Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: oR83+Fv9Y3jNmveIsl9AgA+GgD/+TfYgMJD9sCZjrck=
Subject key identifier: CA:B8:1C:DB:A7:9C:DA:E6:DB:2F:2C:4C:22:36:2C:FF:B6:70:9E:44
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019E20FFB47270BE94A73E1F33DA53CA54B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:01:29 +0000
Manifest this update: Wed 13 May 2026 11:01:29 +0000
Manifest next update: Thu 14 May 2026 11:01:29 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: ll4F8LrxDce+up37e603wSXSrgj54BdgF9pnXYR89dQ=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:b4:72:70:be:94:a7:3e:1f:33:da:53:ca:54:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: May 13 11:01:29 2026 GMT
Not After : May 14 11:01:29 2026 GMT
Subject: CN=cab81cdba79cdae6db2f2c4c22362cffb6709e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:c9:ba:54:a7:f6:20:50:c2:7b:bd:9d:d3:
1b:72:1a:3e:2d:80:64:bc:64:a3:eb:7e:72:0c:0f:
ee:a2:26:ba:34:74:e3:49:77:7a:02:c6:38:be:bb:
ac:80:9b:c8:3f:83:94:3a:41:20:e0:0a:d5:91:fb:
a9:16:12:fc:50:91:aa:bf:93:f6:91:49:e5:fc:f7:
03:6a:2a:1e:bb:2d:3c:81:54:08:9e:e9:f9:24:b3:
e2:c0:ea:02:bf:df:b6:d7:2f:8e:b2:98:fc:0d:d3:
cf:40:75:fc:62:e6:2a:fa:f6:a0:cb:16:32:38:e1:
fd:7b:f9:59:6e:dd:c1:f2:22:1d:4c:05:0a:8b:57:
48:43:c8:36:93:02:eb:12:b5:f8:95:d3:37:38:00:
23:8b:42:38:58:9a:35:a8:95:a7:7b:c5:5f:90:09:
e8:60:d0:bc:d2:5d:d8:c8:69:2a:59:d0:22:af:d5:
55:a3:20:8c:8f:85:dd:2c:e5:2c:28:f6:38:96:70:
09:3c:18:9f:5c:4b:94:86:39:7d:e1:fb:f3:3d:25:
80:b0:c5:4d:df:3f:f2:ec:39:83:4f:9b:f9:82:de:
a0:ea:88:90:cc:68:cb:31:bf:80:b0:8e:28:b7:de:
b8:3a:99:2c:90:13:0c:ed:b1:2d:17:66:54:81:af:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:1C:DB:A7:9C:DA:E6:DB:2F:2C:4C:22:36:2C:FF:B6:70:9E:44
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:89:a4:b6:17:b4:bf:44:92:23:eb:0c:63:05:c9:7d:ef:
f5:d4:48:aa:42:8d:85:5e:51:b2:f5:b9:a2:98:10:63:3b:56:
ff:96:ff:97:63:a6:62:79:06:54:98:91:ca:59:c8:de:c1:a1:
a2:de:50:34:ab:56:36:2c:16:24:e6:48:32:61:a2:17:9b:27:
98:33:c7:10:17:d1:6d:37:ec:85:a9:d6:42:a2:fd:c5:75:0d:
3e:2d:52:4f:8e:28:dd:03:c5:6c:de:b6:6a:30:8c:45:7d:28:
15:74:95:f9:27:f2:8f:af:ad:8f:18:07:31:92:e4:eb:70:7d:
d8:45:39:c2:8d:ac:cc:02:99:65:b2:40:f7:6f:c0:0a:e1:89:
9a:4b:a6:46:6a:ed:10:aa:14:f1:1b:de:b4:f5:27:ff:55:55:
b8:8e:a0:4c:e0:29:a5:23:da:82:fe:2d:d7:0a:1b:cf:9e:67:
b6:86:4a:fa:10:05:b3:90:bc:bc:4e:c0:b0:0e:f0:63:cc:da:
9b:97:e0:82:bf:0f:29:3d:e5:74:5b:f7:57:7d:62:ee:fc:f6:
4b:ae:3b:47:5c:26:8c:74:93:eb:9a:df:6b:54:9d:db:76:cf:
73:5d:08:85:bc:93:2a:a1:c7:22:28:a1:f1:1d:8a:66:7b:5a:
6a:82:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:34 2026 by rpki-client