Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: Mazve9IGwmGiiA0Nd8aZl9J3lCxU8q5IlFq8WCW9whc=
Subject key identifier: 1C:9A:6C:1D:1F:3B:1A:D2:85:D8:00:D0:F5:58:C2:3C:53:7D:06:6A
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019E1D900826F03137A8593567EC8C0D8069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0B76
Signing time: Tue 12 May 2026 19:00:38 +0000
Manifest this update: Tue 12 May 2026 19:00:38 +0000
Manifest next update: Wed 13 May 2026 19:00:38 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: NqO73ojBRZeKBgdk65CeVHGCZiZaCGntwMxLjbakWjY=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:08:26:f0:31:37:a8:59:35:67:ec:8c:0d:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: May 12 19:00:38 2026 GMT
Not After : May 13 19:00:38 2026 GMT
Subject: CN=1c9a6c1d1f3b1ad285d800d0f558c23c537d066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:79:b6:5a:8d:4e:2b:80:10:ab:07:27:e0:
78:f8:45:b1:01:6c:fd:81:b0:c7:f0:64:3c:87:72:
98:46:3c:a1:62:92:bd:b1:7d:29:f5:44:8f:d3:d5:
ac:6a:e9:77:35:ca:48:e0:a8:f8:e8:85:bb:9f:62:
7a:61:51:15:79:bf:5c:34:af:bf:ca:d2:0b:0c:9b:
32:60:fc:77:42:96:96:83:58:f5:54:33:75:26:8c:
8f:a6:7d:b8:27:33:71:af:92:c0:2c:0f:b2:b5:20:
48:22:fa:46:21:0c:04:c8:56:7e:b2:62:13:96:bd:
bb:11:4e:c5:26:07:3b:5c:7b:50:10:d2:92:6f:dc:
93:a9:4e:66:ef:67:2f:3e:b7:b4:32:33:cf:76:ea:
59:49:fe:72:12:96:4a:4e:03:78:9a:e1:44:9a:d0:
ec:41:e8:91:9f:cd:79:20:b6:66:db:dc:52:5a:05:
07:06:1e:70:90:9b:8f:3e:46:7d:a9:fc:18:a5:f0:
c1:fc:42:11:0f:55:87:59:19:22:42:16:44:64:f5:
df:2b:c0:4a:c5:57:71:51:cb:01:f0:53:62:ec:88:
78:5d:49:1f:1a:f4:b1:80:3a:fd:1f:51:02:01:bb:
35:81:c5:11:bc:1c:42:c2:6d:70:11:32:85:d4:58:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:6C:1D:1F:3B:1A:D2:85:D8:00:D0:F5:58:C2:3C:53:7D:06:6A
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:41:c1:f1:11:37:f4:55:f5:2f:cd:0f:37:b9:20:c4:85:c3:
56:b6:bd:4f:f5:2e:ff:de:3f:d9:3e:bb:00:1e:23:aa:42:6c:
03:89:2e:c8:2e:3a:3a:40:bf:80:13:17:32:34:a3:0f:37:eb:
85:b4:55:ae:40:9f:57:4f:c2:b5:f3:27:cb:77:bc:c8:16:3b:
1b:6a:f7:d2:fb:99:80:e2:3b:89:a2:2e:b0:7f:0b:c5:6f:76:
4c:a7:7f:3c:b4:20:4b:d0:60:a7:e2:88:1d:5d:68:25:2b:07:
61:e4:2c:21:74:49:38:ff:27:7f:c4:58:ca:39:44:9e:bb:45:
07:91:4b:53:a1:4b:ca:e9:95:73:7c:fb:40:72:a9:6b:3c:b0:
f4:a8:80:10:16:5f:24:8f:bf:2f:34:2d:5a:16:18:65:c7:70:
ce:1b:27:0e:a4:e0:70:1d:c2:fb:57:aa:52:1f:3d:ac:e1:73:
e7:eb:f9:ec:25:bd:d7:19:78:2f:9b:09:0b:4e:47:c4:dd:d8:
07:88:eb:60:3b:cb:da:43:2f:42:4b:e7:85:1e:1d:ff:7a:55:
e9:bf:a5:48:31:44:f6:8b:94:7b:61:d2:54:88:32:b9:8a:52:
11:31:ec:50:d4:49:99:0d:87:21:ff:b4:a5:30:9d:b6:48:58:
a0:c4:fb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:19 2026 by rpki-client