
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: e9U59SqrgtKlgbetz+8XWB5eny80AkAf4iaWjZBkieU=
Subject key identifier: 84:58:EB:EB:2E:5E:0B:0B:47:37:81:3C:8F:E8:F8:AA:DA:D8:5D:6B
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019E1C10076E193A862DEFB6879BE1AC09E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0309
Signing time: Tue 12 May 2026 12:01:12 +0000
Manifest this update: Tue 12 May 2026 12:01:12 +0000
Manifest next update: Wed 13 May 2026 12:01:12 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: vBY5nEvCI08vJKTHbUrr0+wOKrxPosJosqHc7tpWxQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:07:6e:19:3a:86:2d:ef:b6:87:9b:e1:ac:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: May 12 12:01:12 2026 GMT
Not After : May 13 12:01:12 2026 GMT
Subject: CN=8458ebeb2e5e0b0b4737813c8fe8f8aadad85d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:47:99:f7:31:d5:dc:c8:bc:5f:91:24:1f:
69:77:61:54:18:e2:67:4f:eb:bc:e1:9e:c6:c4:72:
b9:a1:b0:07:f7:3c:6a:24:f7:88:32:db:d5:e1:d3:
88:2b:aa:5a:b8:4e:23:a9:41:33:bd:1d:04:53:05:
ce:00:5e:75:7b:c2:d7:22:0e:4c:98:1c:96:2f:b5:
9f:59:ba:cc:f2:84:b9:9f:d9:dd:94:63:60:63:13:
a8:ea:80:0e:40:cb:2d:f7:3b:8d:a4:60:55:80:80:
97:64:9e:f0:f1:7d:bb:62:98:f5:52:7b:e4:3d:8c:
8e:04:99:86:c8:14:b3:c3:09:18:ce:2a:cc:d7:c7:
bf:26:cd:a8:d9:36:e3:9a:08:17:93:8a:02:f9:d2:
47:b5:ad:e8:55:52:43:2a:83:8e:db:c0:f4:21:b6:
4f:4d:8e:82:08:54:5c:78:5f:59:e7:f5:b1:2f:80:
97:8c:6c:00:77:95:c6:8a:48:fa:d0:12:76:4e:09:
ca:6e:45:78:93:ca:6c:39:61:d3:73:b0:25:55:b0:
ac:7b:57:e4:04:75:1c:93:19:a3:7a:a2:b6:07:2d:
8b:7e:8f:fd:c8:c8:cc:51:ae:e8:c0:46:74:99:fe:
a0:26:78:ba:cc:bc:f5:84:cd:4c:2d:84:24:8e:55:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:EB:EB:2E:5E:0B:0B:47:37:81:3C:8F:E8:F8:AA:DA:D8:5D:6B
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a9:84:d7:e8:25:f7:5e:86:0d:d9:f1:99:d3:23:d2:32:ef:
a9:4e:f3:36:09:ff:d4:80:31:03:ba:c5:a1:df:42:3b:38:1f:
53:88:0a:0b:88:2f:d8:75:d9:c3:bd:52:4f:37:7e:08:fd:2a:
2c:a4:07:f2:fe:2a:e5:e4:d1:07:d7:81:b0:cd:fc:3c:6e:7a:
c9:53:d6:d9:c4:fe:c0:03:72:74:24:c4:c3:66:fe:66:5f:ff:
d6:9c:70:f6:53:55:25:7a:94:bf:44:50:0a:36:63:1f:e7:79:
da:bf:07:a6:b0:b6:8b:0b:70:2c:75:be:8c:da:f5:1d:90:8d:
aa:e3:db:7c:93:2c:74:c5:ad:2f:2e:b3:5f:43:ec:1c:88:40:
c7:bb:4c:23:f0:14:0e:05:9b:51:0d:bd:21:d6:59:31:cb:a5:
e5:53:12:74:2a:75:3b:09:98:60:c5:ea:1a:46:ed:1f:62:d5:
cf:ba:f1:6a:d5:bc:00:37:97:8e:b7:2b:19:a3:e1:3a:36:88:
dc:f5:cf:ee:81:de:b5:99:9e:ad:65:51:61:7c:41:0d:9c:98:
83:aa:2b:27:cf:1e:d8:4b:5b:4d:d6:60:4b:46:70:ba:ea:bf:
df:ca:a4:41:ec:c6:59:f9:18:4f:3d:25:06:13:cc:f8:90:02:
7d:c5:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:04 2026 by rpki-client