Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: Kri5sV7h6ynrUc6r1GVOnGHLCUOmF2LT7B1PTi4yi5E=
Subject key identifier: 5B:17:D3:62:99:D6:86:AE:D3:BA:E1:61:27:B1:DE:0C:E6:65:46:58
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019E31F2AA2441B5F5A6EBDA6E490958DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 070A
Signing time: Sat 16 May 2026 18:00:47 +0000
Manifest this update: Sat 16 May 2026 18:00:47 +0000
Manifest next update: Sun 17 May 2026 18:00:47 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: pQvj9c58BECgmVB3jHS7ikbtcebkedEnxlb9RFLbULE=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:aa:24:41:b5:f5:a6:eb:da:6e:49:09:58:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: May 16 18:00:47 2026 GMT
Not After : May 17 18:00:47 2026 GMT
Subject: CN=5b17d36299d686aed3bae16127b1de0ce6654658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:01:c0:1c:ad:c0:27:bb:94:1e:61:86:97:
09:44:f5:5d:99:bf:28:5d:10:67:d8:af:a8:fd:55:
95:2f:88:88:25:7d:e7:20:67:fb:56:f1:a5:18:92:
5c:ec:2d:0f:0e:a2:ee:42:be:ae:46:a0:72:04:95:
9b:7f:ae:00:65:0e:30:f5:85:6f:2d:83:1a:aa:43:
bd:b9:6c:0b:e9:58:f3:c5:d4:34:b9:56:f6:41:9c:
c0:16:a4:2d:f0:3a:86:8f:44:5f:18:50:6b:8e:e5:
8d:02:20:16:44:13:a2:d1:77:70:ba:28:20:3b:ac:
ed:69:b3:ca:04:40:ad:c9:12:89:a4:1e:33:b8:69:
cf:6e:45:66:08:32:49:ce:ee:8f:40:bb:a4:cc:66:
3b:e1:25:44:e3:46:cf:c5:60:ca:ac:40:60:22:18:
28:36:74:e0:02:5b:b7:a0:77:9b:fc:61:47:ca:65:
25:74:3b:8f:08:05:32:92:6d:d8:cc:3c:c3:13:37:
15:a1:16:91:c0:b3:3c:54:02:ca:81:cc:c7:b3:7f:
f0:95:2a:77:a7:98:46:46:9f:3d:7b:7d:21:61:61:
b4:b1:5d:7c:ae:99:b6:19:4e:3f:eb:16:65:e4:4a:
6e:b1:a6:ef:5f:ea:16:96:ec:eb:dc:d9:3c:ad:d3:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:D3:62:99:D6:86:AE:D3:BA:E1:61:27:B1:DE:0C:E6:65:46:58
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c3:7a:34:41:2f:ee:46:46:74:90:63:13:88:ba:16:47:17:
09:45:36:d4:f4:3e:79:d1:49:04:8e:af:49:90:6e:e3:cd:09:
14:4e:9f:9c:9d:0c:c9:58:25:9e:4f:ba:13:49:f2:23:47:62:
28:0e:28:a0:b1:54:04:97:e2:58:f7:9c:f0:24:cc:20:06:4d:
2a:ea:a8:c2:d1:f3:dd:d4:96:06:e1:9e:36:f4:91:eb:b7:73:
9e:7b:cf:38:44:79:45:c4:e7:16:6c:72:38:7e:c4:57:dc:6c:
52:70:40:df:fa:95:5c:1e:1a:ae:7f:2a:9a:e0:ed:00:08:1c:
3f:bb:5b:a1:0a:41:25:f4:13:59:9b:2b:77:c3:49:e8:0c:ba:
23:c3:41:c9:d1:a0:9c:9b:37:20:00:bb:02:ee:f6:c6:d6:9e:
71:fb:51:c1:40:28:3a:c9:30:b9:d9:10:e7:9d:a9:63:dd:15:
1b:17:98:56:f1:01:2d:90:9a:1b:d6:44:40:57:93:61:00:55:
a3:08:ab:33:82:4b:11:1b:3d:f8:aa:5a:48:38:10:4a:84:95:
5d:d0:26:91:2d:d4:60:d2:7a:80:8a:11:db:98:45:61:a5:03:
f7:3c:1e:9e:24:28:8b:17:de:c4:85:ac:75:55:08:b9:9a:f9:
ef:9b:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:46 2026 by rpki-client