Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: exrPwwUdx1yIWB3RbF7GXKzkAtduhv2gM/82ARWHQok=
Subject key identifier: 6B:78:1D:20:CE:C5:02:30:58:6E:46:EF:E1:F2:09:30:E6:44:83:A8
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019FA18477BF1FFDB01A87073DCB7F8D2BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 03:00:40 +0000
Manifest this update: Mon 27 Jul 2026 03:00:40 +0000
Manifest next update: Tue 28 Jul 2026 03:00:40 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: s3iTfSBCEn1BQXmSkCjcvTHqYR85uotFU7irtjGqYGw=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:77:bf:1f:fd:b0:1a:87:07:3d:cb:7f:8d:2b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jul 27 03:00:40 2026 GMT
Not After : Jul 28 03:00:40 2026 GMT
Subject: CN=6b781d20cec50230586e46efe1f20930e64483a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:1e:ee:e7:4f:65:2b:dd:31:80:7d:91:f6:
e3:02:82:97:88:b1:85:a5:e2:30:a2:3d:f3:b9:b5:
bc:b2:c6:49:6e:ae:f9:0c:26:1b:fe:2e:de:58:1f:
73:20:18:9b:0c:4f:2b:71:b7:e7:cd:5c:c0:5a:eb:
76:ac:21:3c:3a:da:d7:76:29:59:23:12:90:0b:35:
15:29:2f:23:10:ba:aa:bf:86:2e:5d:08:c0:0b:75:
e8:93:4b:53:6a:89:f7:9e:d3:f8:dd:95:08:38:ac:
0a:d0:db:6c:c6:e6:d0:42:1d:ee:8f:6b:00:96:28:
7d:37:b8:b5:f2:f1:7a:56:3a:6c:59:93:81:1e:0d:
66:f3:ae:0a:1d:db:33:70:3b:73:76:aa:6c:90:48:
9d:4c:55:9d:a4:db:49:17:9e:a9:a2:7f:14:e7:35:
b7:4e:01:de:5e:4d:a6:a4:2c:c9:9a:83:93:6a:6e:
5a:fd:0b:71:e6:b4:a2:6f:a6:42:dd:e0:05:17:9a:
96:0b:57:91:2a:cb:e3:ad:86:83:4a:16:bc:86:90:
0d:49:5d:3f:eb:14:c5:08:09:51:73:af:de:b7:08:
cb:b8:11:1b:28:55:87:c2:b7:af:b7:6e:71:3e:79:
82:a3:89:e8:44:c0:92:5b:62:c0:a4:a4:7f:6b:11:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:78:1D:20:CE:C5:02:30:58:6E:46:EF:E1:F2:09:30:E6:44:83:A8
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7e:a1:e5:ad:b8:7c:ae:be:82:29:ce:bd:f2:73:9c:2e:32:
82:06:ea:19:1c:42:02:12:a2:ea:83:de:8e:54:ae:69:2a:15:
82:e1:6d:6f:1e:b9:e7:42:34:bd:f7:68:b6:77:25:6a:40:86:
02:ea:3c:6d:90:00:9c:a5:11:88:ef:2e:0c:65:a3:e0:e7:e7:
b9:f4:34:5f:80:33:56:38:3a:9f:e6:14:35:fe:1f:c7:de:ea:
9a:b1:ab:e1:b8:02:84:b9:3d:8f:bd:1e:ae:1e:8d:0c:6c:22:
70:04:76:96:fc:1d:ea:fc:0f:85:26:40:24:b0:b8:82:17:01:
b1:a4:be:a3:fd:71:0f:03:46:0c:43:b4:16:5f:ff:a1:bf:72:
2e:90:85:94:79:dd:29:93:9c:f7:66:92:d0:1a:cf:e7:a2:b8:
ad:2e:77:9b:9d:3f:63:26:8e:80:2b:79:77:1b:a8:a8:f4:be:
36:37:a5:4e:b5:c3:81:16:6a:c4:f0:27:1a:c3:6e:73:31:9b:
40:8f:18:e0:3c:9c:8b:f7:37:d8:ca:f3:b5:b5:42:5d:64:45:
36:d4:60:a3:8e:42:f0:f3:ed:7a:c3:fb:4a:1d:a2:73:5d:db:
85:08:ee:73:14:56:c2:42:04:57:1d:36:56:18:c7:bf:d4:df:
05:3f:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:48:58 2026 by rpki-client