Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: nYKUyJW+sFV9fllU+2HjIBDFT28e+/a9imSamHQsclw=
Subject key identifier: A6:4E:D4:1A:7A:9B:DC:C7:1A:1F:1B:1B:C7:FD:0A:42:D4:3C:B3:07
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019D2511889CA91AB9A21DE2B4A719B117E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0AF2
Signing time: Wed 25 Mar 2026 12:56:39 +0000
Manifest this update: Wed 25 Mar 2026 12:56:39 +0000
Manifest next update: Thu 26 Mar 2026 12:56:39 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: ptUqR15swTMZBoMcEWORfi05iOvbNn+xJHmdNkmzebU=)
3: bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa (hash: TI3RmrhW13Nq6yDFyJTeXpPjioYudBC6EapBtlWy/gA=)
4: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:11:88:9c:a9:1a:b9:a2:1d:e2:b4:a7:19:b1:17:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Mar 25 12:56:39 2026 GMT
Not After : Mar 26 12:56:39 2026 GMT
Subject: CN=a64ed41a7a9bdcc71a1f1b1bc7fd0a42d43cb307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:92:d8:cc:1a:b3:22:2c:92:2f:ee:ff:05:
73:3a:e6:a4:2a:71:3a:24:2d:b8:41:0e:56:ad:91:
aa:9d:82:07:65:03:03:45:23:c7:95:86:7c:59:85:
b8:c7:07:1d:da:bb:22:34:0a:b4:fe:8b:12:4b:6e:
f5:ca:4a:2f:61:cc:24:20:29:e2:9e:fe:86:cf:e6:
b8:d7:bf:55:2b:e0:a3:a8:71:74:47:27:5c:12:93:
8f:ef:38:a2:63:6e:f6:87:3f:ef:df:38:f7:5b:b1:
10:fb:95:c5:95:bd:5e:f8:6e:3c:40:5b:36:0a:a6:
9b:a0:d3:d5:3c:de:47:fd:6e:cf:0a:d4:76:c7:2e:
42:f9:aa:5d:6c:f6:df:77:d2:a9:00:e4:8f:64:03:
1d:da:49:9e:29:0d:b9:d5:e3:71:a0:a5:52:c2:48:
18:78:31:c0:3f:b9:e0:94:9e:05:51:26:e3:3e:1a:
a2:bf:51:26:4c:20:ad:93:8e:37:ba:85:49:68:1a:
86:8f:56:75:95:8b:bd:9d:a1:f8:6a:c2:f2:c5:b8:
1d:ba:3b:fa:e6:4b:03:ee:d8:f3:8b:d7:34:de:2a:
08:f6:8c:26:56:09:2e:6f:ac:60:e4:8e:e3:52:b8:
ee:d3:9d:36:31:77:4a:df:3f:f9:64:4e:4d:38:ef:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:D4:1A:7A:9B:DC:C7:1A:1F:1B:1B:C7:FD:0A:42:D4:3C:B3:07
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:92:93:58:e3:f3:7b:7b:a3:aa:f3:c1:fc:88:d9:29:d2:
03:2c:aa:9c:30:76:1e:17:92:e1:e1:3c:21:b7:39:36:76:9c:
7d:3d:58:22:b7:b4:9b:83:e4:b8:1e:57:c2:ad:e8:70:92:6a:
ec:06:4c:a7:49:5f:17:28:f5:8d:73:24:fc:62:78:09:8d:74:
95:6f:d7:3a:f1:04:f3:4e:8b:e1:89:e0:50:3f:ad:c1:e4:fc:
6d:e2:b8:e3:2f:44:f9:e1:cb:e9:b8:f0:ed:0d:63:97:d8:72:
30:a5:8f:03:b2:d7:39:f5:8f:86:a5:93:d7:4f:71:b0:21:2c:
d7:99:0e:8d:b0:dc:8d:8c:42:28:77:a0:b7:ef:45:bb:3b:d3:
62:62:69:9e:68:e6:ea:33:c4:a7:56:48:21:f1:67:a6:2f:57:
fa:6c:6b:aa:5e:aa:e7:c7:fe:6b:7a:66:9f:b0:94:4e:71:b2:
e9:f0:6e:84:6d:e7:d3:ca:15:a3:13:ae:5f:d4:7e:00:31:b4:
dc:3d:6f:d6:a1:f1:ef:cf:b2:bf:c7:6c:fa:f2:57:f4:96:3f:
66:26:34:1e:5d:0a:09:e5:da:7b:e7:0e:1d:27:16:52:3d:5f:
79:10:8a:29:69:7c:c8:b0:27:f5:c9:4c:b3:1e:89:bf:6b:d2:
ea:16:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:43 2026 by rpki-client