Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
File: TKha1Dt7R-dSh4MHGEeU1woCdmw.mft (raw, json)
Hash identifier: Nwd9Umv2O+WE5ZSigKxVnXRpaARYsyVBj9M9Y8WLQsk=
Subject key identifier: 9C:39:FB:41:29:B9:DC:AE:9E:04:76:B3:56:F1:23:AF:F9:56:BD:74
Authority key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
Certificate issuer: /CN=4ca85ad43b7b47e752878307184794d70a02766c
Certificate serial: 019FD271F3DE5EB0628ECEBCB710B82DC2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
Manifest number: 056E
Signing time: Wed 05 Aug 2026 15:01:51 +0000
Manifest this update: Wed 05 Aug 2026 15:01:51 +0000
Manifest next update: Thu 06 Aug 2026 15:01:51 +0000
Files and hashes: 1: 1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa (hash: SZE3EWQBz3QYJjq31FoNPzS9VUyILcF5vCKxR6HmvGg=)
2: TKha1Dt7R-dSh4MHGEeU1woCdmw.crl (hash: 8W5CyF117jMM2pKAj0k3LXiQIWsSJXVdp9Hq4yJHKRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:71:f3:de:5e:b0:62:8e:ce:bc:b7:10:b8:2d:c2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca85ad43b7b47e752878307184794d70a02766c
Validity
Not Before: Aug 5 15:01:51 2026 GMT
Not After : Aug 6 15:01:51 2026 GMT
Subject: CN=9c39fb4129b9dcae9e0476b356f123aff956bd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:2c:e2:96:69:96:9f:cd:3b:54:eb:f8:b6:
6a:65:db:c9:99:82:27:6b:7b:d3:75:85:9c:11:72:
99:ae:e6:c4:39:92:c8:4f:8f:13:aa:76:08:c9:37:
42:5f:d3:e1:c4:4d:ae:81:58:a2:c0:f0:51:81:c3:
b7:d9:53:7b:c6:46:8e:22:ef:f2:f9:f8:28:c2:da:
f3:83:12:3e:89:6a:b0:89:82:ce:76:24:8f:b6:cd:
f1:fc:eb:1f:39:41:81:85:1f:d6:0d:f0:d1:d4:39:
f8:4e:4c:b6:d2:6e:d9:11:b4:bc:2a:db:b7:42:40:
74:a7:82:3b:de:6b:ab:c1:77:8f:d1:a1:93:9f:9e:
de:3f:f0:88:ec:d5:b5:2d:b9:74:0b:e4:d9:15:f3:
c8:6d:97:81:ac:29:76:20:cf:81:05:2b:50:8d:bf:
64:a6:87:83:11:b8:63:a8:50:70:32:00:56:05:12:
e2:30:78:d8:bd:e9:7d:97:8e:48:93:12:64:d0:53:
db:74:20:5f:79:52:0d:78:43:69:96:8d:5a:5a:e0:
f8:ac:06:09:40:56:a9:f6:6d:9f:47:f2:9d:9b:6f:
69:4b:8e:9b:00:5e:d4:b1:52:ed:78:d0:76:e5:df:
2e:7d:e5:60:9c:05:15:de:ad:90:d1:44:71:7b:78:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:39:FB:41:29:B9:DC:AE:9E:04:76:B3:56:F1:23:AF:F9:56:BD:74
X509v3 Authority Key Identifier:
keyid:4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:60:3e:ef:59:35:1c:5f:cb:21:6d:23:1c:49:b6:6c:eb:
94:4d:b5:81:42:ef:00:5b:57:0b:f0:85:d5:3f:c6:83:34:19:
d5:d2:cd:dd:d5:c2:5e:02:37:95:05:a7:b3:df:e7:ed:a4:03:
f7:60:98:1e:14:ad:1d:d1:05:1b:78:d8:13:0d:b3:45:f1:51:
43:5e:3d:a1:25:6d:85:f7:48:d4:47:cb:ef:1c:dd:d9:8a:7d:
d4:f2:74:fc:2c:27:8b:3c:76:a6:e5:f0:a9:01:1f:11:08:8e:
1f:b4:10:ef:0b:b7:f9:30:7a:cc:86:72:21:fb:94:68:27:04:
6c:26:44:e3:3c:ed:46:eb:03:41:ca:34:fd:38:d9:37:9c:67:
2f:32:6b:41:c0:d1:af:18:8a:81:7a:f1:d4:5f:40:42:d1:47:
5c:e0:95:5e:4f:65:56:56:91:1e:35:c8:32:33:54:c7:eb:fd:
59:52:0d:7c:75:fb:95:8e:9d:b1:26:c9:ab:65:11:46:54:66:
10:08:ee:85:53:a2:fb:77:8a:f9:6e:e2:07:a6:ce:27:fe:76:
7b:f7:b2:74:c6:27:10:2a:7b:5d:79:5a:0d:92:1e:fc:87:f9:
49:4d:1a:a0:a2:81:e0:c6:45:ca:db:49:49:e0:8f:e7:92:f6:
23:7d:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:02:47 2026 by rpki-client