Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
File: TKha1Dt7R-dSh4MHGEeU1woCdmw.mft (raw, json)
Hash identifier: FU0yhmhstcfk9G/nxEvGGucB2l3e3rfjk5dNUkWeLWE=
Subject key identifier: B3:B0:5C:7D:7B:9E:15:F3:44:36:30:01:54:A7:EC:AD:B1:2E:D8:C6
Authority key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
Certificate issuer: /CN=4ca85ad43b7b47e752878307184794d70a02766c
Certificate serial: 01A13B92D2CD4B6B9363E5E25ADDB53D4294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
Manifest number: 0629
Signing time: Wed 14 Oct 2026 18:00:40 +0000
Manifest this update: Wed 14 Oct 2026 18:00:40 +0000
Manifest next update: Thu 15 Oct 2026 18:00:40 +0000
Files and hashes: 1: 1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa (hash: SZE3EWQBz3QYJjq31FoNPzS9VUyILcF5vCKxR6HmvGg=)
2: TKha1Dt7R-dSh4MHGEeU1woCdmw.crl (hash: oSLxaME6Rttk6NRsT5uPpV7SE6kZ/C3z/i6yaIgyEKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:d2:cd:4b:6b:93:63:e5:e2:5a:dd:b5:3d:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca85ad43b7b47e752878307184794d70a02766c
Validity
Not Before: Oct 14 18:00:40 2026 GMT
Not After : Oct 15 18:00:40 2026 GMT
Subject: CN=b3b05c7d7b9e15f34436300154a7ecadb12ed8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:02:c0:62:3a:b8:d6:ee:d4:dd:af:07:c5:
14:89:74:c9:de:13:df:a5:b8:3c:68:5e:83:7a:5f:
e8:6e:97:1e:a6:f0:83:a1:c3:14:8a:91:da:f3:4f:
86:57:5d:41:8b:35:08:48:39:dc:31:50:b2:fe:f2:
a5:39:25:f3:77:31:4d:ff:81:eb:f8:6f:bf:24:53:
00:1e:0c:49:1a:27:89:a1:63:fb:a3:9b:19:49:6d:
6c:58:b0:7a:c8:68:6e:56:b8:7c:63:5b:64:26:e7:
db:21:1a:aa:22:d5:c3:42:61:41:7d:9c:2f:43:20:
30:d2:81:f2:4e:1a:87:12:93:f2:c7:38:d0:c6:8f:
65:3c:de:96:aa:7e:dd:0a:16:49:fa:07:32:11:cd:
1b:7b:37:d5:6b:e2:0c:20:fe:ef:8e:12:94:36:e4:
08:62:3b:1e:78:31:3a:e5:63:de:a2:79:14:b3:1c:
4e:40:7c:08:2a:f3:82:b0:68:86:b5:2f:06:42:8c:
16:69:ae:64:ac:7b:2f:fa:23:25:eb:1f:a1:19:f8:
19:ff:02:e7:c1:d3:14:05:cf:ae:8c:ab:7c:57:e8:
10:f1:21:b4:1d:bf:72:48:8e:1e:15:84:8f:18:6a:
e8:84:0b:47:db:d6:94:9f:38:30:43:34:0d:49:15:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:5C:7D:7B:9E:15:F3:44:36:30:01:54:A7:EC:AD:B1:2E:D8:C6
X509v3 Authority Key Identifier:
keyid:4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:86:1c:73:ed:63:18:0b:0f:62:b3:3d:1f:6d:de:90:fb:28:
88:0b:7e:8c:7b:16:13:49:f6:39:8c:03:4d:61:2a:b4:a5:ff:
43:fd:27:b4:b5:0c:23:a4:3c:f7:21:4a:48:b7:4e:c2:04:4f:
6c:85:10:e9:6d:2f:13:de:8e:c9:2f:78:dd:03:5d:43:7f:68:
0a:5e:fb:ab:17:ad:21:7d:ca:46:fb:55:fb:01:9f:7c:b1:fd:
b5:96:d9:a0:1f:c7:ba:60:20:9f:43:76:3a:a7:53:e1:84:0b:
83:e3:54:b5:54:33:01:09:0e:0f:c1:a6:c4:07:bc:19:a5:0e:
d1:34:0d:4f:bd:23:6e:c8:cd:56:9f:a9:25:29:18:4b:74:96:
60:ac:b1:6e:60:e6:57:7a:21:d2:9f:98:77:91:80:dd:dd:f4:
c7:ee:8e:97:f0:45:22:9c:eb:0b:91:a0:aa:77:b1:ca:d1:65:
2e:67:f6:5f:b9:69:b0:38:bb:68:bd:12:72:17:21:d0:b4:7c:
7c:a2:2e:1e:fc:30:ba:80:36:bd:96:3c:d5:a9:e6:65:14:e0:
70:df:1a:d5:b8:5a:b5:5c:97:24:5c:f0:96:05:d1:cb:9f:6f:
6d:81:c9:a6:a8:0a:ac:9a:57:80:97:26:4e:64:34:94:b8:6c:
1a:fd:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:23:34 2026 by rpki-client