Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: 2elh8UGajRnpCrdOasxT3Ynk1eyBpGflOhROR5l/ack=
Subject key identifier: 3F:EC:15:B7:B7:22:2F:E4:FC:B8:7A:53:42:AB:C9:6C:8D:DD:75:6B
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 019D25F0FEA18435DB82F3DAB2CFCA58689D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 17:00:43 +0000
Manifest this update: Wed 25 Mar 2026 17:00:43 +0000
Manifest next update: Thu 26 Mar 2026 17:00:43 +0000
Files and hashes: 1: 6Ph7OTwTn7R5BOZ8XlW_NErMT_M.roa (hash: Xi80ayzCKRN90pBTc/TWfWw+UkNkUlSPBpPp4lAP3a8=)
2: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: cRT7IpRZ7dhVURKdm4/hVevIWVThCoXscoDzww6CxTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fe:a1:84:35:db:82:f3:da:b2:cf:ca:58:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Mar 25 17:00:43 2026 GMT
Not After : Mar 26 17:00:43 2026 GMT
Subject: CN=3fec15b7b7222fe4fcb87a5342abc96c8ddd756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:88:2f:37:dc:21:c3:21:6c:ee:06:c6:c8:
49:e1:05:4b:e3:10:83:f9:e9:cc:d2:07:e1:58:21:
b0:14:d1:e5:89:90:8a:4d:8c:8b:b4:65:13:79:41:
7c:d5:eb:14:04:b7:a1:ba:b4:4e:b7:14:b7:76:27:
dc:a8:ab:73:56:18:53:f2:89:b0:a8:cb:1f:7a:70:
e4:9e:37:e4:cc:5a:5e:33:06:b7:d2:3e:5c:11:2f:
e9:18:9a:c0:5e:38:21:9b:42:db:ab:7e:a4:2d:77:
e6:ef:26:b2:3f:26:1d:a4:d1:e3:0c:fa:b6:a4:44:
6b:66:a5:18:c7:88:84:0f:bd:a2:9e:7f:25:26:27:
b1:c3:25:b3:39:a9:05:58:59:bf:c0:2c:01:31:7a:
51:87:ad:51:7c:60:1e:66:b8:43:49:21:19:3d:f5:
ae:46:45:34:a1:18:ac:53:90:23:80:bc:13:10:4b:
17:81:71:0b:b2:30:83:5e:d6:90:f5:e1:28:d8:4c:
5d:07:f1:0b:3a:6a:3b:87:a6:34:5c:df:73:13:fe:
b8:5b:7c:5c:14:2f:73:cc:6c:44:32:51:7c:5f:da:
d3:d5:5d:bf:a6:76:cd:71:2b:4b:1d:f7:93:de:a9:
67:72:23:5b:2b:cb:8b:39:4f:b8:fe:f2:0d:f6:fa:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:15:B7:B7:22:2F:E4:FC:B8:7A:53:42:AB:C9:6C:8D:DD:75:6B
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:23:03:38:b3:5d:b2:7a:17:4c:a8:e4:98:88:e2:04:33:
14:9c:79:bd:63:3c:dd:e5:98:3e:99:59:5d:7d:bf:fc:c7:97:
20:dc:de:f7:42:af:1d:ae:88:a6:27:d3:6a:8a:27:c4:8d:39:
cb:3c:3b:40:a4:04:92:92:86:57:ad:eb:dc:8c:b6:26:b4:e0:
36:ae:c3:6c:10:0b:7f:e8:aa:79:54:1e:7f:cf:35:5b:5e:29:
11:9a:92:31:7d:0d:8d:28:da:8a:fe:df:29:e4:60:60:55:d1:
9a:69:44:87:04:b5:32:53:d3:97:df:47:95:de:09:bd:a8:d8:
d2:5c:b5:d5:bd:12:7a:a0:d6:b4:ea:d7:41:d6:54:32:0e:1e:
d7:ce:9f:e3:2e:6e:4f:f5:d2:e6:49:23:fc:b5:c0:61:25:54:
12:6b:52:af:79:a5:24:a9:15:67:5d:12:b2:49:01:bf:59:78:
08:5b:0f:e2:53:85:e0:b1:83:87:84:38:93:d4:a5:59:49:60:
31:e8:fd:5f:07:75:b6:1c:34:d3:04:93:00:3d:45:de:3d:57:
35:46:49:71:ed:97:e9:32:16:f7:ec:34:ac:00:70:6c:26:1c:
76:36:73:f9:4e:00:1f:57:35:ec:44:ca:11:bb:51:02:9c:fc:
5d:fa:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:43 2026 by rpki-client