Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: JXa3liLr9OoM93MzzYs3i/KNodd2De6+3Cz3h9Jv/jY=
Subject key identifier: FC:78:9A:14:C7:5E:5B:7F:72:56:5B:66:36:0D:3C:24:DB:56:26:F0
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019E1F7E92E8FBE0067E3AA4AA52D1AA0EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 121C
Signing time: Wed 13 May 2026 04:00:49 +0000
Manifest this update: Wed 13 May 2026 04:00:49 +0000
Manifest next update: Thu 14 May 2026 04:00:49 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 2703Lph7R19iXbjdjHo7CJnw9qjgUdNYonxj7cpXu9s=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:92:e8:fb:e0:06:7e:3a:a4:aa:52:d1:aa:0e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: May 13 04:00:49 2026 GMT
Not After : May 14 04:00:49 2026 GMT
Subject: CN=fc789a14c75e5b7f72565b66360d3c24db5626f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:98:bd:90:a7:ed:38:da:b6:20:8b:fb:ea:
54:d2:af:e8:51:db:17:b5:76:4d:af:73:28:c3:b1:
79:68:63:38:a3:20:05:65:2c:84:e6:56:4c:c1:85:
42:5e:f5:77:2e:9e:92:bc:4f:91:26:e4:76:86:03:
66:3f:f6:fb:18:5a:3b:1a:e3:0b:30:0d:4d:b9:3a:
21:e2:09:a6:f9:eb:82:5e:59:be:7c:94:85:2b:2e:
2e:b2:7a:37:e5:79:18:25:5f:4e:44:b6:c5:30:56:
bb:92:b1:f1:37:b5:40:ea:04:7f:ae:dd:6f:bb:6f:
37:99:63:a1:35:66:80:69:a1:c5:c7:3d:bb:c6:76:
09:07:d9:76:4b:16:13:1b:d1:67:d1:f6:b2:31:e4:
18:4d:04:0a:61:30:d1:9c:7d:13:30:5d:af:1e:56:
20:6d:54:01:01:9d:2a:e0:42:17:c5:00:ed:48:99:
ca:d5:eb:19:b7:8a:92:bd:e7:96:e8:7a:a3:a9:2e:
71:f9:aa:98:88:04:29:e0:20:99:55:0c:cb:3c:de:
b2:b0:2b:b1:4a:9c:6b:b3:e6:39:f5:fc:b4:85:77:
84:49:e8:c4:8a:1c:01:db:64:a8:99:c8:31:f3:bf:
dd:55:88:a8:d2:c2:e1:7d:f8:da:31:fe:af:bc:25:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:9A:14:C7:5E:5B:7F:72:56:5B:66:36:0D:3C:24:DB:56:26:F0
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:61:57:c7:9d:05:03:f4:27:0e:15:d5:d7:df:42:00:76:
40:3e:f1:18:35:d8:4d:1d:aa:61:70:34:50:a1:64:bb:98:5d:
c9:77:0a:50:15:84:a5:3e:17:ef:97:d2:fb:46:c1:5a:b4:92:
f7:94:ea:51:a8:05:c4:ba:96:86:49:d4:98:c3:bb:81:dc:8a:
a6:1b:d0:36:99:8e:a2:2f:aa:f2:5a:e9:60:19:af:92:15:b6:
f4:3a:8e:d3:8a:eb:80:99:eb:62:c4:9d:ab:d8:46:e2:ee:38:
0c:d8:ab:e1:d8:f1:0d:8a:be:a4:ab:83:9e:a5:a3:f9:fa:05:
ed:af:a5:ac:db:05:b0:86:82:a0:46:3e:82:49:d2:aa:0d:28:
5f:c1:bd:1d:6c:3b:7b:6b:9e:34:cd:c4:06:37:bc:e7:ee:15:
d6:3b:3c:62:96:fc:77:4c:5b:98:47:c7:97:45:17:9a:c7:00:
66:f2:58:eb:3a:5c:35:d5:29:41:ab:cf:e6:96:e7:f1:3a:47:
44:cf:ad:9f:de:43:f0:54:3f:c1:f8:81:4f:1f:39:8d:93:54:
0a:57:c2:59:7d:e4:9f:60:39:20:00:42:81:65:83:85:41:48:
47:cf:84:14:10:9b:24:c4:61:b8:3f:67:f1:3d:02:94:78:63:
97:b1:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:48 2026 by rpki-client