Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: UJYgUd9rJJg8mCfyc2KCElZdMZ8+f+q16gorM5bnQk0=
Subject key identifier: 5B:2E:52:9D:32:61:5E:13:33:B1:C7:54:FC:5F:F5:08:3F:74:76:16
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019E1C1033AC2B62436A9F5467ADDFC67735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 019C
Signing time: Tue 12 May 2026 12:01:24 +0000
Manifest this update: Tue 12 May 2026 12:01:24 +0000
Manifest next update: Wed 13 May 2026 12:01:24 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: cTr5d4E3oFQ7O7kGk5SKCWUhxNwOqUzz6UPG3XSLm60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:33:ac:2b:62:43:6a:9f:54:67:ad:df:c6:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: May 12 12:01:24 2026 GMT
Not After : May 13 12:01:24 2026 GMT
Subject: CN=5b2e529d32615e1333b1c754fc5ff5083f747616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5c:44:62:a9:fd:2f:9b:ea:36:61:46:3f:a3:
78:92:8f:58:30:0a:49:2c:ca:31:18:2f:53:cd:a8:
3b:c9:fd:48:cb:19:f6:76:92:d9:59:fd:eb:09:7a:
7c:43:e2:f0:41:24:d8:92:d0:b6:f8:4d:34:04:99:
08:cd:a0:da:15:72:61:4f:ed:69:d4:7f:74:d7:0a:
b0:78:b2:3d:9c:9b:33:2c:c8:dd:47:79:41:a3:69:
b1:cc:4c:7a:bd:10:81:88:d6:38:58:2e:be:ac:91:
58:1e:b2:8d:c7:6b:c3:13:02:5e:d1:77:db:25:ab:
d3:b6:15:c8:fa:91:4c:7f:87:e0:b5:99:ab:f8:fe:
1c:c4:91:bc:bc:05:c8:b5:9e:a9:bb:e2:83:3a:51:
b2:5b:8c:8b:bc:55:cf:7f:26:38:01:54:2f:33:0d:
4c:2c:f0:70:0b:7c:88:6a:1a:a0:31:6d:5b:99:77:
10:50:7a:69:f1:fe:22:39:0a:8d:d5:5c:0c:9b:fc:
1a:58:59:c0:09:52:af:9d:7a:ff:ee:bd:0a:83:af:
3f:97:49:4d:e1:91:a2:45:5b:2a:6d:39:d7:e6:87:
fb:58:e7:41:b0:f7:f1:08:e0:1f:28:83:78:b0:4e:
36:53:ed:e4:02:cb:18:1f:59:f6:7b:18:6e:bb:c1:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:52:9D:32:61:5E:13:33:B1:C7:54:FC:5F:F5:08:3F:74:76:16
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d7:7a:ff:24:d6:88:9f:07:19:85:14:af:38:37:b2:4d:12:
1a:17:f6:18:6a:d8:98:08:55:f8:22:3d:40:fa:5f:f0:df:fc:
79:9c:95:76:d1:ed:5e:ba:26:e9:bd:30:66:c1:4a:41:e3:de:
58:cc:c1:60:87:5d:dc:93:0e:5b:a6:b9:b8:0e:e0:94:1a:ab:
df:fa:90:15:cc:43:75:c2:db:1d:af:dd:4f:a8:1e:3b:0f:5d:
f2:83:7f:dc:45:93:0b:76:75:90:e8:e7:eb:97:f8:a1:b8:2c:
91:4c:07:8f:fe:9e:ec:03:b9:43:66:d6:86:01:ba:c1:d1:33:
e9:ae:86:a9:ea:d1:8b:66:20:04:f9:22:41:97:cf:f8:3c:b7:
26:06:a3:db:bc:a6:71:87:ca:d1:2c:50:c6:39:bf:4d:29:d4:
de:c4:c8:15:fd:e5:4d:5c:b3:3e:99:2c:4d:6a:f1:f7:36:1d:
00:cd:29:1c:09:24:8f:d3:43:db:57:45:04:af:92:8b:c4:fe:
1d:03:c3:2d:a8:50:e2:46:76:d7:9f:75:53:bb:80:95:14:49:
2d:f1:69:ca:6b:4b:38:09:50:87:25:6f:e6:f5:68:51:c9:d7:
f7:15:35:2c:f0:7e:54:33:94:42:f1:4c:14:ba:26:a3:b1:b8:
08:65:5e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEDOsK2JDap9UZ63fxnc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTNiMDA1MzY2YjBlMTBkNTAyZTk0MTQ5MDFjZDg0ZmFl
MmRjOTUwHhcNMjYwNTEyMTIwMTI0WhcNMjYwNTEzMTIwMTI0WjAzMTEwLwYDVQQD
Eyg1YjJlNTI5ZDMyNjE1ZTEzMzNiMWM3NTRmYzVmZjUwODNmNzQ3NjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FxEYqn9L5vqNmFGP6N4ko9YMApJ
LMoxGC9Tzag7yf1Iyxn2dpLZWf3rCXp8Q+LwQSTYktC2+E00BJkIzaDaFXJhT+1p
1H901wqweLI9nJszLMjdR3lBo2mxzEx6vRCBiNY4WC6+rJFYHrKNx2vDEwJe0Xfb
JavTthXI+pFMf4fgtZmr+P4cxJG8vAXItZ6pu+KDOlGyW4yLvFXPfyY4AVQvMw1M
LPBwC3yIahqgMW1bmXcQUHpp8f4iOQqN1VwMm/waWFnACVKvnXr/7r0Kg68/l0lN
4ZGiRVsqbTnX5of7WOdBsPfxCOAfKIN4sE42U+3kAssYH1n2exhuu8E7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsuUp0yYV4TM7HHVPxf9Qg/dHYWMB8GA1UdIwQY
MBaAFLSjsAU2aw4Q1QLpQUkBzYT64tyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzkt
YTE1NzVmOTFmODNiLzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzktYTE1NzVmOTFmODNi
LzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdd6/yTW
iJ8HGYUUrzg3sk0SGhf2GGrYmAhV+CI9QPpf8N/8eZyVdtHtXrom6b0wZsFKQePe
WMzBYIdd3JMOW6a5uA7glBqr3/qQFcxDdcLbHa/dT6geOw9d8oN/3EWTC3Z1kOjn
65f4obgskUwHj/6e7AO5Q2bWhgG6wdEz6a6GqerRi2YgBPkiQZfP+Dy3Jgaj27ym
cYfK0SxQxjm/TSnU3sTIFf3lTVyzPpksTWrx9zYdAM0pHAkkj9ND21dFBK+Si8T+
HQPDLahQ4kZ21591U7uAlRRJLfFpymtLOAlQhyVv5vVoUcnX9xU1LPB+VDOUQvFM
FLomo7G4CGVe3Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:23:42 2026 by rpki-client