
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: vcmsNDlJtnNytSQA5SAA9JOZFeWQlkUDwt7ddBx+ou8=
Subject key identifier: 49:CC:FB:DB:8B:42:7E:74:08:87:C8:14:A5:0E:75:85:F4:B9:28:17
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019DF8DEB84FA1B06BAF094ED2CDBC66411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 188E
Signing time: Tue 05 May 2026 16:00:38 +0000
Manifest this update: Tue 05 May 2026 16:00:38 +0000
Manifest next update: Wed 06 May 2026 16:00:38 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: I3zkUyZTNVN6QI9uumw2KiYDhV0CMouMME6YubW05zk=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:de:b8:4f:a1:b0:6b:af:09:4e:d2:cd:bc:66:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: May 5 16:00:38 2026 GMT
Not After : May 6 16:00:38 2026 GMT
Subject: CN=49ccfbdb8b427e740887c814a50e7585f4b92817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:06:2a:ed:8e:26:b1:ce:c7:58:8e:ed:26:
58:54:55:75:80:50:15:6b:52:11:98:2c:f6:53:39:
03:18:93:38:00:cf:15:86:95:1e:98:57:f4:24:21:
d8:30:03:49:b6:c4:7b:f5:6f:25:c8:4f:08:1a:6f:
1f:72:f6:39:83:90:5d:06:9f:d3:30:f6:d6:7d:f9:
c6:14:33:2a:24:ca:b4:5f:89:71:c0:0f:c8:6f:48:
1f:c8:d6:0e:26:9e:8c:49:63:df:a8:3c:05:0d:c0:
61:0c:24:31:75:37:2c:6c:de:27:e3:78:65:b9:27:
9f:f3:c7:70:15:20:25:fe:ae:98:fb:81:9e:6a:02:
2c:48:77:a7:50:5b:1f:a7:ee:65:27:c0:04:70:8e:
b9:f6:0a:ac:01:fe:e2:88:0e:52:55:17:bc:c2:03:
75:ec:b8:a5:90:8b:37:46:cc:8a:34:45:eb:94:41:
7b:4f:9a:66:ed:26:9a:7f:3e:8d:ec:37:49:dd:2c:
fb:16:95:28:22:84:e2:31:1b:ce:1f:e5:ff:fd:71:
26:b3:99:27:b7:7d:c2:ad:60:48:48:2e:92:9d:e6:
a8:7f:38:8e:09:d5:2e:62:70:56:d1:a5:60:ed:b9:
92:6e:59:9d:a8:ed:9f:9a:75:93:84:43:10:a4:9c:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:FB:DB:8B:42:7E:74:08:87:C8:14:A5:0E:75:85:F4:B9:28:17
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:57:34:19:ae:85:41:9a:f1:b8:ca:3e:fb:f2:b1:20:69:
78:62:9e:aa:22:f5:5d:7b:69:ae:f2:00:bb:ae:f4:67:9d:73:
49:73:47:b1:68:d5:1d:8f:fc:ae:2f:70:6f:7c:f0:79:70:ed:
2a:58:d9:53:2b:5f:fa:fc:79:09:ba:39:a6:a3:6e:8d:d7:77:
59:f4:6b:6f:b6:92:20:05:42:20:e4:8e:fb:c5:03:2c:90:b8:
23:7c:36:7d:76:a9:f9:0a:39:12:82:bb:58:43:82:9d:96:e5:
bf:8b:23:3b:b2:30:60:f0:14:a7:a3:e0:21:f9:93:6c:a3:18:
b3:f3:31:ee:5f:85:6a:96:81:10:b5:d0:e9:8c:f2:3a:f6:c9:
14:12:db:d7:13:db:2c:60:dc:fb:70:d4:bf:82:dd:8a:7b:00:
bb:4b:d1:5a:0a:6e:3f:d8:30:cf:ca:d2:38:3c:90:c0:f2:8e:
50:d6:1a:c7:f8:81:3d:ae:a9:42:2d:b2:49:ad:e7:11:af:9f:
6f:44:cb:0d:a3:67:42:4f:08:1c:02:4d:44:b7:43:78:37:63:
53:70:f3:1e:1c:34:83:85:e3:61:42:7b:9b:77:44:f3:6b:01:
d0:35:51:94:63:e0:f3:f8:91:ef:bd:c0:ca:ac:c1:0d:bf:1f:
12:20:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:19:39 2026 by rpki-client