Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: y2khAg+sawDtmlxwNQRQJkKxvPwjvFmaPz41qq7Cf8g=
Subject key identifier: 2A:DA:D2:60:4F:92:42:8F:E5:DB:7A:AB:14:BA:48:61:6E:8F:53:BF
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019E1D90341FB38891985AFD4376AFCBD22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 18A1
Signing time: Tue 12 May 2026 19:00:50 +0000
Manifest this update: Tue 12 May 2026 19:00:50 +0000
Manifest next update: Wed 13 May 2026 19:00:50 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: PY9j5gvJCeCQfqgUk5A/Choz9riUu3uNMv36rzu//vM=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:34:1f:b3:88:91:98:5a:fd:43:76:af:cb:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: May 12 19:00:50 2026 GMT
Not After : May 13 19:00:50 2026 GMT
Subject: CN=2adad2604f92428fe5db7aab14ba48616e8f53bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:17:7f:2a:1c:ae:25:20:13:4e:34:b7:d3:
6f:80:ef:13:64:c8:b5:49:66:4d:09:c6:01:8c:c3:
cd:35:5b:0b:11:13:91:3f:a4:93:c5:b5:50:c4:56:
05:b9:8c:8b:42:cf:94:0d:d1:57:1f:cb:85:f2:df:
52:09:08:c3:62:2a:16:14:e8:8d:4d:2e:c4:7d:08:
de:3b:59:09:5b:fc:5e:60:21:a2:83:be:a4:65:a5:
e0:55:3b:84:5b:8d:c6:0a:89:ac:79:da:55:66:68:
20:a4:d3:87:ad:2f:41:8f:dd:af:8d:dd:c3:30:c7:
48:71:a8:3c:8f:89:e0:2f:bd:64:f7:20:62:b5:d3:
1b:89:cf:17:f3:49:e0:98:2f:a1:be:19:b3:42:58:
7e:06:ed:36:3e:c6:ee:bb:66:64:b9:91:8c:8a:ea:
a6:72:97:fc:48:ac:32:85:66:f6:d8:cd:cc:a9:32:
a9:e5:d1:90:66:a2:60:dc:f1:b3:44:0c:47:3f:36:
08:51:71:e7:0d:cc:5f:7e:be:d3:10:30:7f:a2:23:
18:26:70:68:2b:60:c8:70:03:c9:c7:40:a6:17:d2:
ad:be:9d:47:94:bc:17:7d:65:e7:3d:5a:1b:24:b3:
67:cc:13:a7:f5:be:60:85:7b:18:d4:12:33:67:33:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:D2:60:4F:92:42:8F:E5:DB:7A:AB:14:BA:48:61:6E:8F:53:BF
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:13:78:b6:06:c6:6f:3a:c9:3d:8d:a1:e6:bd:15:51:16:de:
cc:5f:5a:03:2e:a6:2c:b4:d7:9f:f9:3e:65:23:f3:ad:4c:57:
ef:4f:fe:b7:31:f0:c2:66:f7:97:da:33:9b:50:c5:46:d7:48:
c1:bb:b7:b2:cd:7a:4b:dc:54:56:ce:92:bd:fb:b7:bb:fa:c0:
dd:1a:6f:52:31:06:01:1b:e9:09:b4:bd:dc:d0:53:eb:e5:03:
7b:fa:cf:11:1b:70:58:01:56:d7:ce:40:7f:29:93:dd:52:c3:
d9:50:80:db:e0:38:8f:33:8c:83:c8:85:95:20:94:90:bc:e9:
10:dd:c2:d7:c6:fe:65:5a:a5:06:fc:0b:62:d6:c0:60:ac:70:
c0:e1:0b:3a:af:7b:8b:4a:e0:de:c0:d4:d6:8f:00:22:64:3e:
d1:8e:e2:b7:99:fe:02:d4:e5:1b:60:61:b8:5b:8f:cc:63:35:
7e:5c:21:12:5b:5e:90:af:1e:45:de:51:46:42:b1:65:41:40:
27:4f:e1:0d:90:2d:ef:59:05:65:8e:60:59:4a:a3:af:3e:4f:
77:42:71:41:f0:4c:e6:d2:12:3d:46:63:25:55:e5:aa:01:07:
57:3a:91:b3:94:98:c6:e0:99:79:78:0c:ee:07:90:5d:05:97:
9e:d4:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:53 2026 by rpki-client