Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: So4yC2pjHGs30K1GNm8oyaXPDVfHVjQln2PmfcREgro=
Subject key identifier: EC:7A:70:F4:66:E7:B5:4F:72:56:1E:57:F9:76:C0:02:15:D0:77:2E
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019E1EA2D1F4E01DAF74DF17CC6EF869CD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: y06vrBlkSUD3c/nH1TIwC6dy89wQJWhofcAiVjzzjC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d1:f4:e0:1d:af:74:df:17:cc:6e:f8:69:cd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=ec7a70f466e7b54f72561e57f976c00215d0772e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:6c:8d:e1:5a:e0:f6:8d:5f:f5:1d:f8:a6:
0c:c3:4e:fc:24:f9:18:09:a4:38:a4:6f:8a:7f:4f:
7a:b2:52:44:7d:05:17:0f:9e:da:13:c1:a4:4d:27:
a6:39:1b:25:f1:41:2a:53:20:cb:e4:18:44:7b:05:
cb:e7:f4:3d:16:b5:c0:6a:a7:fd:56:dd:34:ec:39:
09:8d:54:f4:ee:55:16:88:63:00:63:70:00:c9:b6:
41:ac:7c:c4:54:7e:47:01:a2:65:cf:b7:b4:b2:d9:
0d:87:56:5b:9e:bf:fc:cc:ba:2d:f5:a8:01:a2:64:
92:88:fb:97:09:ba:e7:86:75:2a:ad:e5:6a:82:95:
47:32:d8:ef:dc:26:b9:4a:72:84:e4:57:f0:39:24:
0a:29:4c:f4:8f:41:5d:67:38:bc:8b:97:f9:ce:aa:
94:db:7e:79:14:db:fd:a8:6b:c4:24:50:45:a7:8b:
e1:a2:01:6f:a0:16:27:19:b9:8c:ad:15:df:9d:87:
a7:30:cc:94:1a:13:e3:6a:01:74:8d:49:f9:c8:63:
14:69:e6:67:60:b9:a4:7e:c0:c3:8d:a8:63:5e:d9:
42:16:42:2a:e1:92:f8:25:58:47:01:25:65:df:cb:
ec:f1:01:b7:17:9f:fe:55:2f:05:08:fb:a7:27:83:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:70:F4:66:E7:B5:4F:72:56:1E:57:F9:76:C0:02:15:D0:77:2E
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:eb:24:16:a8:89:5d:a2:00:a5:e9:ea:a6:0c:d4:6b:b6:
79:4b:3b:c1:84:a9:8f:7f:78:6c:34:ce:50:48:5e:87:6f:76:
e0:a7:1e:31:c8:34:71:3d:81:00:c3:57:39:b7:43:72:cb:e1:
25:f3:f4:a1:85:b8:23:2e:4f:c2:7b:47:94:33:d6:c3:37:95:
cd:b0:f5:25:f2:de:52:a2:58:6d:ce:d4:27:dc:c4:ef:ea:86:
02:97:5d:d9:57:48:28:50:d4:0c:65:45:29:71:b4:8e:ab:77:
62:15:5b:b7:dc:71:34:f7:13:60:76:09:65:79:55:f9:7c:c3:
22:ab:78:a3:47:c1:12:3e:9e:98:0e:b0:c2:33:19:02:a6:4d:
76:07:1f:d2:c0:3a:88:2a:09:de:64:5c:35:aa:74:24:9e:c6:
cd:86:89:b9:6b:79:f7:cd:20:43:cf:e0:e2:2b:1f:6d:67:5e:
5b:c8:46:51:4d:c2:8c:5b:48:48:61:99:77:00:15:ee:1b:c4:
ee:4b:4a:57:10:39:de:18:cd:f4:e5:3a:1a:bd:fb:bf:41:32:
15:30:1c:b1:b9:ef:5f:f8:cb:ce:12:3c:1d:ef:e8:af:27:81:
05:52:6c:ba:51:a1:6e:c0:31:60:dd:9e:27:bb:39:39:e7:a2:
d7:81:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:47 2026 by rpki-client