Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: c2ut7buhnxFCZJH8cYmaU/KgIquXKjPVzevRtgULVvw=
Subject key identifier: 1E:41:38:23:9C:9C:58:D0:70:20:89:FB:1A:AE:2B:34:28:A5:1E:4B
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019E1E34E4439CD358B86E1D70A752DB1061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 1202
Signing time: Tue 12 May 2026 22:00:43 +0000
Manifest this update: Tue 12 May 2026 22:00:43 +0000
Manifest next update: Wed 13 May 2026 22:00:43 +0000
Files and hashes: 1: OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa (hash: wOCD2A3JYKhAmA4Jxehzqr2P6WlUUR1QNP5GZ7+5dNU=)
2: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: qWck8yl0fRt2UEMylos0Yk+CNNKEpKFWDXIjTfBx0lo=)
3: fPUxVV7UyTZqibxa_fO2Z7Dv9bw.roa (hash: rWKalIAkW6Zh9W6BAPZNwld+hHBcJmoL3lPHNNP3Pi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e4:43:9c:d3:58:b8:6e:1d:70:a7:52:db:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: May 12 22:00:43 2026 GMT
Not After : May 13 22:00:43 2026 GMT
Subject: CN=1e4138239c9c58d0702089fb1aae2b3428a51e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:ad:cf:04:80:8a:db:79:9c:95:21:19:f9:
2b:02:7b:76:3f:59:c8:c7:55:26:62:26:f1:d8:37:
80:59:25:25:fe:f3:95:79:ed:7f:33:90:95:56:2f:
ce:da:12:65:0b:c9:6a:14:6d:b2:43:db:0a:e7:2f:
be:5e:19:0c:e6:25:ae:9b:29:3f:1a:76:6d:a1:1c:
a5:b7:3c:9a:00:b1:e8:00:1c:78:f1:25:5b:93:5f:
1a:89:f2:68:99:ba:fa:35:d0:d7:da:2f:43:81:6c:
e4:cd:e1:c4:9f:29:07:e6:3d:31:f6:1b:13:6a:1f:
04:d4:15:0b:b6:04:f4:f3:9a:2b:02:60:55:92:22:
ce:af:09:91:17:b6:bf:fd:2b:f2:d9:19:85:51:41:
b5:d8:5b:b3:df:23:a8:61:99:c4:c1:ec:9d:2c:63:
27:54:6f:97:19:36:8e:5d:95:de:1a:ed:ac:8a:83:
4e:0f:a8:d4:4a:6a:1d:e3:67:06:88:c2:1e:25:80:
dc:3c:22:8d:f5:d0:29:9f:cf:ea:5d:d1:bc:21:bf:
fa:31:de:f4:45:5e:4f:25:db:23:69:9a:70:24:a9:
a0:8d:87:40:62:52:f1:c3:42:31:22:db:f4:0a:0f:
c8:19:6e:ee:8a:ad:c0:b3:e3:55:1b:85:e0:97:20:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:41:38:23:9C:9C:58:D0:70:20:89:FB:1A:AE:2B:34:28:A5:1E:4B
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:04:b3:90:f7:64:3a:72:82:1a:78:df:04:81:a4:e6:95:
9c:c4:d9:12:91:95:f6:58:c6:0a:ac:a2:30:f3:6a:1d:ba:e6:
b6:8b:03:b4:91:2f:dd:a2:82:d5:c8:3f:84:a5:23:06:80:78:
d8:36:7e:f2:cd:d4:13:fd:fc:ae:57:9f:96:7c:59:3a:bf:00:
22:f7:f2:85:c0:aa:b0:a0:90:a1:da:b1:ae:58:46:62:49:62:
c3:02:9c:8f:69:1d:08:7f:b1:c1:b3:c5:e8:67:10:e2:37:12:
15:23:95:0e:29:e8:01:6f:ee:5b:60:bd:f5:9b:23:3b:c2:f5:
c2:7d:6b:1d:96:b1:ee:bd:a2:db:ec:56:3f:39:34:78:d5:fc:
78:cb:26:18:7b:66:a7:e0:4e:66:fc:1b:02:f3:c3:09:6e:4b:
54:e6:c0:85:c3:57:21:76:66:ef:1e:bf:05:12:59:46:0b:d6:
04:36:58:f8:70:70:4e:42:31:a9:6d:42:96:bc:80:73:db:64:
5e:92:fd:96:1c:37:df:e1:81:2a:31:cf:ac:30:14:f1:bc:0a:
f1:8a:00:21:88:f7:3b:cf:37:1d:1e:5c:91:d8:04:26:c3:cf:
b5:ca:4d:59:fd:4f:50:9e:59:e3:70:ed:c8:9d:cb:19:25:9c:
bd:5d:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:50 2026 by rpki-client