Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: QDZ4pdT3DFEOHKiAFLKLwSKi7ecfOspenSwy1bmWgkM=
Subject key identifier: CD:69:8F:46:06:C0:11:21:F2:B1:5C:20:5B:96:C7:12:D5:25:66:BF
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 019D3752661EAA4C6CB7208059004AB780E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: 6Ph7OTwTn7R5BOZ8XlW_NErMT_M.roa (hash: Xi80ayzCKRN90pBTc/TWfWw+UkNkUlSPBpPp4lAP3a8=)
2: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: 5xG4S7ol0v3SI8uE5ILrcalUFro+vi1Ur1/g9ttAfyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:66:1e:aa:4c:6c:b7:20:80:59:00:4a:b7:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=cd698f4606c01121f2b15c205b96c712d52566bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:e2:34:7b:87:05:2c:93:5e:75:b5:16:02:
3f:1e:0c:68:42:81:a3:f4:65:66:ee:75:d1:a1:a1:
9a:97:b1:33:b6:d0:12:26:e2:ed:d2:06:85:cc:e5:
04:5a:0f:ac:70:d5:78:1c:4d:68:8a:c7:e5:d0:f2:
27:16:0b:7d:22:98:5f:24:4c:f7:88:99:b8:2a:44:
50:10:2d:d4:a4:66:78:4c:ec:a3:e1:15:2b:5b:4d:
cc:81:aa:6f:77:9c:b9:09:0f:03:5c:ec:df:23:b6:
5e:81:9b:90:75:15:cb:f0:77:a5:b0:8a:83:88:0e:
a9:3b:e0:d6:2e:08:d5:17:9e:82:fa:7e:51:27:68:
93:9e:ca:2a:54:be:67:14:6c:3a:c1:8e:b2:37:70:
e6:e8:8b:38:c6:ba:c9:63:68:76:1f:1a:60:8b:3d:
70:f3:c4:a1:43:b6:a4:43:70:bb:56:da:ca:b9:3d:
89:c9:8c:5e:4d:ca:ec:d2:58:ef:86:7c:e7:99:5c:
f1:45:70:7d:97:f2:4f:18:b1:b0:8e:37:2d:44:d6:
24:80:58:3c:5a:53:67:f5:8c:99:6a:64:e2:6b:6d:
12:40:bc:ad:99:51:8e:05:b7:ef:e8:4b:d5:aa:1e:
25:b8:3c:ad:25:23:e9:40:3d:c4:f3:a3:fc:74:c7:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:69:8F:46:06:C0:11:21:F2:B1:5C:20:5B:96:C7:12:D5:25:66:BF
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d0:c2:c9:50:06:18:7c:89:ff:52:0c:2a:35:65:6f:e0:58:
e0:a9:dd:31:cc:30:10:ff:67:3e:5f:e4:4f:be:f9:43:cd:fc:
0d:c5:55:1b:09:49:6e:30:6f:0e:29:9c:a6:61:32:46:0d:b2:
f3:30:1e:d9:90:3d:e8:be:3e:2c:1f:cc:b7:d9:ce:73:e8:31:
e8:8a:d3:20:85:c0:cb:ac:d4:cb:06:40:0f:1f:b1:21:74:93:
90:90:73:f5:03:bf:82:17:a2:15:1a:d2:aa:fc:5a:32:5b:92:
bf:fc:cf:d3:b6:3e:93:e7:26:9d:32:a4:0c:2b:d3:23:99:29:
06:81:21:df:1a:54:77:ea:ab:f4:60:c2:37:58:3b:d1:d6:d9:
3a:91:f8:06:f9:bc:7f:e0:2b:78:15:d3:cb:64:c5:19:e8:15:
0b:c6:7a:54:fc:8b:cd:de:8b:dd:30:d5:0a:ce:43:6c:55:5b:
91:70:32:93:2d:3a:78:55:93:47:3c:e3:e8:b1:d7:cf:89:9d:
e1:ab:db:28:c1:b2:ff:bc:ec:f5:c8:a8:30:b1:e4:40:a7:ea:
bc:27:81:d9:b4:f4:6f:0f:5c:c6:33:fd:c0:1f:24:84:6a:80:
67:1e:51:f4:0e:fe:60:a1:1b:ef:09:42:6e:1b:66:ae:64:ed:
5c:13:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:47 2026 by rpki-client