Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: g04LBIhvpcaTbB6YlJJV42fCEUKHL15pXcHuhnRvLjM=
Subject key identifier: 3E:03:F4:23:EF:1E:0C:ED:8D:5A:8F:9E:6B:FA:E7:7B:B2:6D:72:95
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019E1EA2BACA08FFC01D23B6D0F2D6F54FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 0700
Signing time: Wed 13 May 2026 00:00:41 +0000
Manifest this update: Wed 13 May 2026 00:00:41 +0000
Manifest next update: Thu 14 May 2026 00:00:41 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: k5T2pkKecEpNVEwtBWHVTFzGVjgiWmS7UEyuuCk4OIQ=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ba:ca:08:ff:c0:1d:23:b6:d0:f2:d6:f5:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: May 13 00:00:41 2026 GMT
Not After : May 14 00:00:41 2026 GMT
Subject: CN=3e03f423ef1e0ced8d5a8f9e6bfae77bb26d7295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:f1:3a:35:05:3b:8f:02:37:62:4d:3c:bc:
ce:02:eb:78:53:c5:63:95:12:83:ba:70:77:f1:ed:
1f:42:1a:11:38:b3:4b:8b:74:1b:33:4a:58:18:0f:
7e:94:24:21:59:a9:c1:a3:ee:c9:de:67:42:00:96:
e7:d6:34:f3:60:e0:58:01:e4:40:c7:95:8f:8c:6a:
03:c4:4d:60:da:35:1d:96:45:d4:09:0d:23:e2:b8:
7b:ab:ae:3e:b2:96:84:d7:b1:c0:26:45:e8:36:33:
d1:f3:fc:fc:fd:74:b5:32:49:e0:f6:61:e3:4f:e3:
31:b1:ba:b1:bd:4a:38:1b:5b:42:2f:0b:fc:5a:85:
ac:40:f5:2e:51:41:ea:63:d5:8f:9b:36:aa:ca:90:
a7:03:b5:42:db:b5:47:47:2a:e7:25:6f:a2:e4:df:
d1:64:fa:29:e6:ec:1c:39:f4:01:c8:97:02:02:b4:
a0:f1:d6:7b:6c:1e:7e:e2:7b:1e:3a:62:cf:44:51:
d8:7a:bb:e0:3a:9c:11:66:cb:d0:73:6c:13:c4:9b:
27:0d:27:51:0e:7b:13:19:78:10:c2:e2:f3:12:4d:
34:29:83:7e:e6:2c:2b:17:cb:c6:d8:cf:a2:ab:1b:
e2:4d:6a:19:3c:8d:0c:79:de:d2:6c:4b:0b:49:88:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:F4:23:EF:1E:0C:ED:8D:5A:8F:9E:6B:FA:E7:7B:B2:6D:72:95
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0d:e8:d7:96:79:6b:dc:b8:4a:ec:d1:01:0e:b5:85:de:db:
b1:f2:0e:df:c0:ec:c3:91:e5:b0:fe:0f:f0:a9:a8:94:a4:87:
9c:61:ce:69:6e:b2:6b:a6:d5:38:03:29:b4:4f:07:ac:eb:63:
78:bd:3c:f5:44:71:ce:ad:a9:e4:3f:82:0f:50:12:f8:5b:8a:
ed:4c:ab:6b:87:22:1e:0e:c4:9e:50:a8:9b:eb:93:e6:4f:04:
9c:81:a5:25:59:90:af:2e:c6:8d:43:bb:78:6c:78:fd:3f:e8:
72:bf:d0:46:3e:2d:44:d6:50:67:77:f3:ab:f8:bc:2b:64:bc:
07:a9:26:a6:a1:ad:0e:00:3a:45:52:63:4d:21:97:01:39:bd:
5c:a3:46:05:5e:53:bb:3c:27:b0:8c:3f:74:c2:86:8a:57:5a:
43:f3:00:94:9e:ab:37:0a:23:fd:20:56:ca:96:14:8c:b7:6e:
d8:68:c5:50:ad:22:a0:d9:40:ab:e3:41:cb:67:1d:a2:5d:15:
f6:78:87:98:4d:cb:8f:18:78:5f:f1:25:bb:24:70:11:07:cf:
fa:70:e8:30:76:e9:79:7a:f8:74:03:55:0e:63:94:b5:bc:c6:
db:8e:04:6b:3d:4d:c0:79:73:e5:82:20:07:bb:d2:5f:19:78:
ef:1d:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:00 2026 by rpki-client