Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: FBMu8aTLMKceyBERQVyx0E4WJeJRmoIlZUcS7Jf1Ano=
Subject key identifier: 19:67:E9:4C:7A:13:C3:D3:1D:1E:B2:AF:50:45:E1:E6:23:1F:07:81
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019D265F48BD1AF62C8EDA93C9B262F18A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: s/HX+nvByLvMUdCnB0pi6aYuKobJTipZhAsAWTKRCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:48:bd:1a:f6:2c:8e:da:93:c9:b2:62:f1:8a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=1967e94c7a13c3d31d1eb2af5045e1e6231f0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:e7:bb:85:ff:10:62:1c:72:1a:b6:b6:3c:
76:ed:a9:f4:ed:9e:02:36:7b:a3:2d:aa:94:27:c1:
e8:55:be:95:e1:01:cc:58:9a:47:ce:24:18:40:d6:
d7:4e:5b:88:63:cb:2e:57:11:04:e8:14:58:79:6e:
4a:fb:4f:f2:d9:88:83:38:4a:d5:dc:5f:e4:cd:57:
33:d3:5e:6f:d3:88:8d:4d:06:db:c3:a3:48:3f:8c:
2a:0e:a9:6d:bd:34:ba:21:02:37:88:9f:a3:f1:18:
27:89:35:9f:72:2e:58:cb:41:3b:46:ec:d3:35:84:
3c:64:69:36:1c:82:ca:ff:82:dc:29:6a:1a:af:e3:
ea:3b:7b:71:fa:ec:96:cf:d0:b0:d9:48:f9:1f:7c:
6d:e8:3a:ed:2a:2f:07:89:c7:f4:26:0b:28:c3:0f:
f6:50:0e:84:2a:48:38:70:2f:77:4f:c2:d4:fd:fb:
fc:1e:b2:8e:35:81:53:8c:c5:ef:19:5d:a3:1d:e9:
c5:ce:74:b3:3a:0e:f9:00:46:09:71:9f:a4:02:3e:
48:ee:6e:0f:02:50:f0:49:3e:a5:06:27:c1:d2:cf:
f3:12:58:85:b3:3a:1c:94:e5:77:aa:7a:ae:3c:cc:
47:90:d4:24:31:bf:ce:91:e8:8e:6c:ef:b5:5b:e4:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:E9:4C:7A:13:C3:D3:1D:1E:B2:AF:50:45:E1:E6:23:1F:07:81
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fd:a3:9a:86:28:25:46:78:a2:77:ac:cb:c4:65:49:b1:05:
69:c9:6a:90:e5:71:07:7d:f5:19:7d:a6:bb:e0:29:66:8e:b5:
77:dc:27:bc:a2:3a:80:ac:1d:a6:cf:12:11:71:c5:0d:a5:f2:
f6:9c:e0:01:b2:c9:03:ac:19:24:57:17:a0:e2:f0:eb:f7:8c:
2d:cd:10:f6:0c:c8:e0:11:59:87:30:a3:98:26:d9:dd:22:19:
fe:51:d9:71:e8:3c:a3:36:97:32:25:d4:ca:3a:df:34:62:93:
84:1d:1c:34:e3:f3:94:85:d7:6b:2e:ad:c8:bf:d2:81:8e:33:
81:16:db:eb:e0:7d:8e:5c:e8:38:47:fa:82:ed:b3:d9:e9:2d:
9d:69:09:72:7c:b3:56:75:43:e0:0e:a1:25:12:bf:77:9d:69:
00:29:45:ae:17:ae:f0:64:f5:ca:53:98:66:d7:b6:bc:4e:76:
98:e6:b8:cb:6e:24:ba:d5:5f:86:c7:4d:d9:81:78:bd:88:26:
61:2a:62:74:97:37:42:00:0b:9c:e0:17:fa:71:39:2f:c3:ec:
3a:92:25:59:18:68:4c:1b:76:a5:61:74:d8:99:4d:11:47:41:
ee:45:5a:1d:50:15:de:b1:df:82:ae:6d:7a:2b:2b:30:b0:eb:
1c:f1:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:33 2026 by rpki-client