Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: Ee1+BnIFHhzifUu6gdci5H6K72MQiEa3pF4yWN+dLXY=
Subject key identifier: A3:C7:A3:AB:E6:09:AF:81:59:FF:8A:E5:6E:76:BC:FB:FC:1D:3D:6C
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019F940014EB3FA64A4EE17A5D8EE96FCD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 12:01:01 +0000
Manifest this update: Fri 24 Jul 2026 12:01:01 +0000
Manifest next update: Sat 25 Jul 2026 12:01:01 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: AkYYYVLjprXeC+xYp+fZQYZ2FumUbNkALoagYu2qIZk=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:14:eb:3f:a6:4a:4e:e1:7a:5d:8e:e9:6f:cd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jul 24 12:01:01 2026 GMT
Not After : Jul 25 12:01:01 2026 GMT
Subject: CN=a3c7a3abe609af8159ff8ae56e76bcfbfc1d3d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:fa:2c:70:56:3b:e9:6e:ed:1c:6c:0d:10:
66:b8:6c:4d:60:96:9c:4b:e0:a3:61:98:dc:24:fe:
1d:a7:e4:29:2d:4d:b2:24:61:c8:45:11:30:50:15:
1d:d4:1c:d4:86:ee:d5:d5:dc:fc:b0:1d:cd:0a:a8:
7b:14:4f:b7:29:8b:54:66:83:a6:f2:63:da:67:23:
be:db:cd:f3:db:ee:e2:5a:08:41:ed:7a:3f:44:4b:
a6:e5:96:f6:e6:f4:3e:20:5c:05:05:a7:41:c4:db:
c0:71:fb:57:f5:e4:ce:63:c5:11:9f:c6:a4:fe:20:
67:e8:fe:06:c2:ec:53:b4:6b:75:6a:7e:63:08:b3:
10:f8:a8:c6:bb:52:af:30:4d:47:55:36:06:fa:91:
6b:9d:a5:5e:58:af:63:38:d8:6e:74:0d:b4:b3:7c:
f0:6b:2f:7d:eb:ca:c7:7f:a7:2a:cf:e3:45:04:33:
06:f8:07:d9:7b:a2:20:56:9f:85:05:4f:75:de:fc:
50:e9:bd:76:41:0a:50:9e:b6:ad:ce:67:d2:7d:90:
d4:1b:1c:f2:36:3f:8b:f1:b6:72:bd:24:c8:56:47:
61:84:9b:cb:40:a6:4c:6a:3a:b7:87:24:fa:84:dc:
83:43:6f:30:d3:6b:67:bb:51:c6:83:82:9b:d6:82:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:A3:AB:E6:09:AF:81:59:FF:8A:E5:6E:76:BC:FB:FC:1D:3D:6C
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ad:57:d7:b4:bb:d3:16:81:10:ca:b1:6b:70:ad:8b:6b:97:
a5:27:4d:9a:8f:00:61:8e:66:8c:52:94:38:6f:86:39:cb:c4:
dc:e6:9d:3c:65:1d:41:33:fb:46:af:d0:cb:8e:28:51:67:6e:
bc:e4:c8:c0:05:93:4b:0d:a2:25:fa:f3:86:ab:6f:e5:03:84:
79:73:bb:3d:32:b2:fe:93:89:2e:b7:f9:ba:38:f7:6c:e6:12:
99:7e:cf:29:c8:16:53:c4:b8:62:0d:19:ef:13:49:57:c3:35:
66:f4:fe:58:79:61:02:f7:72:c7:0c:96:50:32:6c:c2:be:4f:
70:39:f5:54:fd:d4:b1:4a:66:fd:38:d2:4d:13:55:f8:a4:e5:
b0:79:b0:f1:0e:05:a2:1e:b6:d4:8e:d0:3f:07:2e:b7:a9:41:
d7:34:0f:75:d5:08:50:95:c8:54:14:d0:26:bf:e9:76:0c:d3:
f2:7c:1d:04:39:5c:44:db:02:b4:e1:92:3a:74:81:c8:ed:00:
26:48:3f:6f:de:cb:1f:25:dd:4f:d4:ec:e1:ce:91:d2:c7:20:
ee:fb:37:7f:06:46:44:21:8b:dd:bf:06:b7:01:02:71:ce:77:
2c:bd:64:e5:44:6f:a5:83:4c:92:69:ff:3a:09:ef:52:55:20:
e6:b7:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:32:37 2026 by rpki-client