Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: DG6csHU+snPCYSXoYepg9D6xTfH5/dkvh6wDqRrxUiE=
Subject key identifier: A6:7D:22:F7:B5:C2:FD:86:95:59:5D:C1:84:10:56:55:C3:37:03:9B
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019E20FFA3F0BA08CC0D15E1DC11167D0A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 11:01:25 +0000
Manifest this update: Wed 13 May 2026 11:01:25 +0000
Manifest next update: Thu 14 May 2026 11:01:25 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: 5yIW/QVqoZclhrDk6Z2ZTATyu/8jDxyq4jVknaIVgew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:a3:f0:ba:08:cc:0d:15:e1:dc:11:16:7d:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: May 13 11:01:25 2026 GMT
Not After : May 14 11:01:25 2026 GMT
Subject: CN=a67d22f7b5c2fd8695595dc184105655c337039b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:71:f5:38:7d:50:fa:94:8c:80:20:5a:54:
fe:86:52:98:26:42:93:c7:c6:38:6a:7c:39:06:8d:
85:b5:f8:54:34:a0:5a:49:ea:93:cd:13:4b:b1:a4:
51:ef:98:27:27:ec:8c:a8:d0:db:c2:83:ec:a6:61:
4d:ab:ec:19:5f:62:b6:9a:80:97:e6:6b:3e:2c:63:
68:30:e8:37:f6:a2:5e:7f:78:e6:95:fd:80:bb:10:
55:1f:91:c6:5a:54:c3:26:4c:45:b6:c4:b7:7a:bc:
3b:83:23:75:0b:84:55:f1:50:51:cb:d0:f2:51:b0:
46:e6:a8:da:e2:d5:1e:f5:20:1c:e8:12:38:77:e6:
9f:3a:6b:a0:49:1a:f7:ba:01:ac:8f:72:ad:a2:17:
1d:2f:48:3a:1e:90:5f:16:cb:02:93:e0:74:dc:12:
8e:61:de:8b:b9:68:05:b5:41:0e:ea:31:f7:2a:2e:
41:c6:58:83:05:60:20:a3:fc:ee:19:d9:ec:6a:de:
fb:40:c9:b1:c6:df:09:2b:c6:83:14:e8:ea:a7:0e:
58:de:b9:81:cb:a1:14:bf:21:ca:27:ce:ec:ce:51:
2d:cc:90:ec:5c:9f:f2:07:85:a3:82:6f:81:01:96:
d6:e4:30:05:19:a5:f6:30:48:29:7e:32:5c:ff:2d:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:22:F7:B5:C2:FD:86:95:59:5D:C1:84:10:56:55:C3:37:03:9B
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:d1:bd:c7:01:2a:ea:c4:92:3e:87:4c:1a:e3:e4:46:c4:
2b:e3:1d:0a:d0:a7:0c:19:ed:0f:bb:b8:4a:1f:4b:6e:8a:52:
f2:20:7f:9d:10:3f:a4:6d:d8:fe:e7:b4:cd:82:a6:34:88:64:
14:ed:83:c8:91:6d:e8:ff:f4:fe:3c:c6:64:d6:28:26:ae:de:
60:17:d6:8c:aa:4e:de:51:43:37:af:58:7f:9c:31:85:81:f0:
d0:07:00:ec:fc:d5:06:a8:0e:13:cc:86:bb:11:ae:f6:9b:d5:
b2:14:5c:f2:42:20:7f:db:85:44:ff:8e:f0:a5:b9:2d:4a:4d:
ba:1f:50:b7:f6:b7:20:fd:88:58:31:56:f8:9a:26:fc:d2:50:
3a:25:54:00:39:6f:38:81:d8:17:11:f8:80:4c:29:c5:0b:45:
4b:2e:97:a4:54:70:e5:f2:0c:52:0f:39:0d:ab:6c:96:dd:ee:
1a:17:bb:ff:28:20:3f:97:15:8c:e3:15:36:c9:e9:1e:fa:f6:
25:90:86:81:66:27:ee:e1:67:3f:85:ff:c5:07:80:cf:01:93:
42:0f:c8:5a:88:35:e7:ee:39:cd:18:da:0d:51:a7:79:ec:f5:
19:a0:40:31:c8:4a:9c:61:c4:43:07:ba:68:7a:74:ee:fc:09:
a3:22:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:25:58 2026 by rpki-client