Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: jEkaiNQkK8LWGPq9ekEm5jmdZ5XvsOPC3C603W+lpQ8=
Subject key identifier: C0:81:8B:39:DE:E9:F1:49:E0:DF:7D:30:A9:E8:6C:83:34:2E:25:18
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 01A08D1F5461D418B61BBCFD2BC80488BD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 21:00:35 +0000
Manifest this update: Thu 10 Sep 2026 21:00:35 +0000
Manifest next update: Fri 11 Sep 2026 21:00:35 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: MHeR6H42MAruXABxtVkigsuhBjHHpqObrLa+44w/InE=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:54:61:d4:18:b6:1b:bc:fd:2b:c8:04:88:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Sep 10 21:00:35 2026 GMT
Not After : Sep 11 21:00:35 2026 GMT
Subject: CN=c0818b39dee9f149e0df7d30a9e86c83342e2518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:47:fd:50:7f:e0:d9:cd:70:cd:da:07:25:
3e:30:e3:d9:02:78:64:f6:09:10:87:5b:d2:f9:ec:
87:de:73:4a:9d:c3:e9:13:23:3d:73:9d:14:33:c3:
68:07:9a:f4:46:9c:57:41:00:b2:10:39:94:0c:8f:
9e:4e:64:26:a9:80:6c:18:1d:ef:cb:1b:4b:78:da:
38:7f:fd:b5:13:42:88:ec:c1:ce:95:6a:4d:7f:b7:
9c:0c:8d:6b:63:60:e0:f6:ac:0c:a5:cb:37:cc:7b:
75:fb:5f:1a:3b:9c:60:43:b6:91:74:c6:6a:c6:af:
db:79:86:fd:e7:92:d0:1a:67:23:fc:20:58:76:19:
76:6b:f6:a0:a2:77:d6:6f:5f:28:1e:1e:e7:b4:ad:
c1:45:10:70:2d:a5:45:3d:a7:ca:92:1d:75:2c:3a:
55:ec:7e:e8:40:6e:55:2e:4e:16:6f:99:a7:91:f2:
c9:3b:cd:f9:83:2e:ba:36:d0:3c:67:2d:96:06:20:
1c:e3:c5:4e:7c:b5:39:32:20:8d:32:02:b6:87:b7:
d6:51:3b:42:6d:d4:3a:1c:c3:62:9e:d7:b0:e2:26:
b9:e0:85:16:eb:c5:71:03:70:4a:be:ea:dd:2b:f0:
1e:63:a7:de:2e:a6:d1:29:3c:38:b2:87:b2:b8:66:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:8B:39:DE:E9:F1:49:E0:DF:7D:30:A9:E8:6C:83:34:2E:25:18
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c7:d9:62:b2:39:0a:2a:ac:51:90:74:60:29:58:d9:25:b0:
04:c3:27:81:1c:47:ca:e3:3a:2c:ae:f7:87:1e:44:0e:ef:45:
6b:69:c0:c9:81:cd:86:f5:b8:60:da:05:84:d4:14:aa:23:61:
49:a5:94:19:3f:b6:62:61:c7:80:4d:7e:d9:04:50:7b:ac:70:
b1:e2:57:ab:b6:52:63:87:4e:b9:c8:ba:f1:86:29:cf:7b:ad:
0e:cd:0d:bb:21:39:3e:12:56:ec:18:ae:90:9d:53:e8:7a:b7:
93:43:c1:6c:96:61:f6:72:4b:39:04:c6:3e:70:43:81:4e:c4:
d9:ea:94:18:12:91:c7:2c:b8:6a:dd:d0:c6:36:38:e4:41:b6:
65:13:44:80:2c:99:a3:74:18:3d:f2:ff:43:e7:63:3a:ad:b7:
32:7b:34:8b:19:21:a9:53:d7:ce:5b:ef:91:a7:ee:5e:2e:b1:
c9:5d:f0:60:10:80:45:25:e0:5a:2d:ff:90:2b:b6:c1:10:1f:
f8:d5:af:6a:96:e0:3b:79:ab:f4:6e:cf:3d:b5:f3:f2:10:91:
6c:75:15:10:fd:0a:fb:dc:3f:ae:c9:5e:0e:90:91:93:05:4f:
11:f6:1a:89:8c:d5:da:54:cb:c0:6e:43:73:05:fb:33:f6:d9:
a9:79:24:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH1Rh1Bi2G7z9K8gEiL1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjYwOTEwMjEwMDM1WhcNMjYwOTExMjEwMDM1WjAzMTEwLwYDVQQD
EyhjMDgxOGIzOWRlZTlmMTQ5ZTBkZjdkMzBhOWU4NmM4MzM0MmUyNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfRH/VB/4NnNcM3aByU+MOPZAnhk
9gkQh1vS+eyH3nNKncPpEyM9c50UM8NoB5r0RpxXQQCyEDmUDI+eTmQmqYBsGB3v
yxtLeNo4f/21E0KI7MHOlWpNf7ecDI1rY2Dg9qwMpcs3zHt1+18aO5xgQ7aRdMZq
xq/beYb955LQGmcj/CBYdhl2a/agonfWb18oHh7ntK3BRRBwLaVFPafKkh11LDpV
7H7oQG5VLk4Wb5mnkfLJO835gy66NtA8Zy2WBiAc48VOfLU5MiCNMgK2h7fWUTtC
bdQ6HMNintew4ia54IUW68VxA3BKvurdK/AeY6feLqbRKTw4soeyuGZedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCBizne6fFJ4N99MKnobIM0LiUYMB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsfZYrI5
CiqsUZB0YClY2SWwBMMngRxHyuM6LK73hx5EDu9Fa2nAyYHNhvW4YNoFhNQUqiNh
SaWUGT+2YmHHgE1+2QRQe6xwseJXq7ZSY4dOuci68YYpz3utDs0NuyE5PhJW7Biu
kJ1T6Hq3k0PBbJZh9nJLOQTGPnBDgU7E2eqUGBKRxyy4at3QxjY45EG2ZRNEgCyZ
o3QYPfL/Q+djOq23Mns0ixkhqVPXzlvvkafuXi6xyV3wYBCARSXgWi3/kCu2wRAf
+NWvapbgO3mr9G7PPbXz8hCRbHUVEP0K+9w/rsleDpCRkwVPEfYaiYzV2lTLwG5D
cwX7M/bZqXkkwA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:10:20 2026 by rpki-client