Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: SgaFfHJXY1LoKCCVbNi6hrZWfLcu0NWNj3Vifl1FQA4=
Subject key identifier: F5:E5:2C:41:06:C1:C0:38:15:EC:5E:84:E7:26:CB:81:03:91:57:18
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019D28BBDB45E2F063C89842A7F42BC73230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: GXhFfzPpIHoP7RLYcFMqTWluEZ0.roa (hash: Yx/Lhj5zxPnVZAFBihFZiUuZcLJQ578c7k6Oe82WcJ0=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: VSDzeOTRg8bJHDUd6FOqbH0UC7gx/8nb+pgI/kb+1yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:db:45:e2:f0:63:c8:98:42:a7:f4:2b:c7:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=f5e52c4106c1c03815ec5e84e726cb8103915718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:47:e5:cd:90:0f:08:ba:36:62:23:3c:f6:
3c:86:92:3b:6c:56:71:16:5a:cc:f9:6a:4b:0e:56:
9f:71:a8:b8:a8:62:fd:60:04:7c:81:b8:0a:7b:c1:
b5:ba:ef:6b:52:96:63:3f:92:2b:1d:5a:b5:d2:2a:
70:0f:f2:46:68:9b:1d:66:15:89:20:dc:6c:60:a0:
4c:dd:e3:59:0a:16:c8:c4:e3:cd:30:97:53:ae:7c:
43:db:51:8e:40:3c:4a:d2:27:ba:5b:ed:65:d2:ba:
52:c3:01:93:e1:1f:17:b0:66:55:79:6b:e6:68:15:
8d:ed:04:44:86:b7:d7:13:64:c6:79:3d:97:9f:74:
e7:56:87:51:0a:c3:50:13:10:3b:23:36:01:2f:1f:
5e:b4:19:da:ee:4a:15:aa:f3:bc:ee:1e:3e:34:a7:
79:01:bc:4e:f8:fa:cc:df:73:ea:58:41:f6:38:d2:
b6:26:d8:dc:54:d8:a9:b9:d3:6a:3e:88:79:77:52:
6a:d3:eb:c1:d5:f6:a1:e5:b9:b5:9c:79:10:59:b0:
94:7f:a8:10:b1:2c:3b:ba:34:c1:1b:72:47:33:ad:
02:c6:ad:4e:71:2c:38:f5:d5:e2:29:90:f6:57:29:
3a:98:d3:0b:e6:d5:8b:a6:f5:79:06:1e:12:be:a5:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E5:2C:41:06:C1:C0:38:15:EC:5E:84:E7:26:CB:81:03:91:57:18
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:25:fa:45:29:f9:4c:d2:60:8a:31:fc:a8:fa:4b:b8:3a:
28:35:66:97:3f:46:74:61:d5:57:a2:d7:07:f1:b0:95:a3:08:
bc:43:83:a8:60:7a:90:9d:de:b2:87:23:06:f4:44:b0:9a:c5:
8c:85:da:18:ce:f6:9d:37:7d:74:e4:3c:74:e1:a9:47:c1:28:
c0:9d:ff:46:43:5f:fc:f8:3f:70:a8:ba:4a:cf:80:bb:4b:64:
31:0e:1a:e0:3f:b7:92:a0:59:8b:5c:38:72:20:bf:5a:6e:cb:
53:73:ef:cd:f7:ff:72:cc:0e:fa:29:90:11:29:ea:f5:aa:19:
c9:1f:cb:c5:70:48:b7:63:5b:d0:35:96:4b:9b:b5:20:bb:c5:
1d:ae:5e:49:4f:09:60:fc:d3:40:c9:c9:60:22:69:4c:d8:fe:
ea:77:a9:68:ea:b0:d8:00:31:b1:65:32:b4:3f:58:7e:ef:9d:
51:91:8f:5b:68:c9:04:ba:c4:5c:22:b7:35:70:88:34:a8:e2:
5d:ac:0d:6d:74:d9:51:10:f6:bb:52:22:36:d1:85:77:cb:4b:
1e:fb:bd:18:81:f0:30:77:a0:17:6f:03:7d:16:01:2c:15:1f:
ce:af:c5:9b:12:2e:1e:b9:3d:20:f4:15:0a:d1:2c:a4:fb:b7:
c5:b6:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:29 2026 by rpki-client