Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: JpGNjeeTvpdPeyOfbFZlmlgMhjk0FtCVbmQwhxVFUHA=
Subject key identifier: 3B:3C:4D:FD:E4:7C:CA:73:8A:49:DF:1A:28:97:F3:13:9D:7F:61:B1
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019CAA8FF0FE4419153A9CF1DEE61692DE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 18:01:25 +0000
Manifest this update: Sun 01 Mar 2026 18:01:25 +0000
Manifest next update: Mon 02 Mar 2026 18:01:25 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: n6feSD9fW66OurxwdXK/fI+hqg+v/u7Uk8uqp9sBY0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f0:fe:44:19:15:3a:9c:f1:de:e6:16:92:de:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Mar 1 18:01:25 2026 GMT
Not After : Mar 2 18:01:25 2026 GMT
Subject: CN=3b3c4dfde47cca738a49df1a2897f3139d7f61b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:fa:d3:17:8c:d3:e2:f0:e3:5d:a3:c5:cb:
04:55:fd:e2:d8:99:c4:ff:43:a7:e1:d9:26:c5:df:
d7:a8:61:92:42:bf:6b:3b:1d:fc:16:ff:88:1c:6d:
0e:ca:f0:63:5d:a9:d0:04:54:b3:da:17:7a:9f:e0:
63:3a:d9:25:b8:7a:7a:5a:ff:e9:98:2f:45:37:e8:
f4:9d:02:c2:4e:cc:9a:d1:fe:03:9b:76:9f:55:78:
c9:36:0e:9d:99:a2:7f:7d:3f:cc:15:0c:fa:44:f3:
f1:37:eb:f9:74:9c:ed:38:7d:a0:da:b3:4f:e0:d9:
3c:1d:3d:d1:c1:27:97:7b:87:19:5f:95:57:fb:b1:
33:7a:cc:6d:43:5b:d5:8c:0c:07:e1:ba:11:34:6f:
c0:e3:6c:65:2f:6f:97:28:42:e4:1f:fa:ab:0b:3d:
fb:2a:83:59:be:ae:e5:7b:e2:b8:63:e7:52:c8:b7:
e3:a6:2b:dd:4f:82:db:fd:23:8c:2c:c2:0a:9c:46:
27:ee:1f:d8:95:a3:39:f3:c6:da:27:4f:9b:63:8a:
70:ab:87:a0:d3:ef:03:d2:73:b0:c5:e5:ef:2d:92:
9b:2d:82:a7:d8:77:dd:8b:8e:3d:1e:b2:4c:96:68:
fb:e3:19:8a:a0:2e:9f:19:f4:bd:f6:66:1b:13:15:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:4D:FD:E4:7C:CA:73:8A:49:DF:1A:28:97:F3:13:9D:7F:61:B1
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:c7:e7:10:b1:0c:fa:15:52:a5:f3:56:a9:fb:25:b8:11:
f0:d8:26:14:eb:c7:d6:72:e4:f7:68:a9:4c:db:51:51:b9:e7:
39:ab:e5:6e:c5:da:97:71:73:b0:0d:ff:05:f9:0f:c5:01:6f:
63:10:79:e0:db:b8:12:bd:bd:93:6d:a0:08:83:4e:2f:4b:bd:
c7:95:ae:63:f9:32:79:40:76:68:40:9c:54:dd:2d:b2:5d:a2:
b3:33:2d:e1:b8:3c:fb:bb:67:9e:e3:76:66:dd:4f:8c:31:28:
e6:79:0f:12:ee:40:e4:fa:05:88:a3:6a:e6:10:ee:a1:8d:a5:
1a:f4:5f:29:ca:60:7c:77:4a:bc:20:55:25:47:31:69:dd:04:
f5:e3:49:c9:4a:28:3c:6c:1f:52:49:f4:32:c9:13:d7:b2:8b:
f9:e3:c1:4b:cd:db:84:75:ae:3b:e7:66:48:e6:4a:42:e8:5f:
c5:7f:ee:06:c4:8f:8c:4e:cf:43:ac:89:e7:23:02:29:a6:d1:
64:97:34:0d:ec:50:e7:91:f2:6b:39:28:7e:6c:34:d6:f9:0d:
7b:7f:4d:87:c7:87:a5:02:1a:d7:c7:bd:32:4d:aa:e6:48:4e:
b6:19:74:74:83:bd:c9:68:58:98:f2:5b:02:58:91:16:bd:20:
21:e6:56:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/D+RBkVOpzx3uYWkt40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTc1OGIwODVkMTBlZjI3Y2MzZTE2OGY0OTAwNzVkM2U3
YzRlZmUwHhcNMjYwMzAxMTgwMTI1WhcNMjYwMzAyMTgwMTI1WjAzMTEwLwYDVQQD
EygzYjNjNGRmZGU0N2NjYTczOGE0OWRmMWEyODk3ZjMxMzlkN2Y2MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdb60xeM0+Lw412jxcsEVf3i2JnE
/0On4dkmxd/XqGGSQr9rOx38Fv+IHG0OyvBjXanQBFSz2hd6n+BjOtkluHp6Wv/p
mC9FN+j0nQLCTsya0f4Dm3afVXjJNg6dmaJ/fT/MFQz6RPPxN+v5dJztOH2g2rNP
4Nk8HT3RwSeXe4cZX5VX+7EzesxtQ1vVjAwH4boRNG/A42xlL2+XKELkH/qrCz37
KoNZvq7le+K4Y+dSyLfjpivdT4Lb/SOMLMIKnEYn7h/YlaM588baJ0+bY4pwq4eg
0+8D0nOwxeXvLZKbLYKn2Hfdi449HrJMlmj74xmKoC6fGfS99mYbExWr5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs8Tf3kfMpziknfGiiX8xOdf2GxMB8GA1UdIwQY
MBaAFLcXWLCF0Q7yfMPhaPSQB10+fE7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYt
YzJmMmVhMzFlMDllLzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYtYzJmMmVhMzFlMDll
LzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvPH5xCx
DPoVUqXzVqn7JbgR8NgmFOvH1nLk92ipTNtRUbnnOavlbsXal3FzsA3/BfkPxQFv
YxB54Nu4Er29k22gCINOL0u9x5WuY/kyeUB2aECcVN0tsl2iszMt4bg8+7tnnuN2
Zt1PjDEo5nkPEu5A5PoFiKNq5hDuoY2lGvRfKcpgfHdKvCBVJUcxad0E9eNJyUoo
PGwfUkn0MskT17KL+ePBS83bhHWuO+dmSOZKQuhfxX/uBsSPjE7PQ6yJ5yMCKabR
ZJc0DexQ55Hyazkofmw01vkNe39Nh8eHpQIa18e9Mk2q5khOthl0dIO9yWhYmPJb
AliRFr0gIeZWAw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:50 2026 by rpki-client