Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: c9PnlS9oWwNhSbVWMqmieuSMaWAP9PI8JFBAYxQsCjo=
Subject key identifier: 04:D7:07:82:63:83:66:EC:8A:7C:2D:7E:AA:64:F8:B0:0F:07:23:D9
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019E1EDA1A2CA252927599ED17A86410658E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: 55Dm0vtQLvUBNKJ/PkVUpAF9luQKnKarmVEUr5Tbq8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:1a:2c:a2:52:92:75:99:ed:17:a8:64:10:65:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=04d70782638366ec8a7c2d7eaa64f8b00f0723d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:67:33:4c:53:f9:cd:5d:a4:8a:2d:e7:2f:
fa:2a:65:6c:a1:42:73:d4:f0:f2:f3:b6:a8:46:0d:
45:bd:7e:07:98:e8:4e:f0:30:61:78:bb:50:f2:a0:
ee:78:ae:62:40:50:60:24:8c:a8:7c:fa:a9:d4:80:
d0:c7:0f:da:af:40:db:e7:bf:e7:f8:e8:18:9a:75:
35:19:f0:a4:9d:ae:42:d2:48:ca:10:a7:0c:9f:a8:
01:75:ad:a7:47:e2:1e:9b:fe:a0:db:e2:2d:ef:c9:
8a:c9:d8:b4:ad:ec:5a:62:6b:1e:07:a0:58:e6:5e:
a3:e6:17:3d:48:68:7e:eb:e2:04:7f:61:e5:5a:f2:
52:bb:fa:17:8f:a2:08:79:b3:da:02:52:a0:a8:eb:
99:d6:75:62:c0:31:1c:60:b7:b6:c2:03:7c:fe:e8:
1e:59:6c:cc:d8:29:c9:63:dc:4a:70:63:19:fd:98:
1f:4b:f8:2e:21:ab:35:4b:a8:de:97:f3:97:76:2e:
c6:a6:19:3d:bb:52:85:a0:17:7e:86:20:ad:65:a9:
5f:9f:00:62:2e:4a:48:95:bb:95:47:48:0b:79:93:
bc:d4:f0:b1:59:8c:89:55:da:2c:f7:5f:79:26:7e:
cd:2d:d8:db:b3:b7:79:72:c2:51:e0:aa:9d:ef:01:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:07:82:63:83:66:EC:8A:7C:2D:7E:AA:64:F8:B0:0F:07:23:D9
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b5:5c:1b:a8:f2:b1:4f:4a:34:35:a0:30:ed:f9:73:ea:11:
a2:cf:30:44:92:c4:cd:1a:7f:ff:9c:bd:6d:d0:64:f3:b4:33:
ba:bd:50:2b:c8:3a:24:40:de:96:5c:fe:8a:75:03:8f:bc:da:
cd:e7:a5:1c:f8:9e:46:93:01:2f:5c:5f:04:c0:31:77:4a:b3:
80:16:c9:c1:ca:ac:fd:97:b5:16:9b:97:ec:18:7e:e7:60:cf:
cd:75:5d:e9:d6:81:47:34:ef:f3:b9:c5:a0:77:62:a5:58:43:
ca:49:bd:3a:26:0e:72:7e:ac:5a:d6:49:bd:8a:ac:97:b9:75:
7b:92:c5:fc:bf:a4:95:f7:b9:40:dd:42:24:7e:49:62:0c:b5:
30:24:07:0f:55:9b:b2:97:32:0f:72:32:fe:2b:2b:ea:ea:1c:
db:d1:54:63:c9:cd:26:eb:6a:e5:3c:9f:ac:44:3b:17:7e:91:
f3:a2:1c:3c:f7:43:cd:b3:fe:94:a4:3f:86:79:df:a7:55:6a:
b0:ea:31:d9:6b:9b:04:79:17:b6:5d:cf:d6:f7:f6:55:e3:c5:
11:83:06:15:b1:99:3e:22:9f:3c:b6:7b:68:52:6f:f1:c8:41:
33:e0:c6:c5:17:63:ac:d7:49:8b:23:f2:f5:a4:5c:52:5c:9c:
41:32:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:16 2026 by rpki-client