS+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:01:30:1a:8f:c4:5f:f6:de:e8:72:cc:08:c0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Validity
Not Before: Mar 2 04:01:09 2026 GMT
Not After : Mar 3 04:01:09 2026 GMT
Subject: CN=a048aa7cc9a3afe298ddb30aca57f255e2d3f6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a2:d7:83:f8:6c:f9:22:f9:c2:cc:68:10:47:
5f:5a:26:24:53:ef:aa:49:8a:12:c5:4b:2c:e8:ce:
1a:25:14:48:1c:e7:91:4c:3f:6d:33:ea:68:ac:05:
87:04:e5:75:8b:8b:b2:be:ec:48:53:15:eb:8f:fd:
aa:01:8b:bb:98:90:11:9c:de:a3:47:1b:d5:17:31:
0e:e8:70:4b:12:42:05:fb:5d:0b:4a:40:41:f7:83:
74:f2:5d:a5:eb:60:51:22:3d:03:88:44:5f:dc:0f:
a2:5a:ca:9c:3e:f5:6f:7f:12:0a:ad:1b:26:7d:fc:
7d:de:3f:65:c6:dd:b8:d8:8b:81:23:5c:a3:0b:c7:
88:0d:b6:03:1c:00:ab:1e:98:3a:22:77:59:0a:02:
12:22:c8:9e:43:c0:f9:a3:50:2e:73:79:0c:99:1a:
3e:70:bd:3b:c5:d2:ae:e2:f4:89:08:9f:38:c8:ec:
4f:b2:33:b7:d8:56:28:8f:9e:cd:bc:6e:af:3a:2f:
d4:8d:64:73:02:f9:f8:74:9b:71:b2:d4:90:2a:c0:
69:75:c6:52:b9:fc:17:38:47:a9:a3:1b:88:5e:08:
d4:89:dc:8e:43:00:0a:29:a4:e9:7f:d6:88:41:86:
8e:6a:27:6f:a7:a7:4a:bd:56:2e:a1:e7:ed:c6:03:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:AA:7C:C9:A3:AF:E2:98:DD:B3:0A:CA:57:F2:55:E2:D3:F6:BF
X509v3 Authority Key Identifier:
keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:be:c4:f5:5d:52:a5:fb:79:95:9d:08:1d:c9:f0:89:5c:
72:01:71:5c:d2:d4:5a:7f:aa:8e:0c:93:65:92:20:92:97:20:
30:ff:59:a7:0c:14:4a:9f:e5:b4:72:35:e0:89:d2:b8:af:8f:
81:22:80:a6:12:d3:b9:4a:78:5e:92:0a:d6:28:a2:4e:5e:e4:
d2:e9:65:82:d5:91:b8:c5:75:4d:10:bd:05:db:45:16:78:17:
3c:81:07:ab:e5:18:82:1c:fd:8e:a2:7a:15:5e:8d:5d:5d:7b:
5f:d8:ec:fa:ac:e5:08:a0:72:62:6f:24:15:8e:1d:81:d3:bc:
b6:38:96:a9:58:af:8a:26:de:cf:c7:38:27:2d:37:c7:67:4d:
0d:f2:9f:6c:dd:bd:5b:49:dc:90:f7:8d:7e:70:13:54:12:1f:
95:98:20:23:64:70:87:b6:5b:dd:df:80:13:6f:cc:6d:a6:20:
88:1b:0e:52:dd:bd:25:89:c1:56:d1:53:53:4a:4d:76:02:bc:
f1:7a:f1:44:47:c1:50:a2:5c:aa:f1:de:41:8e:27:85:ca:16:
8b:c2:a7:c0:99:6b:31:d6:0c:70:e9:c8:5d:e1:8b:74:6d:3a:
68:dc:c3:7f:a3:88:10:03:c1:c4:10:73:d4:96:e8:9b:a8:5f:
74:56:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:10 2026 by rpki-client