Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: 62g0J8+7CBV3LHIZKbYDqsB+q8jNRjlPoLGvg6/jfro=
Subject key identifier: 97:E3:26:70:4C:D8:2B:49:69:CA:1B:12:C1:CF:4C:C5:9D:F7:C7:C4
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019CAA8FF792AF082B88C86DD647DA86C555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 2AY6shqEK0GMXJB0vrFGd+Q/x3XJW4U1sL31TxSpKWs=)
2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f7:92:af:08:2b:88:c8:6d:d6:47:da:86:c5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=97e326704cd82b4969ca1b12c1cf4cc59df7c7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:ae:82:b9:80:2d:ea:83:ec:1f:fb:f9:a1:
3f:17:9c:30:77:2c:93:2a:a6:35:c0:86:db:cc:da:
1e:9f:15:cb:fc:ce:55:70:54:6a:70:a2:ee:09:b3:
69:8b:31:d5:ce:cc:83:8e:b7:49:3a:de:a3:af:a3:
9a:20:24:8d:06:eb:7b:9f:86:bf:38:a6:cc:b2:a1:
4a:27:55:e2:e6:b2:fa:8c:28:03:ae:91:fd:bf:3d:
33:60:32:a7:6b:4b:73:2c:3f:24:85:94:70:c1:f7:
5f:32:ac:84:fc:9b:cd:ea:da:2a:a1:f1:0f:d5:a0:
1a:03:a4:45:91:79:e6:df:3a:b8:db:89:13:e7:5a:
0a:f8:83:18:1e:d4:24:bb:cd:02:0a:e3:e6:62:c9:
7d:1c:ed:f5:5b:df:4f:a5:10:74:87:b4:6f:43:c6:
73:c6:f9:5b:55:7d:06:58:ca:50:f0:f3:61:29:4b:
fa:ed:1e:1f:97:cd:35:7b:b3:3c:4f:b1:10:01:07:
f1:6f:d9:6f:26:71:aa:76:27:14:64:cb:74:c2:0b:
e6:b5:44:ac:fb:0d:d6:c3:e2:80:73:03:f1:da:27:
ae:14:0b:da:fd:6e:03:94:6d:d2:57:c7:22:b8:5c:
5e:70:84:44:d4:35:bf:d0:76:05:bc:8f:6d:24:19:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:26:70:4C:D8:2B:49:69:CA:1B:12:C1:CF:4C:C5:9D:F7:C7:C4
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:db:93:bf:77:55:5e:8e:8d:96:10:ba:7b:d0:a2:69:17:76:
8a:2a:3a:86:48:59:4e:75:bd:40:7b:88:c9:f6:dd:7a:51:c5:
19:d6:81:34:2d:93:76:73:ee:04:c6:48:ed:4b:b3:01:b8:cd:
18:c2:96:f6:d3:ea:ae:75:a9:5b:63:1a:6e:d9:9c:89:e6:70:
bc:5e:f6:82:48:02:8c:11:71:80:07:b6:91:1d:ce:14:6c:ed:
c1:53:f2:9a:b1:ad:9b:d0:ec:ee:0c:51:ec:f7:9f:d4:f1:d8:
a1:e5:5b:a8:15:30:f2:62:28:de:f1:11:cf:d3:9f:cc:63:f0:
10:28:d6:20:9b:6b:75:c3:e4:83:c1:81:53:c6:a5:c6:10:a0:
97:1a:b9:6c:64:e3:5b:94:88:8e:bf:ea:12:d2:5f:e5:8b:63:
f3:5d:90:70:d1:f3:bb:43:96:96:de:df:1d:63:c2:b8:ad:e9:
6d:62:83:b6:3a:70:0d:ab:39:81:27:79:18:9c:17:7d:eb:e5:
b8:1b:ed:78:ce:62:da:9b:3a:d6:22:2c:c7:fd:94:76:21:f1:
5f:6d:82:b3:97:e2:73:b6:b5:b2:78:2b:e3:c7:12:fd:ad:17:
c4:14:93:da:3d:72:3b:e7:d4:ee:3e:88:aa:ae:5d:a5:29:ec:
4f:c8:93:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/eSrwgriMht1kfahsVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk
MjI5YzMwHhcNMjYwMzAxMTgwMTI3WhcNMjYwMzAyMTgwMTI3WjAzMTEwLwYDVQQD
Eyg5N2UzMjY3MDRjZDgyYjQ5NjljYTFiMTJjMWNmNGNjNTlkZjdjN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCyugrmALeqD7B/7+aE/F5wwdyyT
KqY1wIbbzNoenxXL/M5VcFRqcKLuCbNpizHVzsyDjrdJOt6jr6OaICSNBut7n4a/
OKbMsqFKJ1Xi5rL6jCgDrpH9vz0zYDKna0tzLD8khZRwwfdfMqyE/JvN6toqofEP
1aAaA6RFkXnm3zq424kT51oK+IMYHtQku80CCuPmYsl9HO31W99PpRB0h7RvQ8Zz
xvlbVX0GWMpQ8PNhKUv67R4fl801e7M8T7EQAQfxb9lvJnGqdicUZMt0wgvmtUSs
+w3Ww+KAcwPx2ieuFAva/W4DlG3SV8ciuFxecIRE1DW/0HYFvI9tJBmX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfjJnBM2CtJacobEsHPTMWd98fEMB8GA1UdIwQY
MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt
YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw
LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtuTv3dV
Xo6NlhC6e9CiaRd2iio6hkhZTnW9QHuIyfbdelHFGdaBNC2TdnPuBMZI7UuzAbjN
GMKW9tPqrnWpW2MabtmcieZwvF72gkgCjBFxgAe2kR3OFGztwVPymrGtm9Ds7gxR
7Pef1PHYoeVbqBUw8mIo3vERz9OfzGPwECjWIJtrdcPkg8GBU8alxhCglxq5bGTj
W5SIjr/qEtJf5Ytj812QcNHzu0OWlt7fHWPCuK3pbWKDtjpwDas5gSd5GJwXfevl
uBvteM5i2ps61iIsx/2UdiHxX22Cs5fic7a1sngr48cS/a0XxBST2j1yO+fU7j6I
qq5dpSnsT8iTTQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:12 2026 by rpki-client