Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: 136+4iLcNslonSoJOe7ItS9WXkTqZ0swUpzNGurxlD0=
Subject key identifier: D6:18:8F:61:DF:00:58:DE:1F:4F:F3:96:91:64:55:86:75:8B:95:01
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019E21364D099227EB8E9BBA737F2904F1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1910
Signing time: Wed 13 May 2026 12:01:07 +0000
Manifest this update: Wed 13 May 2026 12:01:07 +0000
Manifest next update: Thu 14 May 2026 12:01:07 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: VUTih/eGY3ntZCHWVaBFhRzOCAJkHHFo5LpoxTqig2I=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:4d:09:92:27:eb:8e:9b:ba:73:7f:29:04:f1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: May 13 12:01:07 2026 GMT
Not After : May 14 12:01:07 2026 GMT
Subject: CN=d6188f61df0058de1f4ff39691645586758b9501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:b5:56:80:a3:fb:22:cb:e8:8b:10:ce:b2:
99:2c:e6:ad:ed:04:ea:cc:d6:9e:d8:9c:3f:6c:3e:
39:03:ec:02:7e:67:90:8a:3d:ee:ca:87:e6:60:29:
63:8f:d5:7f:e6:f9:ce:4a:ab:8a:44:c4:2d:f1:04:
37:2d:0c:df:c7:c1:6b:f9:73:0f:ff:e0:6c:e5:a6:
c7:be:df:5b:cc:fe:9a:42:eb:bb:e9:29:16:f4:78:
f5:4a:1c:6a:7d:b8:e7:6f:e5:d9:4b:8b:70:9c:a9:
5a:b8:98:12:cf:2b:6b:a3:91:5c:ca:d2:90:68:da:
75:8b:1a:59:ea:18:f8:79:ac:f8:17:bd:a5:08:c8:
e7:d3:74:a4:a3:f2:0a:05:72:be:ba:66:aa:f5:3c:
1d:d1:38:02:a4:f0:9a:0b:5c:b9:35:b8:7c:35:a6:
6b:40:19:07:6d:3d:10:44:d8:c5:fe:f3:0a:c7:ce:
e9:39:44:56:0d:d3:70:55:79:31:51:47:1d:2f:ed:
80:df:0f:7b:0b:de:c3:87:37:46:c5:f0:78:28:19:
07:d4:7a:54:25:22:ec:e4:de:df:e9:98:4e:dc:de:
3f:9b:9c:d2:b0:89:7a:15:c3:e4:b2:f1:b1:72:32:
46:28:15:d7:9b:71:38:26:33:e9:00:7b:88:61:ac:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:8F:61:DF:00:58:DE:1F:4F:F3:96:91:64:55:86:75:8B:95:01
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d1:8d:e9:8b:9a:9f:a6:b1:e6:73:a3:a2:95:03:e2:c2:a7:
25:3b:21:ed:81:a9:e5:8c:c3:35:74:03:75:f4:ff:b2:2a:63:
30:6d:cc:33:b8:67:59:d6:0b:6a:bb:0e:3e:7c:7c:0e:19:44:
c7:7c:af:77:19:6b:b8:f4:fc:37:8d:93:9b:eb:cf:68:6b:a9:
45:50:ed:a9:9b:bd:ba:cd:5d:65:0e:ee:ff:ae:a0:ea:41:68:
a7:b4:28:5e:47:db:85:de:36:c7:6d:c3:6b:f6:28:62:be:61:
0b:2a:84:2e:72:e7:b9:7e:a9:67:98:ff:88:05:a4:4a:b1:96:
50:d5:89:be:53:38:e1:1e:74:e2:61:c8:ab:79:b5:79:0b:af:
38:40:37:f8:9b:4f:eb:6c:c9:ea:9c:6e:11:73:e2:16:80:ec:
7c:73:a7:25:19:fb:56:05:73:e5:40:09:89:eb:0c:cb:f4:bd:
e1:40:d6:ae:42:e7:e1:f0:1b:4e:46:e9:c9:29:82:5e:8c:16:
8f:d4:93:38:36:62:0b:c4:57:c7:dc:d6:58:c8:63:37:de:27:
46:dd:f5:6b:5f:66:ba:18:72:81:e4:ba:05:a7:73:49:5c:dd:
61:78:8c:b6:ad:23:47:1c:a5:23:d0:08:13:20:5f:40:17:48:
42:d3:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:45 2026 by rpki-client