Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: ZZMyuWhuHaOQUhoEvxa6puXdgayDN3PqwzPR1+agyDA=
Subject key identifier: 5B:04:40:75:E5:9F:3F:B9:0B:8C:0C:1A:B6:16:A5:07:73:EF:77:C8
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 019D98F4BD26BB4B7A137264901E67B63F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 0C03
Signing time: Fri 17 Apr 2026 01:01:09 +0000
Manifest this update: Fri 17 Apr 2026 01:01:09 +0000
Manifest next update: Sat 18 Apr 2026 01:01:09 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: nk+NjO8aHRExRdUVtb6soJCMggY6BHY/SFKkI6yVQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:bd:26:bb:4b:7a:13:72:64:90:1e:67:b6:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Apr 17 01:01:09 2026 GMT
Not After : Apr 18 01:01:09 2026 GMT
Subject: CN=5b044075e59f3fb90b8c0c1ab616a50773ef77c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:62:ab:10:e8:f2:69:51:97:d3:4a:54:35:
d8:16:cb:80:d3:d5:6d:9a:79:12:54:41:e6:97:5d:
7b:cc:b6:4f:59:1b:aa:77:35:c6:68:5d:5e:85:5b:
4b:d3:3d:99:4f:4d:28:fb:f0:c4:e0:5b:76:c5:8c:
59:66:67:b8:8b:df:a8:41:24:5c:e4:79:7c:bc:da:
39:5b:bf:3e:0f:12:35:89:46:a1:22:79:c0:47:ca:
c5:58:64:f0:ba:b1:57:04:51:e9:22:2c:fc:fd:a1:
9f:17:20:6e:80:cf:24:6a:cd:06:42:72:20:b9:9c:
b1:f0:ce:be:8a:51:d3:94:04:93:fd:91:e4:bf:21:
70:21:01:17:9e:4a:b5:8e:61:3c:93:78:51:9d:69:
cb:72:60:2c:1c:f9:8a:0e:58:a5:8d:0e:9f:a3:bc:
f1:1a:c6:d6:72:90:f8:58:03:ea:c9:d9:50:c9:e0:
6f:35:04:3e:5a:32:3e:ee:3e:a8:86:18:4b:79:c4:
35:0e:47:cb:2a:40:9a:6a:81:f8:71:e8:3c:14:7d:
28:1e:b9:05:fe:d7:b5:6a:db:a2:1a:55:20:33:8a:
5c:bd:49:d3:e6:80:12:8b:be:e6:58:ba:82:df:3d:
4a:2a:6f:10:12:0c:64:a8:e3:1e:32:2a:bb:fd:a7:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:40:75:E5:9F:3F:B9:0B:8C:0C:1A:B6:16:A5:07:73:EF:77:C8
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:65:29:2f:c6:25:04:88:76:86:44:ee:0c:a4:f9:90:e1:
36:42:29:f8:ee:e3:12:2f:77:9d:88:38:97:d0:8b:1a:64:3e:
ca:0b:8e:bb:e4:e1:e8:bb:ec:ab:fc:ef:54:c5:cf:c8:6e:97:
e5:84:6e:7e:0b:00:b8:33:2d:45:7e:20:a2:7c:15:e0:d7:a5:
05:55:99:bf:a3:f1:c7:d6:18:e6:38:f3:7e:dc:2c:cf:77:be:
3a:64:a0:03:26:52:38:b9:52:0b:74:55:cd:94:b1:d4:66:31:
9e:b1:3c:57:88:f2:38:a8:75:bf:4d:5a:64:8f:18:70:db:1a:
b9:df:25:52:49:fa:4e:3c:b4:fd:8b:e0:74:61:e9:9f:5f:f8:
fc:51:f4:8c:2c:e4:bf:88:b9:bc:8d:12:28:7b:5b:2a:b3:05:
8b:c0:4d:2e:31:30:ce:9c:67:53:b4:dc:00:93:bf:5a:8f:48:
91:71:1e:28:22:5c:1b:40:db:56:3e:cf:fe:69:13:4a:a5:56:
00:1e:4a:78:55:b3:d7:e3:8e:dd:44:6b:16:7f:c2:6c:af:0f:
2f:58:c9:82:bd:e9:ba:bd:cc:56:5c:61:d9:2e:a3:ca:e9:25:
41:db:f9:d6:f7:9f:ef:1e:9f:bc:10:20:b5:30:ec:7f:e9:99:
ce:ce:95:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9L0mu0t6E3JkkB5ntj+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2M1OWI1YmZiYmRlNDk0ZmQxM2Q3NzhlNmYyMmRkYTc0
OTYyYzEwHhcNMjYwNDE3MDEwMTA5WhcNMjYwNDE4MDEwMTA5WjAzMTEwLwYDVQQD
Eyg1YjA0NDA3NWU1OWYzZmI5MGI4YzBjMWFiNjE2YTUwNzczZWY3N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/liqxDo8mlRl9NKVDXYFsuA09Vt
mnkSVEHml117zLZPWRuqdzXGaF1ehVtL0z2ZT00o+/DE4Ft2xYxZZme4i9+oQSRc
5Hl8vNo5W78+DxI1iUahInnAR8rFWGTwurFXBFHpIiz8/aGfFyBugM8kas0GQnIg
uZyx8M6+ilHTlAST/ZHkvyFwIQEXnkq1jmE8k3hRnWnLcmAsHPmKDliljQ6fo7zx
GsbWcpD4WAPqydlQyeBvNQQ+WjI+7j6ohhhLecQ1DkfLKkCaaoH4ceg8FH0oHrkF
/te1atuiGlUgM4pcvUnT5oASi77mWLqC3z1KKm8QEgxkqOMeMiq7/afnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsEQHXlnz+5C4wMGrYWpQdz73fIMB8GA1UdIwQY
MBaAFE58WbW/u95JT9E9d45vIt2nSWLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTct
YzA3ZjZjNWEwYWE3LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTctYzA3ZjZjNWEwYWE3
LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb1lKS/G
JQSIdoZE7gyk+ZDhNkIp+O7jEi93nYg4l9CLGmQ+yguOu+Th6Lvsq/zvVMXPyG6X
5YRufgsAuDMtRX4gonwV4NelBVWZv6Pxx9YY5jjzftwsz3e+OmSgAyZSOLlSC3RV
zZSx1GYxnrE8V4jyOKh1v01aZI8YcNsaud8lUkn6Tjy0/YvgdGHpn1/4/FH0jCzk
v4i5vI0SKHtbKrMFi8BNLjEwzpxnU7TcAJO/Wo9IkXEeKCJcG0DbVj7P/mkTSqVW
AB5KeFWz1+OO3URrFn/CbK8PL1jJgr3pur3MVlxh2S6jyuklQdv51vef7x6fvBAg
tTDsf+mZzs6Vmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:17 2026 by rpki-client