Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: YQqONPy+40Vm1T0XRdo1n1aUE3aMSH6tp+0Oj2TrrDE=
Subject key identifier: 8E:A3:B4:C6:C6:0E:49:F2:E6:76:5E:27:8C:0C:7E:91:21:75:F3:7E
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019E216CE5A145527B5328D123F4FEE4E8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 189C
Signing time: Wed 13 May 2026 13:00:45 +0000
Manifest this update: Wed 13 May 2026 13:00:45 +0000
Manifest next update: Thu 14 May 2026 13:00:45 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: ogTGr5DnJbQikzXwpkwinRjeKeuAKvgQTBsMNtOcBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:e5:a1:45:52:7b:53:28:d1:23:f4:fe:e4:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: May 13 13:00:45 2026 GMT
Not After : May 14 13:00:45 2026 GMT
Subject: CN=8ea3b4c6c60e49f2e6765e278c0c7e912175f37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:a9:e0:c6:bd:45:7e:a5:86:fa:3f:ef:99:
9e:07:45:66:ce:86:ea:94:94:8b:21:b1:99:4f:30:
0e:63:ed:0b:8e:74:46:9d:6f:94:d8:75:67:ce:91:
7a:57:01:48:80:2c:96:88:b7:17:e2:d0:3f:1d:34:
80:99:26:91:d0:fe:f2:a5:f8:6e:ca:b8:a8:33:7e:
bd:a5:fd:06:1d:5b:c5:3a:f3:6f:17:aa:be:0a:f3:
1c:9d:32:21:73:57:63:56:fa:96:f1:14:91:0e:bc:
b1:8c:0d:27:14:e8:df:4e:e8:be:a7:2f:6a:9b:c7:
7d:a9:bb:b3:be:8a:a7:97:72:c8:fc:6e:64:63:e4:
08:c4:10:59:8e:0f:43:f2:29:77:75:47:cf:ef:be:
8c:5a:89:07:c2:a0:0a:ce:9c:23:91:a5:a4:22:9d:
e0:5d:6d:c6:12:25:b2:e5:59:f5:8b:29:2e:29:ae:
e9:75:ed:4b:d8:87:66:28:6f:bb:97:a7:0b:47:aa:
1e:82:cb:07:80:0b:1b:8a:76:d2:3f:b8:fe:45:8a:
22:91:d6:6f:bb:68:70:4b:0f:22:4c:51:c7:99:90:
f8:24:2c:f2:76:47:ac:c2:ef:f7:ba:69:0e:9b:6a:
53:e5:1a:84:f3:01:2a:73:32:bd:d0:05:c1:69:42:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:B4:C6:C6:0E:49:F2:E6:76:5E:27:8C:0C:7E:91:21:75:F3:7E
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:f6:46:d1:af:56:d0:79:e9:0c:87:62:e5:e8:5c:e2:70:
64:75:f8:b7:f6:ec:df:e8:9a:21:ff:67:f5:d7:60:c9:70:24:
e2:65:3e:1f:c0:89:09:24:a5:63:fa:df:80:9b:0e:64:9c:94:
ce:88:b6:57:5c:f7:5d:48:05:75:20:42:81:ae:db:d0:80:a9:
67:f1:35:62:9d:9d:91:0d:6f:76:50:13:f6:f0:c3:4b:0f:34:
ee:91:18:b1:d1:e4:3f:91:5e:d2:8e:66:54:17:5e:6b:6a:73:
58:9e:9d:5c:c4:3b:e2:0b:36:37:e1:ff:a1:3d:86:00:34:e9:
95:04:e8:3b:71:fc:c1:c3:7e:d2:57:43:c3:8c:c6:5b:5c:02:
8b:ea:1f:96:ed:31:04:dd:03:fd:e1:74:59:fa:37:28:da:69:
63:c4:f8:51:af:78:4a:82:d3:dd:14:56:72:5b:e4:2f:6f:8b:
16:19:98:7a:f7:57:bb:a6:50:a2:51:61:49:de:52:97:50:e4:
3d:3b:46:03:3d:98:39:55:e0:ba:ad:d1:d5:97:44:c2:10:eb:
a1:34:4f:b5:9e:ef:59:00:5c:d3:77:8a:36:e0:68:92:9d:cd:
53:4c:e1:df:7f:a5:bd:a3:bd:b4:60:cc:43:9a:e2:2b:7b:db:
69:c1:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:56 2026 by rpki-client