Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: 1PV177uNQw3qvlffklrdgKSxp7nk7nvoLfmiQsF0ubM=
Subject key identifier: C8:22:4D:BD:33:D9:7B:3E:80:30:72:B0:5F:73:8C:5F:50:DD:F1:C6
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 01A18C0AA7D38B275E2F773A76CBBCE25BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1AD5
Signing time: Fri 30 Oct 2026 09:01:10 +0000
Manifest this update: Fri 30 Oct 2026 09:01:10 +0000
Manifest next update: Sat 31 Oct 2026 09:01:10 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: LXWBOewSRs5NsjWX3NB5LxEcaEuE8QXu9MN4FRSh+wI=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:a7:d3:8b:27:5e:2f:77:3a:76:cb:bc:e2:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Oct 30 09:01:10 2026 GMT
Not After : Oct 31 09:01:10 2026 GMT
Subject: CN=c8224dbd33d97b3e803072b05f738c5f50ddf1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:03:cb:a3:59:7d:a5:ed:ff:ae:15:48:a3:
15:12:f6:a9:8f:8b:bc:b4:17:7f:47:6f:00:36:d4:
66:75:12:19:3f:da:56:a3:86:ef:da:27:7b:4d:5b:
97:9a:91:62:55:51:8f:69:32:d1:d5:f5:6d:44:b2:
3a:80:dc:08:1d:51:bc:dd:90:e5:43:1a:09:9b:02:
22:bb:61:0a:25:5a:c2:e5:31:95:e5:80:8c:ff:0e:
30:77:c0:0c:3e:6f:ce:09:23:9a:12:71:cc:67:9b:
f6:c0:06:cf:1d:0f:1f:96:76:9e:af:79:89:2d:d8:
3f:b4:86:58:ce:29:a9:f2:63:19:29:dd:b6:07:bf:
c4:9c:87:2e:cc:33:d8:fe:cb:82:7d:4c:f1:ab:cd:
e8:ad:5b:ff:c8:34:77:b7:e3:3b:f0:15:8e:b4:f9:
f1:ce:08:5f:46:32:db:4e:e7:75:ed:58:59:2d:5e:
f1:95:5d:be:ac:f8:01:49:ff:13:f0:17:24:aa:7b:
c8:9d:86:7a:a8:7c:a1:30:d1:b8:d0:3c:78:0b:84:
37:5e:9a:5e:fe:40:47:09:59:5e:00:20:37:83:a5:
58:db:63:76:2c:d3:b1:6c:d8:df:8d:65:aa:a9:f3:
8e:2d:e6:ed:e8:78:f7:3d:c4:06:ae:3d:3f:fb:af:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:4D:BD:33:D9:7B:3E:80:30:72:B0:5F:73:8C:5F:50:DD:F1:C6
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9b:23:d8:99:d8:20:58:85:c2:4a:5b:a5:ef:7a:4c:12:f3:
69:81:22:21:fb:14:5a:1e:f1:5c:51:fd:c7:c7:27:e7:db:14:
52:cd:5e:ca:46:76:1d:38:21:d3:b7:0b:e0:5d:89:f6:ca:bd:
37:03:c7:02:f2:5b:11:b9:d7:6b:a5:b1:71:6d:fa:88:c7:13:
a8:ac:cc:19:be:1b:94:bc:c5:bc:85:d9:94:0e:c6:1c:23:f9:
d1:91:6a:d8:8b:b5:7d:89:02:70:d4:e2:ce:31:84:98:a2:4a:
19:a0:3e:6f:51:d3:5c:7b:aa:0e:c4:98:a1:22:aa:15:aa:d1:
53:ef:72:ed:f3:57:09:81:3f:fb:3e:d5:d3:08:46:bf:aa:9b:
ab:12:8d:fa:d7:33:ed:cf:18:42:f0:07:9e:d3:3e:68:79:f5:
bd:6c:36:e0:29:e0:ba:e3:53:ad:a8:47:1e:80:f6:46:90:34:
53:59:39:d3:ca:32:0d:38:6a:02:0f:92:29:9c:12:82:4f:70:
c8:36:c2:97:c9:45:73:35:6f:b1:bc:84:d6:9e:48:53:f6:f0:
68:0d:92:e8:09:d8:d9:94:3d:aa:5d:01:bb:06:de:70:2f:99:
c8:0b:ea:8a:77:78:aa:a8:84:9d:80:05:a3:89:20:9c:e9:0c:
57:59:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:55:31 2026 by rpki-client