Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: rwtywQ5veUfXBr90/UjAL1I8b+nF2U0vg5nqu3d9bRs=
Subject key identifier: 75:19:BE:32:2E:13:9C:27:36:07:1A:BE:EF:01:F8:6A:9B:F6:8E:96
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 019CAA214FE28E318D418CDEB09DEF853937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 16:00:35 +0000
Manifest this update: Sun 01 Mar 2026 16:00:35 +0000
Manifest next update: Mon 02 Mar 2026 16:00:35 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: tBNZrgUjqmhWccHFbMhAh8diBOfWWt+MU9YQeWJhSsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4f:e2:8e:31:8d:41:8c:de:b0:9d:ef:85:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Mar 1 16:00:35 2026 GMT
Not After : Mar 2 16:00:35 2026 GMT
Subject: CN=7519be322e139c2736071abeef01f86a9bf68e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:09:61:e6:81:ab:af:79:17:10:be:cf:50:
ee:40:a4:be:14:9d:a6:6d:8e:fd:fa:1c:97:67:54:
19:7d:d2:e9:cd:74:ea:aa:cb:92:3f:43:a3:23:4f:
5b:81:bf:ff:45:2c:a0:1a:c4:46:5e:df:c0:16:97:
e1:39:f4:8c:3f:d4:5d:d9:88:ec:8c:1e:ff:8c:0e:
e7:13:d9:34:07:8e:74:a1:9d:71:1a:f6:e2:9b:20:
7e:5d:95:37:74:80:14:2f:9b:80:e7:ad:89:de:d2:
16:af:e1:a7:f7:2e:70:1a:fd:92:9c:13:b3:b0:c6:
57:48:7d:9c:dc:63:b9:53:83:c9:d7:6c:08:29:91:
7a:dd:7f:04:ff:23:f8:53:00:05:6f:f3:77:d5:8f:
d8:67:5a:44:ed:06:e5:a6:90:8f:70:48:58:be:65:
a3:02:39:bf:87:05:8f:8b:83:08:25:f8:19:e5:df:
13:5f:11:26:12:0a:4c:72:fc:e1:98:3e:91:94:8b:
8b:26:b0:f3:d5:9a:33:db:8f:bd:ea:2c:36:e2:30:
a2:18:9c:53:44:63:c7:2f:e7:7f:82:cc:b0:de:6d:
d0:46:ef:fa:c4:7f:04:35:2b:28:3b:94:44:57:7d:
3c:d8:86:57:45:80:06:00:b3:75:d3:7d:70:01:33:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:BE:32:2E:13:9C:27:36:07:1A:BE:EF:01:F8:6A:9B:F6:8E:96
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:cb:9b:9a:67:f0:ec:97:75:9a:65:6f:ff:cf:de:52:d5:
03:47:d2:1c:14:61:0e:ac:2b:fc:2e:03:64:ae:f8:7f:39:02:
4e:8b:59:69:2c:f5:87:36:15:34:fa:64:39:0e:95:c5:f7:ab:
26:48:a7:fc:82:12:6b:92:49:6d:77:40:1b:dc:cf:98:28:a5:
77:dd:b8:86:4f:94:7c:cd:13:95:16:92:ee:33:dd:a0:8e:13:
2c:0a:80:8b:22:e8:60:56:4e:e6:86:8f:a3:88:d4:61:91:50:
9a:78:cd:c9:31:35:30:2d:48:30:0d:1c:3f:47:a4:84:b3:3e:
30:1c:21:eb:50:26:15:5d:82:60:96:fa:18:90:4b:00:75:8a:
97:b7:91:da:52:dc:d0:26:72:a7:c5:8a:a9:85:76:6b:ce:0f:
5a:f4:c0:0e:c7:25:28:ec:47:09:2a:40:aa:1b:18:2c:da:d6:
c7:37:03:2c:2e:17:58:2b:40:65:64:8f:fc:d6:8f:c1:c3:4c:
9c:d6:24:72:8f:09:3b:fd:2a:78:15:e0:ee:d4:cc:1d:ed:86:
3f:87:22:8f:45:36:79:91:b4:03:13:e5:43:a1:09:0b:b2:bf:
79:74:73:91:60:02:0f:71:7c:e8:c6:df:f8:f1:e2:14:97:62:
fb:d4:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:15 2026 by rpki-client