Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: 9XU79GPqmyJVWhs5kAIAykVBBiy7iPYrAEbpoYY5WiA=
Subject key identifier: D7:BA:D8:D7:3A:7A:77:B6:D5:AF:70:1A:7E:D5:10:5D:B1:8D:AE:03
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019E1E360B54049AD1A18920337F9D34DF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 166E
Signing time: Tue 12 May 2026 22:01:58 +0000
Manifest this update: Tue 12 May 2026 22:01:58 +0000
Manifest next update: Wed 13 May 2026 22:01:58 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: lEfmJecDIxUXP4Q5rDW6TyieA2iDyG0OweH1whpB4d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:0b:54:04:9a:d1:a1:89:20:33:7f:9d:34:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: May 12 22:01:58 2026 GMT
Not After : May 13 22:01:58 2026 GMT
Subject: CN=d7bad8d73a7a77b6d5af701a7ed5105db18dae03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:21:d4:99:fd:42:a3:fc:71:6e:ba:a3:81:
b5:fb:84:75:02:8b:56:9f:98:d8:6a:22:5d:40:69:
9a:45:86:c9:63:56:cc:78:00:35:47:57:97:06:c6:
06:8f:8c:80:03:4b:84:02:7a:8f:85:b7:fe:de:d5:
d6:b7:e8:40:7f:67:d7:53:b1:10:31:53:7c:f4:76:
13:40:35:3b:76:e3:44:42:b6:b4:30:96:2f:93:03:
4a:3f:a3:94:da:5e:fc:f1:2c:50:26:85:6c:23:8e:
2f:49:b7:b9:12:08:53:4c:13:2f:7c:3a:4f:d1:19:
24:9c:ae:fc:a7:9b:6a:da:8e:5d:76:46:50:9c:e3:
62:9e:e2:5e:8c:6c:68:12:f1:83:ea:b7:74:04:3f:
19:3b:8a:22:c1:8b:7f:de:a5:59:ee:43:6c:ee:ab:
4f:13:80:33:44:e4:4d:44:a2:a6:1d:7c:fc:94:ef:
dc:08:77:5f:03:b5:f5:8d:51:5b:92:d1:a6:a5:09:
17:b4:38:61:34:89:50:16:91:e9:f0:65:83:b1:e8:
1f:08:e0:ef:a6:7a:a5:70:f3:0b:a0:e0:b6:a6:fa:
6b:7e:dd:10:b1:02:ff:98:cf:be:23:ca:ca:68:3e:
cc:73:cf:e1:16:ff:97:03:ca:bb:9c:6e:16:07:4f:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:D8:D7:3A:7A:77:B6:D5:AF:70:1A:7E:D5:10:5D:B1:8D:AE:03
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:94:4a:f5:a3:75:23:17:d3:48:9e:76:5c:2b:50:4e:86:84:
b7:c6:a1:88:cc:6b:ca:d4:47:63:17:11:89:b7:ad:5e:1b:2b:
99:e2:66:22:ab:dd:87:b3:95:a5:a3:03:e2:b4:61:e3:2a:2c:
57:1c:24:ac:ab:b9:65:07:fc:b9:d4:5a:8d:fb:94:3f:cf:72:
d7:26:dd:79:cc:48:6c:be:82:e6:cb:13:20:75:86:b4:e1:ba:
9d:62:eb:48:e5:0f:e4:ba:56:45:34:f6:a6:7e:e3:5f:12:ac:
ec:2b:ec:6b:42:cc:3d:e4:27:7e:c1:c9:79:1d:35:ca:ba:d0:
49:9a:6a:15:55:92:c5:91:bc:9e:e9:12:1e:5a:8d:76:18:f9:
2d:ed:4a:c2:d3:d3:30:cc:df:c8:45:62:b8:37:86:68:71:18:
6d:7d:74:87:1a:3f:4a:2b:0f:54:ac:5e:b3:7f:cc:31:50:d5:
3c:65:ed:fc:22:42:ef:7a:ec:b3:d9:b4:ca:b7:f9:4e:a3:7f:
5c:22:6c:d6:da:9d:2a:a0:d3:de:12:67:53:ad:32:b5:31:44:
32:6e:ab:3f:d1:52:13:80:22:4e:71:90:94:04:c9:2e:c4:69:
3a:e3:60:21:47:c5:b3:86:68:6b:71:37:7e:0c:2e:8c:09:e1:
7c:43:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:39 2026 by rpki-client