
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: 70I9up6SH0kS7sjFxvQRDy9cEZ9M1caBlkfUaIr+Vxs=
Subject key identifier: 65:A2:88:90:ED:F9:34:FD:72:B5:CF:47:EE:60:84:19:71:F6:D8:4E
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019E1F7EF4B8F14F31EF9582147BF45BB6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 095C
Signing time: Wed 13 May 2026 04:01:14 +0000
Manifest this update: Wed 13 May 2026 04:01:14 +0000
Manifest next update: Thu 14 May 2026 04:01:14 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: R/pY97CzbFjVElKKMKVAmU8Rj20lzgyQqX7Doo6DJNQ=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f4:b8:f1:4f:31:ef:95:82:14:7b:f4:5b:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: May 13 04:01:14 2026 GMT
Not After : May 14 04:01:14 2026 GMT
Subject: CN=65a28890edf934fd72b5cf47ee60841971f6d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:0d:07:ac:a6:3b:0b:58:7f:92:25:84:bf:
fd:52:70:06:96:c3:7f:1f:3e:85:4e:ef:21:87:d0:
97:28:2c:0a:1e:3f:d1:9f:87:7d:da:59:7b:a5:bf:
c7:07:10:c1:27:56:3a:05:43:47:6c:41:f1:69:ab:
12:d2:c9:a0:74:df:56:d6:ef:be:5d:6b:67:4a:1f:
a5:e0:66:9d:47:58:29:51:e8:91:28:0a:bb:33:74:
58:51:e8:30:90:5e:60:c5:59:f2:d7:d3:0f:8c:9c:
45:24:cf:f2:87:c2:2d:34:9a:cc:b2:22:c2:76:88:
71:7f:e0:d9:c4:b9:36:8e:3c:50:e8:dd:64:6a:d2:
40:5d:0e:be:b2:b8:65:8c:bd:d5:01:d1:d2:60:75:
6b:17:91:7f:75:b0:c4:2b:1d:42:35:f2:44:dd:a6:
6a:bb:61:e8:99:e5:c9:d5:a9:b3:cf:5c:f5:75:5e:
c2:ac:b0:6a:a8:70:49:e8:12:6f:e0:bb:15:f4:a2:
99:4c:dc:dc:b4:a7:a2:2b:a0:a2:28:32:e4:02:16:
15:fa:7b:84:b5:7f:0a:88:4b:99:09:61:c1:6f:6b:
20:e1:ac:18:e7:85:5e:84:28:d0:60:ba:ea:74:8c:
aa:dc:97:6b:58:b1:aa:48:c9:19:a9:80:cf:27:c3:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:88:90:ED:F9:34:FD:72:B5:CF:47:EE:60:84:19:71:F6:D8:4E
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:00:61:fc:40:68:55:1c:29:42:e6:90:eb:dd:ff:d0:01:f3:
97:71:68:69:ef:76:a2:ab:a4:16:ec:27:07:8e:ab:74:c3:97:
d9:be:3c:9b:63:5c:e3:54:d6:aa:0d:4a:7f:bf:27:1e:88:94:
da:0c:8d:c9:d1:83:e9:0a:94:ad:37:46:f7:31:e3:6a:9b:c5:
ff:83:c1:5c:bb:ee:af:1f:24:01:2d:78:59:3b:b8:39:f2:04:
8b:5b:d9:48:d6:5f:31:db:60:27:8e:72:3e:94:af:78:85:3e:
7e:49:02:f9:d0:c8:f4:25:b6:9a:1d:fd:c1:20:6f:b2:cb:a6:
cf:54:32:f7:ba:46:f2:5c:6e:44:15:47:c0:d9:e0:c9:33:ec:
58:bb:37:f3:13:a1:11:8c:f5:3a:2d:04:ff:67:d9:d7:b7:15:
2a:bd:cd:32:2b:34:4f:87:2d:9e:33:25:9e:f0:b5:54:88:90:
68:1b:42:b7:bc:dd:b9:c4:6f:4a:89:d9:82:28:70:ff:be:3c:
3f:74:4b:ef:24:6d:30:40:2f:e1:56:70:aa:94:81:b1:c0:7e:
f8:92:af:de:ad:6c:fa:de:72:1c:a5:3d:cf:04:81:86:81:50:
37:d2:63:cd:95:a5:07:ac:e7:03:bd:45:db:0c:a3:73:49:e3:
4d:bf:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:59 2026 by rpki-client