Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
File: TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json)
Hash identifier: SK910nSoyk8RK56kYtour5TPpkz0EoLKEC156Cm1Amo=
Subject key identifier: 08:FE:4C:6C:6B:AC:F2:37:CF:57:1E:0A:31:49:07:3F:23:17:3E:71
Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
Certificate issuer: /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Certificate serial: 019D99D03EBF11734C5CF3A85B09EE8D7218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
Manifest number: 0E34
Signing time: Fri 17 Apr 2026 05:00:54 +0000
Manifest this update: Fri 17 Apr 2026 05:00:54 +0000
Manifest next update: Sat 18 Apr 2026 05:00:54 +0000
Files and hashes: 1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: jKKC25jwUKJzcqr2yG1cWf5vU7o86LfL5z+eLlKk3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3e:bf:11:73:4c:5c:f3:a8:5b:09:ee:8d:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Validity
Not Before: Apr 17 05:00:54 2026 GMT
Not After : Apr 18 05:00:54 2026 GMT
Subject: CN=08fe4c6c6bacf237cf571e0a3149073f23173e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:59:4f:c8:14:80:e0:07:72:fe:03:f2:1e:
e2:5e:cd:34:ed:09:7f:09:c7:74:07:40:b4:a8:7e:
6c:82:fc:85:ae:cc:c9:59:a3:37:b7:92:b8:04:78:
ee:67:58:e2:04:ae:d3:a7:0f:fc:83:c0:30:00:af:
06:ae:14:b3:cb:5f:75:35:ea:64:08:6c:47:72:2c:
ab:c4:94:10:5f:67:8c:6c:24:f4:9a:3c:08:7d:af:
d0:b8:32:f5:c0:88:8c:5c:45:10:7b:f3:ee:62:57:
71:7f:a0:56:b0:9d:4d:f7:8f:ee:d2:61:a2:e6:64:
26:06:78:d5:f7:16:5d:6e:df:c5:4e:60:b8:a2:8c:
b9:b7:22:87:63:c6:98:14:5c:79:40:9d:15:3b:d2:
52:1c:0d:1c:b7:db:24:d2:7c:6f:52:3c:e2:31:2f:
c5:8d:3f:9d:61:6d:87:cb:84:42:a8:0b:41:df:3c:
2a:3d:1c:97:82:98:87:51:df:bf:66:fc:ed:f0:cc:
2f:31:7d:fc:24:d3:15:e8:86:d2:9a:7c:84:16:ae:
74:05:e6:a1:38:4a:14:7f:9b:72:6b:40:6d:e9:09:
c5:27:3d:06:c3:89:38:8c:8e:e3:88:c7:8e:a6:ff:
a2:5d:3c:d5:40:5c:ee:32:ac:50:e4:e7:c1:c5:86:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:4C:6C:6B:AC:F2:37:CF:57:1E:0A:31:49:07:3F:23:17:3E:71
X509v3 Authority Key Identifier:
keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bb:0a:06:7e:a9:ae:70:8c:31:1d:b6:01:42:32:4e:36:e9:
16:4f:c1:f7:44:44:bb:ae:37:3b:1c:f9:46:b5:d1:51:da:3f:
e0:07:8c:d7:2c:e1:f7:95:cd:9a:14:a5:a4:1d:01:c8:fd:af:
d6:25:7d:e9:71:9b:c9:a6:a4:99:a1:5d:a9:d7:6c:44:53:7f:
1d:1b:7f:6b:bf:77:0b:f8:98:4c:24:1f:9b:88:93:2d:00:88:
67:25:53:87:40:7a:a5:22:6a:46:56:c6:ed:a1:5f:8c:aa:aa:
11:d4:ee:ef:1d:09:82:f5:09:1a:68:e4:8e:1d:84:a5:85:ae:
4f:23:8b:59:b8:e7:b5:a8:d6:4d:78:f6:23:6d:4b:28:76:d1:
1e:f3:ce:32:95:9b:d6:2f:b5:0f:22:b4:3a:04:9a:01:73:a7:
03:fd:c9:c8:56:96:98:52:9e:7e:8f:8f:65:43:9c:cb:20:5d:
b2:70:10:9f:3e:8c:be:ff:7f:4f:f0:4d:11:9d:da:d1:87:f2:
2f:1b:85:14:a8:d5:fe:9c:8a:7b:1b:69:c1:15:7f:01:69:76:
63:71:1d:90:74:7a:96:ae:54:68:1a:26:7a:0e:08:dc:19:73:
eb:cf:f9:f2:2d:61:90:68:7a:f7:25:db:21:de:f3:51:55:5e:
76:7f:a3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0D6/EXNMXPOoWwnujXIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTExNjJiYjBkOWI1NTFiZjVmN2IxYzE1ZWUzMTVhNTFh
Njc3ZjQwHhcNMjYwNDE3MDUwMDU0WhcNMjYwNDE4MDUwMDU0WjAzMTEwLwYDVQQD
EygwOGZlNGM2YzZiYWNmMjM3Y2Y1NzFlMGEzMTQ5MDczZjIzMTczZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WxZT8gUgOAHcv4D8h7iXs007Ql/
Ccd0B0C0qH5sgvyFrszJWaM3t5K4BHjuZ1jiBK7Tpw/8g8AwAK8GrhSzy191Nepk
CGxHciyrxJQQX2eMbCT0mjwIfa/QuDL1wIiMXEUQe/PuYldxf6BWsJ1N94/u0mGi
5mQmBnjV9xZdbt/FTmC4ooy5tyKHY8aYFFx5QJ0VO9JSHA0ct9sk0nxvUjziMS/F
jT+dYW2Hy4RCqAtB3zwqPRyXgpiHUd+/Zvzt8MwvMX38JNMV6IbSmnyEFq50Beah
OEoUf5tya0Bt6QnFJz0Gw4k4jI7jiMeOpv+iXTzVQFzuMqxQ5OfBxYYd4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj+TGxrrPI3z1ceCjFJBz8jFz5xMB8GA1UdIwQY
MBaAFE6RFiuw2bVRv197HBXuMVpRpnf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDIt
NTcxM2YxNzQ5YzFkLzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDItNTcxM2YxNzQ5YzFk
LzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAursKBn6p
rnCMMR22AUIyTjbpFk/B90REu643Oxz5RrXRUdo/4AeM1yzh95XNmhSlpB0ByP2v
1iV96XGbyaakmaFdqddsRFN/HRt/a793C/iYTCQfm4iTLQCIZyVTh0B6pSJqRlbG
7aFfjKqqEdTu7x0JgvUJGmjkjh2EpYWuTyOLWbjntajWTXj2I21LKHbRHvPOMpWb
1i+1DyK0OgSaAXOnA/3JyFaWmFKefo+PZUOcyyBdsnAQnz6Mvv9/T/BNEZ3a0Yfy
LxuFFKjV/pyKextpwRV/AWl2Y3EdkHR6lq5UaBomeg4I3Blz68/58i1hkGh69yXb
Id7zUVVedn+jdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:07 2026 by rpki-client