Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: SCJUo69SDm5vi7wVr4/sWmBXOT0jO1XKPtQCH4Ckvzk=
Subject key identifier: 36:3C:D8:68:E1:CB:E8:CE:86:6D:BA:8C:09:25:9B:FA:12:1B:78:F2
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019CADC7BBA6E1C00C67C3CE497299A12E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 179D
Signing time: Mon 02 Mar 2026 09:01:13 +0000
Manifest this update: Mon 02 Mar 2026 09:01:13 +0000
Manifest next update: Tue 03 Mar 2026 09:01:13 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: Qnbk5L/z40UzAA0iAQg+up5YVJwOsP0o3e15BbNaeXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:bb:a6:e1:c0:0c:67:c3:ce:49:72:99:a1:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Mar 2 09:01:13 2026 GMT
Not After : Mar 3 09:01:13 2026 GMT
Subject: CN=363cd868e1cbe8ce866dba8c09259bfa121b78f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ee:46:f9:ea:8e:5a:c8:fa:95:27:a1:f0:b0:
55:96:ec:17:f7:73:ab:95:44:59:a8:bd:1a:b9:5a:
d1:41:7c:71:93:05:74:a0:de:26:17:24:a2:66:c0:
b9:43:b3:07:07:87:65:35:c8:9f:6d:3d:5b:42:fe:
20:00:6f:f9:59:f5:64:ab:61:1e:09:33:c1:e5:33:
b3:4c:e6:89:36:61:4a:2b:2b:5c:2f:cb:87:33:b0:
a4:8a:88:92:5b:83:47:f0:1e:f6:08:ca:7c:9d:d2:
4e:30:1e:31:80:7d:be:aa:7f:1e:a2:43:11:82:4d:
7f:58:45:b9:d0:2a:0f:2a:01:ab:1e:c4:7d:b9:c3:
93:ea:fd:d3:7d:9c:7e:81:34:4d:9f:2d:ff:11:d7:
3a:4a:77:b9:f1:dd:2b:7b:cb:14:d6:66:d7:cf:50:
81:c6:4c:3f:07:a7:6c:78:b7:ef:3b:11:ac:93:9f:
cd:de:c9:28:8c:a5:c6:0d:2c:2d:b5:e9:1f:a3:ff:
85:5c:be:01:60:b4:ac:f1:e4:7d:1c:5c:1b:0d:a1:
99:28:e4:8f:47:b1:04:a1:e5:f3:14:30:8f:57:ba:
de:2d:30:a8:8b:6f:a2:08:57:22:7b:24:70:d6:06:
d5:f6:a7:80:32:f5:1f:42:46:33:8b:58:71:e0:6d:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:D8:68:E1:CB:E8:CE:86:6D:BA:8C:09:25:9B:FA:12:1B:78:F2
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:2e:54:20:dc:53:04:dd:2f:b6:fd:eb:0e:03:58:82:c1:
b4:23:fc:49:9b:5e:4f:e4:50:4e:53:86:06:00:cc:7a:76:42:
f3:cc:5d:8e:8c:be:0f:00:45:22:a1:88:01:95:7c:57:0f:d6:
a9:25:1b:71:48:fb:bd:52:42:c2:bf:5b:9d:00:4c:fa:cb:e2:
4a:1a:3d:88:26:4c:7d:3e:02:89:e0:0a:08:f7:0b:d3:e8:35:
c7:23:bc:95:99:1f:3f:94:24:4c:f2:f3:f9:23:06:b0:b4:c7:
22:55:77:1d:0a:bf:6d:c8:27:02:d0:b5:19:20:cf:af:66:75:
ce:6e:d3:4f:23:9f:2e:bc:0f:b5:55:55:73:d9:b8:ba:d1:d5:
12:d7:e2:af:1b:6c:a8:31:83:ce:0e:6a:d7:9e:e9:d7:d4:50:
63:45:96:2e:ed:99:72:f3:3e:0a:7d:a6:99:b2:f3:c6:1a:81:
c3:fa:8a:18:85:43:e8:ce:19:3a:ae:b1:d9:08:5e:ab:3e:f6:
4f:85:a5:82:e2:ea:00:99:00:b4:b7:4f:b1:17:64:eb:44:3e:
a0:84:88:7d:be:77:82:68:01:e4:8b:d5:6d:fb:ca:0e:1d:27:
5b:a4:36:50:62:12:1f:ee:c0:97:63:d6:88:7d:45:62:a6:f5:
54:61:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:44 2026 by rpki-client