Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: UsXf4SGMC3PhKElrO0rg2Fx+9Bn4IUuV74pD0RRMMCE=
Subject key identifier: 4A:E6:BE:16:A2:89:17:C0:4F:AA:FB:BB:00:3A:34:65:03:F2:5F:27
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 019E1D90A41BFDB11B72889209F88DA8B7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:18 +0000
Manifest this update: Tue 12 May 2026 19:01:18 +0000
Manifest next update: Wed 13 May 2026 19:01:18 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: kBXmgKJ+OREeGbQJHh3PZPDcnUZcvZ1D8NNu7NXz8T4=)
2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a4:1b:fd:b1:1b:72:88:92:09:f8:8d:a8:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: May 12 19:01:18 2026 GMT
Not After : May 13 19:01:18 2026 GMT
Subject: CN=4ae6be16a28917c04faafbbb003a346503f25f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:9d:48:4a:a7:4c:36:0b:97:79:59:75:55:
a7:b2:7c:e4:54:16:57:f4:9d:d6:b4:a6:ef:cd:d2:
62:c3:d5:14:fb:fe:73:7d:42:ce:bc:ac:9d:e4:c2:
b1:d5:41:79:4f:c9:6b:00:6c:12:58:0a:c0:52:9c:
a5:26:1e:de:38:b9:26:9c:93:89:50:9b:5f:3d:61:
c9:25:c7:8a:3e:27:33:05:c3:37:a7:b9:25:be:ae:
1e:bc:09:d8:a3:60:d3:f6:0f:48:b1:78:30:39:ae:
3e:c7:63:14:0f:ec:86:17:33:f6:6e:83:51:15:33:
b8:07:e8:97:14:62:a4:48:80:0a:14:ed:53:e0:59:
95:65:10:79:20:0c:ec:1b:3b:1f:34:42:15:35:12:
0f:2c:98:a8:27:5c:13:8d:67:89:88:9c:8c:a6:65:
69:83:3e:82:c2:ef:0e:e9:3f:f2:07:7d:c9:cb:32:
be:2b:f8:b2:83:a1:9f:12:39:d8:9b:2c:3e:0f:56:
fa:e7:43:f6:26:75:45:8b:73:cc:6d:f8:74:15:a5:
7d:99:14:28:b8:19:8e:d8:85:9c:a9:f6:98:a4:e6:
fb:22:b6:2f:f3:87:80:30:b4:38:16:fc:a0:49:a3:
f4:b8:30:b5:3f:80:63:1e:25:e2:58:1a:28:a2:7c:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E6:BE:16:A2:89:17:C0:4F:AA:FB:BB:00:3A:34:65:03:F2:5F:27
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8d:fe:87:de:f1:7a:20:04:13:78:4f:e1:69:57:66:1a:5a:
b5:db:0b:be:35:ee:b5:ce:5b:c7:17:25:47:cc:ea:b9:7d:ef:
26:ed:da:07:0c:65:88:29:10:be:75:fd:dc:fe:9c:75:af:35:
2a:65:01:b4:f3:3d:84:81:46:25:8a:48:f4:28:6b:58:28:37:
3b:bc:19:7c:0c:ee:4d:b2:ad:a0:ab:55:5e:70:55:68:5f:47:
fd:db:88:c8:53:50:a3:04:e3:57:da:22:0e:00:19:e1:8d:e3:
67:92:bf:3b:84:8b:ea:9e:c8:a8:0d:c4:61:03:e7:f4:a5:5c:
8d:c0:53:4f:39:2b:79:74:5c:54:22:74:41:0e:de:e2:56:db:
5c:45:31:ac:ab:3a:52:33:7e:c0:e8:78:2a:11:51:6f:3a:ee:
94:68:10:b7:7c:9a:4a:7f:1c:ba:fa:f1:99:1e:39:05:36:ad:
4d:56:8b:3a:00:de:4a:e2:32:83:06:05:e4:90:51:5c:01:3b:
6b:30:78:c5:4b:1a:8f:c9:36:99:be:55:e1:1b:a9:4f:cc:f8:
36:60:16:81:7b:2f:3a:72:51:d1:70:f3:2b:fb:5d:36:d1:7d:
1a:cb:69:3d:e7:40:f2:4a:26:4a:18:c4:a8:c2:75:66:a9:97:
fe:90:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:32 2026 by rpki-client