Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: It88FZZitF3n0jMiL03DtUyb8ngDiT7NJG6IaGZEQ3Y=
Subject key identifier: DD:67:6F:89:EA:33:91:C7:56:A9:C3:96:EA:93:09:58:F9:65:84:E0
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019E34189EB2788D1226489B706DC7AA5117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 07C5
Signing time: Sun 17 May 2026 04:01:29 +0000
Manifest this update: Sun 17 May 2026 04:01:29 +0000
Manifest next update: Mon 18 May 2026 04:01:29 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: OikZyh8ocvBcz+1QzpBGMMWmVXpVco55wLT8fur52CA=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:18:9e:b2:78:8d:12:26:48:9b:70:6d:c7:aa:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: May 17 04:01:29 2026 GMT
Not After : May 18 04:01:29 2026 GMT
Subject: CN=dd676f89ea3391c756a9c396ea930958f96584e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:2d:ea:27:86:fb:fa:09:fa:ac:a9:0e:59:
3b:5c:23:41:63:ce:7a:fc:5c:2a:66:75:19:a0:b4:
c7:3a:ad:0f:b7:af:77:46:07:59:17:f5:ab:64:66:
96:19:1a:ed:e6:23:b4:3c:cb:99:ad:10:56:88:1d:
92:03:b6:b7:da:cc:f9:64:b2:5d:e1:f1:5e:55:8b:
c4:56:f3:40:35:3f:6b:f9:2c:54:2b:8e:35:a5:f0:
16:85:a4:5d:97:a1:84:6b:61:42:7d:b1:8d:be:5c:
7a:1f:23:b4:82:42:f9:5e:81:02:70:a6:97:d9:4b:
d4:54:16:cf:49:17:61:26:57:3b:a1:55:5b:c9:92:
a9:cd:d1:20:a6:e9:d4:67:4d:e2:b7:4b:54:5f:1e:
f9:02:19:2b:5b:0d:96:b8:e7:ac:c0:73:29:0c:ed:
82:75:00:68:a7:36:e2:9d:0e:32:11:ff:d2:5b:d1:
39:ab:d6:e8:49:41:06:2a:29:07:d1:cb:a6:69:07:
b1:74:3e:62:d5:5a:84:ca:86:41:79:b7:b6:16:fc:
1b:4a:ac:40:72:87:32:07:7e:18:68:f5:75:97:04:
9d:2e:45:1b:66:58:c2:72:51:87:7d:01:c3:48:ad:
91:cf:61:cc:47:57:4a:fe:a4:eb:fd:ab:2b:a3:ce:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:6F:89:EA:33:91:C7:56:A9:C3:96:EA:93:09:58:F9:65:84:E0
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9e:24:1e:8a:67:a0:fe:5c:3c:a0:01:82:3f:71:14:64:85:
52:2e:97:e8:3a:ff:77:72:1a:66:5a:6f:af:c3:47:20:dd:00:
ea:0c:a3:74:73:23:9e:cd:07:2b:cd:ef:3d:61:15:36:07:07:
3f:28:b5:89:89:79:a8:2b:74:13:e6:fd:5f:1c:4e:7e:db:0e:
37:cf:79:36:38:43:df:ce:2b:62:cc:b6:bb:11:c4:3b:5b:b1:
57:b0:2c:24:fc:15:72:d4:72:2c:75:c9:1b:9c:8d:ce:c9:b9:
eb:6b:2d:ff:dc:d7:ef:24:65:19:89:3b:59:ad:73:79:6a:db:
03:d2:8c:6e:aa:94:22:de:7c:8c:fd:4e:e9:04:f8:a2:8f:2c:
f9:a6:8a:e0:45:b1:25:37:da:51:91:17:10:cb:84:9b:f8:01:
01:34:57:0d:e0:61:d1:61:63:51:4c:e4:56:b4:e6:ac:a7:38:
24:5f:54:34:c6:c5:f1:77:51:72:b4:33:57:b3:ec:02:4b:de:
7c:2f:5f:60:e2:df:8b:10:2a:04:39:0f:a7:6f:a4:b2:57:55:
84:71:f3:3f:99:c8:2f:02:3a:4e:80:f9:2d:2c:db:88:8b:62:
d8:a0:ad:9f:28:f3:1b:4d:07:ea:56:1d:09:6d:9a:ba:40:61:
72:45:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 14:07:08 2026 by rpki-client