Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: gQUciw8y/Ct+Zfb4ZqXqVrbzCLvaRbpsvprM1Fq+1UM=
Subject key identifier: 72:7F:28:FC:60:F1:38:7F:89:72:8D:6B:E9:5A:60:15:27:9E:3C:F8
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019E1EA2F7F83C782B6755A092404355A2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0D55
Signing time: Wed 13 May 2026 00:00:57 +0000
Manifest this update: Wed 13 May 2026 00:00:57 +0000
Manifest next update: Thu 14 May 2026 00:00:57 +0000
Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: rknk0MLoBPVNvrYiZLuciLijAX2uynZIvL14cHgg2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f7:f8:3c:78:2b:67:55:a0:92:40:43:55:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: May 13 00:00:57 2026 GMT
Not After : May 14 00:00:57 2026 GMT
Subject: CN=727f28fc60f1387f89728d6be95a6015279e3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:81:4f:d9:64:86:53:a0:28:1b:14:01:89:
dc:ba:62:c8:cb:0e:95:48:c2:3c:7e:21:32:bf:61:
12:f7:02:15:7e:b6:8f:4d:ab:cd:86:85:dc:5b:9d:
99:ad:25:af:33:42:8c:72:59:b0:cb:1d:ec:26:20:
f9:6f:88:90:0f:f5:1b:79:02:85:cc:15:9c:48:42:
f2:bd:22:ae:c0:f2:46:aa:70:a9:5d:e7:a0:80:7a:
57:bb:6b:17:71:08:f5:76:78:03:20:be:c9:56:aa:
d4:34:fc:c0:99:f8:c5:64:e9:87:87:0f:f6:fe:e3:
63:c4:a3:ba:9c:df:cc:c9:ca:4e:eb:a1:3f:2d:da:
68:c7:5e:00:31:e2:11:61:c5:6c:26:91:2a:97:23:
3a:4c:cc:fb:9c:15:cb:37:8a:79:51:47:dc:4b:af:
f7:95:8d:f9:87:1b:7a:93:b2:07:13:80:ac:cd:78:
e0:cb:d5:0e:bb:64:1c:17:1d:d4:96:8a:29:0c:d9:
0f:a2:00:60:00:e5:12:4e:21:20:2a:82:d1:90:12:
17:a0:8f:2c:45:22:25:af:17:a9:f3:13:99:20:12:
c7:9f:00:05:7b:3b:ff:3f:9d:ae:d2:31:f8:0b:59:
92:93:18:56:48:23:28:94:49:1a:6f:39:22:3b:13:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:28:FC:60:F1:38:7F:89:72:8D:6B:E9:5A:60:15:27:9E:3C:F8
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:73:b7:bd:36:35:cc:aa:57:dc:a0:37:26:5e:c0:a0:2c:
0c:e6:de:b6:c4:80:0f:80:15:51:1d:fb:fd:91:68:0c:e1:01:
be:5a:b1:39:ce:79:76:98:f6:01:fd:12:0a:0b:56:ae:b5:c4:
fa:f3:dc:81:f6:a3:a1:97:3e:a9:bc:2b:ff:c9:80:c5:fd:66:
a2:ea:bc:2f:1b:ec:2a:2b:79:d6:e9:08:1b:06:3d:86:3c:89:
f7:cf:b3:fa:97:25:e0:65:5a:70:f8:27:8f:e0:66:91:c8:ea:
43:6f:66:1a:e8:0c:52:ba:f5:46:33:40:48:27:64:62:02:9d:
1e:db:74:4c:5d:f6:0d:6c:23:e2:08:e9:5c:c6:90:01:ec:3d:
a6:4f:f5:87:fa:c9:a9:c2:7f:ee:c7:3d:72:f2:63:bc:c4:93:
d2:71:76:0d:c0:ce:ef:5a:8b:ae:ea:5d:50:04:17:26:11:3c:
6f:26:b6:b4:90:38:85:a4:f5:a0:1f:ae:68:f4:35:ec:b3:2a:
54:e3:d2:11:e6:b6:0c:cb:a5:c3:2b:f2:6e:ea:c7:d6:ae:a8:
92:84:2a:8b:b5:aa:8d:f1:36:05:f6:7d:d9:c3:c4:0a:62:b3:
30:7d:f6:28:7e:c0:2b:d3:6a:fc:6a:7f:87:f4:af:08:80:b1:
8e:b7:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:15 2026 by rpki-client