Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier: bOSCG+L3run9rLKNxm/kYR6MHflBXtM/qGCpwX72B00=
Subject key identifier: 3C:02:C0:D2:80:AF:72:88:32:7C:6B:3E:32:65:8B:A2:96:79:8A:A7
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial: 019DD0BE7F604DC07970885891AD91CE04D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number: 0188
Signing time: Mon 27 Apr 2026 21:00:38 +0000
Manifest this update: Mon 27 Apr 2026 21:00:38 +0000
Manifest next update: Tue 28 Apr 2026 21:00:38 +0000
Files and hashes: 1: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (hash: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8=)
2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: 93GPmQNGFN1Jd0/jU3384qZjrlmeb3ESb9HroguP9dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:7f:60:4d:c0:79:70:88:58:91:ad:91:ce:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Validity
Not Before: Apr 27 21:00:38 2026 GMT
Not After : Apr 28 21:00:38 2026 GMT
Subject: CN=3c02c0d280af7288327c6b3e32658ba296798aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:d4:48:63:2a:dc:69:b9:1f:c0:e0:bf:6d:
28:84:df:6e:8a:2a:75:21:a8:48:cc:ab:5e:7d:92:
3a:a5:1d:f7:67:71:38:b3:a2:cd:12:bd:a3:20:75:
eb:c9:d1:4f:ba:bf:19:b5:7d:77:a9:f7:63:42:bb:
59:39:df:d3:96:00:6f:fa:fe:04:a8:f1:ae:c0:90:
67:46:92:28:21:f0:04:24:81:ce:54:c0:f8:9c:6e:
e3:37:65:fc:ee:d2:29:ce:e5:92:6c:db:b3:1e:4e:
d2:e7:c0:0d:9c:ee:f0:ac:8c:3d:5f:43:83:b1:b1:
b1:30:93:d9:a4:7b:1b:ae:6d:fb:af:73:22:1b:2a:
56:e5:0d:89:54:9b:fb:e7:3b:1f:fd:f8:91:ff:93:
d3:2f:41:e2:0b:04:86:71:75:74:41:bb:a9:99:fe:
89:ab:a2:d6:d5:14:c2:41:55:f0:9e:a6:96:c3:90:
0a:c0:af:88:d4:9f:5e:15:65:5f:c8:41:38:fe:db:
4a:ad:73:d5:2d:ca:71:13:0d:77:7d:28:30:2e:9e:
8d:6b:65:42:87:b9:42:69:f7:72:2c:51:e0:f1:b8:
8f:64:00:4f:b7:fc:3e:38:fe:96:5f:38:e1:af:e6:
b1:f9:40:e9:2e:0c:d7:ac:ae:a3:8e:67:d5:51:e3:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:02:C0:D2:80:AF:72:88:32:7C:6B:3E:32:65:8B:A2:96:79:8A:A7
X509v3 Authority Key Identifier:
keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:c6:08:83:a1:27:f2:d5:9d:59:b7:72:9c:c7:50:cd:7d:
b2:db:55:93:a3:e5:46:f9:e5:25:ee:84:39:92:e0:df:19:89:
e2:e6:3d:9e:df:45:3b:8b:87:c8:1f:91:c9:82:1b:a4:36:86:
02:6c:0d:79:98:a1:e7:b6:bd:45:07:a1:bc:8f:14:42:3b:cc:
82:59:7e:10:57:96:5b:91:b0:02:1e:e5:c2:6f:f9:16:0c:18:
41:ef:6a:5e:c6:1a:f1:84:83:28:9b:19:cd:df:59:83:b0:11:
0d:e2:d5:7e:c7:ea:5d:cc:40:af:60:00:b1:2d:7c:5a:02:08:
51:b3:11:ff:13:d9:9b:a2:25:3d:33:f4:3d:19:4d:ec:54:d1:
2e:bb:fc:ab:0a:0e:11:18:fd:08:09:86:21:1d:f1:cf:36:4b:
62:a2:fa:62:ae:68:c4:2b:bf:8d:34:6b:16:9b:87:08:5f:62:
c1:6e:c6:f6:56:4e:a6:65:de:d7:d9:96:d1:0d:b7:00:8e:b1:
3b:f0:ca:3c:f3:c8:24:51:56:4c:e5:cd:78:50:13:17:2b:8f:
a7:f3:65:7b:0a:e7:7e:69:f9:ac:6e:46:db:da:b8:38:13:3d:
34:f2:55:88:4f:b1:ec:69:09:06:4c:85:55:6d:c9:a2:91:fb:
0b:da:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:24 2026 by rpki-client