Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: ZaweRL8sv2RMGvjmGeTM40X46VsWbi4Uu1Lm65eEGlI=
Subject key identifier: 50:32:FE:DF:15:5F:FC:1D:1F:6F:7B:46:1A:54:79:FB:2C:B1:61:D6
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019E1BD92CCF16BB271FD2EA56EA6E603644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 0151
Signing time: Tue 12 May 2026 11:01:17 +0000
Manifest this update: Tue 12 May 2026 11:01:17 +0000
Manifest next update: Wed 13 May 2026 11:01:17 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: zNyv547jSiwCx1zdx21fX/iK+/ekxPCFmnpR3zVp9AU=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:2c:cf:16:bb:27:1f:d2:ea:56:ea:6e:60:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: May 12 11:01:17 2026 GMT
Not After : May 13 11:01:17 2026 GMT
Subject: CN=5032fedf155ffc1d1f6f7b461a5479fb2cb161d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:a2:61:6d:5d:9a:88:05:ff:cd:11:12:ea:
d9:6c:99:ef:e2:34:8b:a2:f0:2f:90:45:cc:05:21:
83:c7:14:9f:ba:61:6a:45:98:79:54:87:6d:e5:7a:
f0:91:cb:7b:20:9f:7c:78:e7:bd:f7:5f:27:05:63:
f1:06:4a:d9:5e:cf:76:83:6f:7e:c6:67:1f:d2:a3:
63:0c:e1:0d:4a:98:b9:c6:9f:c0:69:4f:40:24:0a:
10:1b:03:f5:cf:06:7b:32:bd:be:8a:0d:65:6d:73:
82:84:54:9c:ac:56:aa:56:b2:57:1c:dd:32:2f:27:
c1:3e:09:df:f8:fb:51:f5:6f:26:fc:d0:ef:47:f0:
0f:b4:d6:cd:12:8a:d5:da:c5:fb:e7:5a:b4:e9:6c:
83:84:38:c1:64:cb:5d:76:61:5b:7e:df:46:49:56:
7e:41:d7:3f:f3:94:ee:24:d1:9a:14:97:7d:69:04:
70:07:1a:bb:77:b8:d6:97:5a:b7:42:43:fb:14:c8:
e4:d9:17:78:d0:f5:9f:a9:df:9a:99:d3:f7:62:df:
c4:05:0d:48:98:08:f6:67:be:de:03:3a:71:96:7a:
fd:fc:3c:35:ab:2e:53:f7:58:71:fa:29:8c:7f:47:
52:50:2b:b9:47:b8:1b:cd:89:ab:7e:7d:63:86:19:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:FE:DF:15:5F:FC:1D:1F:6F:7B:46:1A:54:79:FB:2C:B1:61:D6
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:ef:20:4a:09:41:be:7b:f5:dd:15:1f:95:60:cf:1d:70:
f0:f7:9c:db:5a:0a:73:dc:4c:0a:6e:53:35:82:b2:6b:09:fb:
58:34:d5:e7:1a:95:32:85:58:0f:49:06:75:64:e1:2c:39:65:
9e:8e:1f:ed:29:2c:e9:dd:90:d2:2a:db:3c:3c:b6:97:9b:1f:
4f:c1:f5:74:ac:60:d5:7f:54:2c:10:ab:f9:e6:51:40:5a:69:
78:a5:60:7a:26:ab:c7:d0:85:1b:9b:1b:b5:c4:c2:f4:5e:4b:
52:1d:f2:7b:7a:a1:50:62:48:0f:64:1e:6d:e9:64:96:07:12:
59:6d:1e:47:08:c6:1b:b0:8e:29:8e:22:fe:d0:68:79:0f:aa:
a3:70:d2:7c:84:dc:3e:61:45:dc:78:96:ef:9b:02:84:c7:39:
9f:85:a0:b0:2e:91:46:50:8a:91:07:10:84:36:80:77:c7:3b:
38:83:b5:d2:bb:ee:96:03:33:44:d3:48:fe:e2:91:f2:02:18:
66:60:1b:f4:83:aa:e6:9f:e3:59:2d:5a:1a:0d:a6:eb:59:d9:
d0:82:2d:62:70:46:06:d6:05:87:49:33:05:e2:c3:59:88:18:
43:44:5b:1e:17:a0:f7:38:e3:56:8a:b4:56:70:99:9e:f6:d7:
81:a3:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:27 2026 by rpki-client