
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: IwB5q2Ho1Nj9iUkRwDNotKi9IFi4DFGGjCOgVQgC2pw=
Subject key identifier: A8:70:BA:31:F6:A6:CB:42:30:4F:F8:30:30:D4:A7:A4:59:8B:B3:40
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019E1EA2FAED4265EBF7F9F8EECE5B74D8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0F94
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: 67FI6Fz8XyoXq+Mwy90YXPnC9qvwzpSQNT0shcabN5o=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fa:ed:42:65:eb:f7:f9:f8:ee:ce:5b:74:d8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=a870ba31f6a6cb42304ff83030d4a7a4598bb340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:4d:e5:24:3d:28:76:6c:ec:c1:70:04:93:
d3:a4:ff:c4:75:92:9e:9b:27:ae:cc:78:b1:25:aa:
0a:d2:7e:97:1a:6d:fa:42:40:44:50:bf:13:f5:62:
a5:8a:3a:6c:36:cb:7a:f2:dc:6a:c8:39:3d:7d:12:
16:00:3a:2a:24:25:ee:c0:5d:6d:32:a6:60:41:d2:
b3:a5:2e:22:7c:a0:40:d1:7c:e4:a5:08:41:79:6e:
86:77:ce:27:22:19:37:04:8d:7c:3a:a8:04:e0:5f:
34:13:e2:00:f3:1e:d6:fe:09:52:03:df:72:2f:8c:
13:80:62:61:68:ff:12:bd:7c:55:13:6e:fc:bb:54:
dc:45:2d:2d:5d:e6:8b:a1:43:f6:8d:bd:84:f7:3f:
3a:e5:86:a6:b9:5a:8a:d2:21:94:04:97:7e:e9:b7:
f5:e3:80:e2:d4:ed:ee:62:99:8b:e5:c6:cc:17:49:
7d:48:3e:12:05:b2:a6:fa:f0:72:7c:65:85:ef:c9:
83:14:f0:75:c2:f3:a6:8b:66:df:92:61:36:c1:2d:
79:f6:82:84:7c:f9:93:ab:93:8d:a9:9c:94:1d:14:
54:72:71:cc:5d:ab:ad:69:5c:ef:bc:61:3e:ee:cd:
72:ea:5f:aa:97:50:14:5e:be:03:61:a8:72:d2:99:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:BA:31:F6:A6:CB:42:30:4F:F8:30:30:D4:A7:A4:59:8B:B3:40
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:8a:af:ee:3d:fc:bf:c0:25:05:72:72:ab:88:ad:9f:81:
79:eb:c8:7c:61:a4:b9:a7:b4:cd:7b:bb:55:b3:84:cb:f6:27:
d7:6d:0f:73:c6:a9:2a:50:e8:fd:c5:c2:b3:2a:ee:97:07:51:
40:82:cc:a2:37:ba:96:54:22:f5:f9:2b:fd:80:b5:c4:b9:35:
e7:11:d5:58:c4:59:0e:b4:15:9e:2e:1d:3a:38:0e:8b:de:11:
3b:0d:a6:ec:8b:df:ee:3a:b2:4f:46:32:ed:c5:d3:73:d1:d5:
2f:9b:9d:09:a2:b3:89:12:de:14:02:1a:63:c6:3e:54:42:73:
93:2f:b8:1d:8b:0c:66:39:16:74:53:3a:15:df:18:eb:d6:97:
e6:40:1a:d7:60:47:59:d0:63:a9:07:d8:8c:4a:7d:37:fb:c2:
86:2d:e5:be:ef:fb:3f:63:b2:82:4b:55:03:6c:41:16:03:80:
5d:95:35:78:e5:2e:5f:f1:2e:1c:30:6e:5e:90:37:5d:76:63:
4c:14:25:eb:95:e5:b4:ef:1b:e5:7e:f4:b2:a4:5d:8b:6d:37:
be:41:25:83:b9:5a:02:78:e7:0b:ae:88:b7:31:7e:24:c4:c9:
e5:59:c7:c5:b8:8d:e2:0e:a9:26:d4:d5:66:73:78:27:0b:92:
3b:4d:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:16 2026 by rpki-client