Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: bgG7BVnLPoIVqXS5UHYqY6R+Jjf3b6EsuGMOPKe/wm4=
Subject key identifier: 8E:9D:31:7B:85:C9:86:4D:2C:FE:84:E0:58:90:35:B5:DE:CF:AB:DC
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 019CAB6B7B5C9D6640A1C28475BC3A74D4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: CRC2tnraSpgWQKI3OK9lFWioRtZhbpQLElBaNQqIQ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7b:5c:9d:66:40:a1:c2:84:75:bc:3a:74:d4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=8e9d317b85c9864d2cfe84e0589035b5decfabdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:ef:c6:37:1f:f5:91:03:e4:2a:c4:f5:68:
7c:9a:e1:68:1f:92:3d:2e:8a:b1:0d:70:d0:ee:e9:
a1:3d:57:86:c8:a3:d3:f2:42:63:15:e3:68:ca:ba:
fc:86:a3:c9:64:46:5a:8e:66:da:12:99:01:a0:f7:
5e:25:7b:a8:4b:2c:4c:56:4b:7b:42:4e:68:84:70:
69:24:c0:f0:0e:4f:91:8e:5a:f3:37:4f:d6:ab:57:
2b:92:38:25:e2:a0:32:c9:da:52:3a:78:ee:be:8e:
e8:71:c5:f1:66:88:10:32:1d:f0:d0:7a:dc:30:e2:
48:a5:3a:a8:52:c8:44:b9:25:0c:98:f9:bb:67:9b:
72:c9:8a:64:66:e9:9c:37:54:14:e0:87:7c:28:6a:
5a:dd:5a:dc:52:ed:b3:38:17:b9:9d:21:4a:c5:3f:
81:06:c2:d5:13:3f:4b:b5:5b:73:b2:1a:86:b0:5f:
00:5c:15:d4:79:48:a7:70:96:41:de:29:bb:c8:ca:
67:77:74:29:7b:b2:08:a8:23:af:ec:2a:39:b1:b3:
e7:f8:f3:0e:c7:92:09:c4:00:a1:68:35:46:dc:1d:
e3:a9:c3:5a:31:49:43:0d:c9:f5:67:63:c9:86:f3:
4e:f6:81:ad:a2:50:db:5f:35:e9:0e:cf:63:09:e3:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:31:7B:85:C9:86:4D:2C:FE:84:E0:58:90:35:B5:DE:CF:AB:DC
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c1:60:41:d5:61:09:f5:22:c3:8c:2a:42:e1:49:a7:2b:a9:
4c:a7:92:99:0d:d8:fe:29:b4:f4:0a:1c:45:67:ba:5a:8a:46:
0b:ad:dd:7c:8c:8b:f2:28:92:3e:44:a6:2e:17:df:f8:2c:fc:
fd:ab:91:89:30:21:38:1c:c2:10:94:17:de:a7:80:35:60:25:
4e:6a:24:b9:95:68:6e:01:47:f0:a2:a3:8b:7b:f3:66:c6:06:
bc:b0:55:ab:87:66:8c:20:d5:07:38:05:89:e6:7d:db:85:12:
a4:00:6e:39:39:ca:d6:1d:02:8f:ff:6a:7c:ab:ac:9e:2b:b2:
6e:54:39:af:3d:b0:e4:b4:8f:97:07:d6:a1:6b:e1:e5:ad:60:
43:6e:1f:84:81:b9:55:69:7e:48:b8:a8:12:5b:a0:dc:48:ac:
47:7a:fc:50:15:fd:7f:1f:45:70:00:c2:9c:53:45:6f:7c:49:
05:e4:7b:d9:30:d9:fe:53:4e:25:81:53:3e:65:77:f6:ac:e6:
0c:ac:05:71:dd:74:40:f5:03:07:5a:5d:93:1f:2a:2a:d2:4b:
68:ad:d6:dd:ad:6d:06:f9:0e:5c:2f:b9:96:d6:f4:78:63:a5:
f4:29:74:e8:94:24:a9:81:58:8a:a0:b7:6a:50:20:a1:79:3b:
25:27:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:59 2026 by rpki-client