Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: 8nRzWbWup78bscEow3NrcJCTtOC1HCxUcpmmrdKwWRQ=
Subject key identifier: 7F:61:B6:AA:E1:6B:DD:50:6E:0A:25:FB:17:67:85:CE:45:FD:84:77
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019E20C8053FA038158BA81DC51BFB803CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 10:00:39 +0000
Manifest this update: Wed 13 May 2026 10:00:39 +0000
Manifest next update: Thu 14 May 2026 10:00:39 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: fF94d0Y9FXSfB9uW5sWwpdIiD3TqIgby23w6K8JCCcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:05:3f:a0:38:15:8b:a8:1d:c5:1b:fb:80:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: May 13 10:00:39 2026 GMT
Not After : May 14 10:00:39 2026 GMT
Subject: CN=7f61b6aae16bdd506e0a25fb176785ce45fd8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:90:64:8e:c6:20:1b:27:47:21:65:8d:91:
ab:74:50:28:6c:b3:f0:5f:e3:6a:61:db:e7:57:c5:
99:3a:3f:27:76:17:e5:08:1f:3e:36:2f:e9:c7:3a:
3f:2a:3a:7d:31:9b:4e:6f:9f:fb:30:f6:71:41:33:
3c:7f:3d:f7:e6:a2:74:fe:54:6b:99:15:27:be:ab:
93:de:ee:f0:f4:73:47:5a:56:17:6e:95:85:1e:f2:
d2:00:46:c9:76:1a:32:e8:f4:4c:8f:2e:6e:08:4e:
5a:e4:ae:22:e6:31:e9:fb:0e:dc:cd:8f:10:b0:f7:
af:64:8d:bc:c1:f2:84:80:49:c1:45:03:ec:94:db:
ee:00:eb:38:8d:9c:1e:01:30:c3:7e:b5:f5:bd:fb:
7f:00:73:bc:2a:0f:79:59:1a:e7:a2:0d:96:19:26:
40:44:ae:95:06:c4:71:0e:e0:07:85:ca:88:50:3d:
00:0d:2d:8f:57:06:df:54:a8:4f:da:ff:7f:d8:22:
50:aa:c8:fa:21:68:2b:4a:2a:2c:63:2f:6c:af:bb:
08:2f:64:58:bc:37:a6:7e:36:42:34:76:4f:36:ec:
07:7e:8d:bd:8e:22:3f:44:63:51:19:cc:33:31:01:
f8:20:68:0f:de:ba:bc:f5:81:89:2b:09:35:cc:c7:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:61:B6:AA:E1:6B:DD:50:6E:0A:25:FB:17:67:85:CE:45:FD:84:77
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:77:dd:10:70:6d:1a:24:26:09:aa:4b:5f:90:1e:15:09:
5f:80:b8:55:7f:4e:50:e0:77:13:da:eb:7f:8c:06:63:a9:6b:
9f:73:c4:17:8a:79:57:90:51:a0:bc:dc:7a:0e:8d:18:46:0e:
31:5a:96:80:ef:15:54:95:7c:71:21:bc:68:98:08:d3:0a:54:
3c:3a:f0:6d:4c:c9:a0:25:87:62:f4:a8:84:72:ee:4a:73:c9:
33:71:1c:3c:7e:7f:d8:e2:c0:09:07:97:2a:63:7b:41:88:50:
67:68:c2:67:d5:10:cc:8b:6e:3a:19:8b:b0:6f:d7:2d:5a:d4:
3c:b8:32:d4:d6:54:2b:72:51:6e:21:48:ad:16:63:b9:ac:54:
56:43:c7:df:e8:8e:9c:cb:3e:79:55:71:c7:58:b9:8e:f4:dc:
7d:11:ef:84:52:b0:4d:f6:78:03:be:3e:f1:12:5e:2e:e6:d9:
56:0d:0f:d0:fa:a9:68:dc:2b:6b:7b:d8:19:7d:83:23:53:03:
50:8b:16:75:a5:6b:b9:ea:0b:61:30:eb:8e:cf:6b:39:6a:97:
ef:84:28:e6:38:58:c3:0c:4c:69:e5:b7:10:9d:11:31:d1:f0:
e4:90:f9:f1:d8:05:30:07:92:05:ba:a4:0f:93:73:58:d2:20:
bb:1d:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:25 2026 by rpki-client