Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: yGSFM/URwToH6CfTpAlaGGGP3IpkEp7WonpnHEgOC2s=
Subject key identifier: 9A:F8:41:A9:0F:0B:74:1C:EB:13:29:C5:53:BD:A5:28:B8:87:99:11
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019E20FF4855B398E10578BD2A76CB54CB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0FEE
Signing time: Wed 13 May 2026 11:01:01 +0000
Manifest this update: Wed 13 May 2026 11:01:01 +0000
Manifest next update: Thu 14 May 2026 11:01:01 +0000
Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: 0Y3rDyv78ygDlpiaOO6HBD8Q58hWLTqSlO2y0rzc5JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:48:55:b3:98:e1:05:78:bd:2a:76:cb:54:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: May 13 11:01:01 2026 GMT
Not After : May 14 11:01:01 2026 GMT
Subject: CN=9af841a90f0b741ceb1329c553bda528b8879911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:60:bd:ac:2d:5f:9a:b4:e3:92:d8:10:0a:
1e:4d:76:8b:a6:b2:74:a0:ea:d8:46:20:e5:37:8c:
a6:27:8f:ca:26:fe:78:8e:1a:a5:b2:29:04:45:ab:
1d:26:64:16:ce:20:21:ff:61:1f:6e:43:e0:60:ff:
01:e3:d3:45:30:65:3c:b7:0a:a0:c5:80:1a:91:3c:
4e:bb:03:27:4f:45:ef:f9:9f:7a:c2:c0:21:53:ef:
3c:00:cb:b9:49:f5:aa:b7:1b:c5:1a:e4:28:20:50:
34:af:9f:8b:07:4d:98:e8:47:30:fc:89:32:74:36:
a2:36:0f:6b:db:e0:ba:90:13:31:d9:1b:65:26:cd:
33:f1:5a:54:26:13:de:27:f7:ad:e5:7a:8c:81:fc:
bb:81:4a:e8:da:2b:1a:8d:fb:5a:eb:f1:aa:d7:98:
df:4a:81:99:f5:57:67:9d:c0:7c:8b:f6:5c:72:8e:
0f:25:94:45:7e:b2:41:31:ec:0d:32:c7:ff:08:4f:
d7:4c:bc:ba:28:2c:ee:0a:36:8d:40:99:90:ff:c1:
6d:f5:8c:59:64:a6:a1:94:e8:bf:cd:45:a5:76:0f:
bf:22:af:da:71:9c:f0:22:ec:a8:34:34:64:42:7e:
56:29:60:cc:c5:dc:7d:12:8a:f3:64:b6:ac:9d:4c:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:41:A9:0F:0B:74:1C:EB:13:29:C5:53:BD:A5:28:B8:87:99:11
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:45:71:72:d7:3c:42:ac:d3:b5:59:66:fe:a9:42:01:9b:88:
f7:c4:95:e2:0e:4e:49:da:42:6b:01:6f:4c:47:3c:e0:ee:b0:
52:28:9c:05:21:20:cb:61:78:63:04:2f:02:8c:3b:0e:62:1b:
a6:10:a9:ff:69:1b:aa:a0:53:f3:fe:d8:e0:1a:9d:b8:d7:3d:
67:6f:5a:4c:3b:7d:d0:4b:aa:f6:9e:34:a6:e0:70:78:84:71:
f9:78:e2:36:14:36:f7:80:41:1b:94:a9:4c:9e:a2:64:32:b0:
71:b9:e2:80:25:b7:06:7a:ce:10:ad:60:fd:86:f2:00:46:2c:
ef:e3:53:3a:8a:8c:0f:4b:c3:df:1b:96:9b:a7:c4:4b:df:00:
36:bc:b5:05:20:76:b5:92:b4:21:aa:90:06:8f:dc:06:2c:98:
3c:86:4d:f0:a3:a0:41:bf:1b:d2:38:89:86:65:38:c2:f7:07:
07:e9:c3:37:9e:32:c2:23:ae:f3:7b:88:98:8f:d3:f3:05:70:
36:1c:aa:59:e8:df:79:15:5b:67:87:26:20:86:b8:b9:ba:13:
40:76:11:a7:6e:65:60:05:af:f9:2c:f8:d8:32:8f:a2:7f:39:
4d:ee:89:37:be:99:05:4a:e7:f8:93:9e:58:1c:7a:f0:31:74:
ea:64:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:14 2026 by rpki-client