Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: J0CwJEbqYQQOpSCEZzVQLg1KXrkcEa3VmZnkTfSEJx0=
Subject key identifier: DB:2D:3C:45:4B:93:AF:99:15:D7:62:1B:98:42:76:9F:64:1A:84:5D
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019E22B7271F04194B16C33F0FBAF3B43D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 19:01:28 +0000
Manifest this update: Wed 13 May 2026 19:01:28 +0000
Manifest next update: Thu 14 May 2026 19:01:28 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: 0ZiYMLxr5GwWp+fJ+NoWbjhbzaLZkP5EmkbZ4Y0lwEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:b7:27:1f:04:19:4b:16:c3:3f:0f:ba:f3:b4:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: May 13 19:01:28 2026 GMT
Not After : May 14 19:01:28 2026 GMT
Subject: CN=db2d3c454b93af9915d7621b9842769f641a845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:0b:c5:0f:50:4e:74:09:c8:8a:49:7d:f1:
16:31:8a:3c:2b:d8:9f:73:9f:01:c3:5b:ab:50:e9:
21:8c:05:3e:f4:62:a2:11:81:15:52:29:41:4e:58:
aa:b8:cc:60:c3:49:2b:ea:43:81:79:fd:aa:0b:a3:
25:c1:a3:ea:87:0c:4d:37:0c:96:d6:4b:2b:10:84:
7b:e4:68:df:b6:a3:44:58:f6:ab:44:c4:43:c1:c7:
2a:ce:e7:5c:23:04:5f:8d:f0:61:66:18:ad:c1:25:
3c:d1:50:eb:b1:94:bf:ea:d0:f4:91:a3:9d:da:aa:
a9:a6:96:fc:11:0a:e5:09:c2:fd:5b:85:73:5d:01:
11:23:7f:1d:2e:c6:08:ad:be:60:74:a7:9f:2d:1b:
1a:77:99:9b:c9:ee:71:6d:74:84:ef:d2:e0:8c:d9:
e7:ad:67:b5:54:85:28:a0:8e:1f:b7:c4:92:e4:f4:
e4:80:3c:76:d8:8b:d7:76:af:38:c8:e2:a7:83:ca:
b6:27:4a:5d:c0:9a:1f:bc:ad:86:fc:fd:a1:9c:d6:
cc:fc:35:1a:67:e9:e4:1c:c3:e8:96:28:97:e7:4b:
3b:14:9b:92:80:d2:71:2a:e1:e8:21:95:46:47:52:
1a:2c:0f:37:ea:e8:be:ef:70:d0:c4:95:db:25:18:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:3C:45:4B:93:AF:99:15:D7:62:1B:98:42:76:9F:64:1A:84:5D
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:28:63:d8:42:11:56:aa:eb:59:83:fc:2e:62:2e:61:02:12:
05:f4:88:0d:a9:d6:08:ad:d5:ab:83:86:04:ae:75:95:67:5c:
0b:d1:e9:d6:b4:44:84:c5:42:73:3b:39:ff:d1:a4:f3:fb:03:
27:f5:e9:3d:94:a4:c4:4b:5e:bd:f3:f7:d5:30:a3:a0:a9:67:
8c:76:5a:08:43:4f:8d:00:e2:ca:01:c2:62:42:fc:f9:62:2d:
a4:74:b4:ce:b1:65:4d:46:19:49:a0:9e:0b:07:3a:c9:a3:3c:
c9:33:85:32:7e:17:2a:2c:20:c0:be:ae:42:74:97:09:ec:fa:
f5:e1:59:37:ac:b2:b8:88:0c:96:ef:fa:7f:da:64:ba:b0:a3:
9e:37:d2:cb:47:e3:2d:0f:7c:54:cb:56:42:3b:76:d6:01:66:
53:ef:86:28:67:21:a5:0d:0d:86:0a:15:80:f5:33:b8:51:51:
c9:89:ba:08:5d:c2:8b:ac:46:9e:d8:43:4f:16:93:3a:15:af:
9e:87:d4:40:e5:70:88:84:e8:8f:36:6b:e5:cc:1b:25:16:45:
23:cd:22:4b:8d:58:e1:6c:d8:43:65:fe:9c:49:74:36:d1:ec:
6a:ca:9a:c9:bd:9d:65:f7:f4:b2:d5:6d:9b:9f:26:d7:9d:23:
49:18:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 01:49:57 2026 by rpki-client