
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: KU1L4luaSixkdG3N//c2lc/aaBl3opUHTEhesFO4U18=
Subject key identifier: C2:F4:AA:A8:CC:6A:14:70:18:46:95:2D:9B:E8:EC:FA:8E:96:9B:F6
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019E1F480057230D54C61B53FAC8A7E748A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 01AC
Signing time: Wed 13 May 2026 03:01:12 +0000
Manifest this update: Wed 13 May 2026 03:01:12 +0000
Manifest next update: Thu 14 May 2026 03:01:12 +0000
Files and hashes: 1: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (hash: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: kdxGyPOb+zB/7QYWbQzgle6IMvSmzXSRHpnAxB44CKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:00:57:23:0d:54:c6:1b:53:fa:c8:a7:e7:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: May 13 03:01:12 2026 GMT
Not After : May 14 03:01:12 2026 GMT
Subject: CN=c2f4aaa8cc6a14701846952d9be8ecfa8e969bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:78:fd:89:16:6d:f1:44:3d:38:fd:27:23:
22:16:e9:3c:0b:a0:ac:47:14:94:e4:cb:aa:83:8b:
46:cf:90:91:a2:62:40:ed:97:b7:18:a3:5a:73:8a:
ab:a0:1b:c9:73:9f:e1:83:43:cc:37:3b:99:99:43:
53:2a:24:c0:a4:0f:76:29:86:4c:45:e5:d3:d8:8f:
82:06:53:dd:13:82:3a:56:3b:c2:68:fb:d2:64:2d:
72:3a:d1:a7:34:03:a8:a8:7e:fc:89:54:f1:c8:06:
bc:60:ca:49:7f:e5:96:f9:fc:a7:cc:c0:93:ff:3d:
d6:92:66:4a:54:4f:8f:de:1e:77:d3:9e:80:25:3a:
b1:9b:dd:19:28:98:fd:98:3e:b4:30:48:48:e8:06:
71:50:d7:16:44:57:7a:4b:74:35:9c:dd:8c:1c:82:
9f:80:c2:5e:f0:34:b5:fb:d8:69:54:aa:29:93:32:
3f:fc:ed:cd:df:9e:b0:30:ec:6e:4b:5f:90:1a:d6:
f6:26:2c:f1:e8:94:08:ee:25:5f:f3:6b:01:43:d8:
60:5d:e1:17:12:43:6f:38:f5:51:34:31:d7:fe:c2:
66:6f:bd:bd:a0:ba:0f:54:1b:cc:f6:69:25:22:f0:
f8:16:0f:d6:9e:e8:d0:64:ce:02:de:19:86:84:fc:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:AA:A8:CC:6A:14:70:18:46:95:2D:9B:E8:EC:FA:8E:96:9B:F6
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f0:2a:69:0a:f1:fe:85:2c:e2:02:65:bc:23:a8:13:e1:99:
3a:75:98:16:47:4b:52:32:07:63:c3:43:8c:6a:eb:fd:e6:0f:
ea:9a:65:8f:32:94:16:34:32:40:62:cd:89:d2:d8:ba:f2:88:
56:0a:c8:c8:57:9a:5c:d1:b2:4c:51:2d:b3:ea:83:13:31:d1:
af:d4:7c:e7:05:cd:43:d6:63:61:55:9c:c9:52:eb:65:ec:56:
20:d4:71:53:8f:da:54:1a:9d:c0:cb:7b:cc:5c:7a:d2:54:b3:
45:0d:34:da:58:fb:45:6b:64:1b:dd:71:c1:5f:91:3d:e0:aa:
fa:f0:fc:5b:80:af:3a:49:0d:b7:b8:34:26:40:45:ed:38:7f:
6e:a2:15:5d:b9:7a:30:ea:16:e6:ed:c0:d0:f8:bf:4b:81:3d:
5c:bf:61:70:9b:56:25:c0:3d:c5:77:56:8f:11:83:8b:0b:1a:
f4:d2:b5:d3:89:dd:96:68:67:d9:98:de:98:01:72:4d:1a:8a:
66:d4:9b:b2:16:2a:51:ed:44:93:6b:c5:0e:f5:79:bc:45:aa:
72:1b:29:75:e4:78:6b:72:9d:a4:1f:9e:b9:f4:57:41:da:89:
c8:72:44:85:bb:02:72:a5:3a:40:fb:44:ec:53:f5:e5:5b:c8:
97:14:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:18 2026 by rpki-client