
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: JCqBNfEb9y4NgUhFNpZZ9j7pMfF2XXRYG2j+7x3euJM=
Subject key identifier: 0C:FC:01:D5:E0:C0:63:A5:CE:47:77:18:80:75:BE:5E:C4:0C:B2:C7
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019E31F2F065F7889ADB8B051EF099816ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0F9E
Signing time: Sat 16 May 2026 18:01:05 +0000
Manifest this update: Sat 16 May 2026 18:01:05 +0000
Manifest next update: Sun 17 May 2026 18:01:05 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: pz75BsUYc4LJB2R69WjgryuX3vRr42EUrHfdg0P0YW0=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:f0:65:f7:88:9a:db:8b:05:1e:f0:99:81:6e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: May 16 18:01:05 2026 GMT
Not After : May 17 18:01:05 2026 GMT
Subject: CN=0cfc01d5e0c063a5ce4777188075be5ec40cb2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:10:d3:b9:c7:8f:ad:be:c1:95:2f:49:68:
6c:8c:61:ee:e1:0d:0a:2a:a3:7c:41:d2:98:b1:d6:
61:d3:48:87:c3:5f:d0:a7:05:cf:24:d7:21:00:e2:
c2:1e:87:52:6f:49:f0:f9:90:a9:14:e3:23:4e:71:
09:19:45:1a:92:78:fe:1c:a2:99:2e:7b:5c:16:e5:
66:68:07:3b:a3:17:93:64:b8:71:a1:bf:de:ad:c8:
60:77:02:03:6a:fb:52:b9:ab:c3:15:66:ba:db:47:
39:ff:f2:5f:20:ee:3c:e9:1d:06:7a:83:f6:e0:c9:
10:e1:49:a2:77:6b:5b:3c:5c:ba:69:60:c2:3a:86:
33:68:9f:12:b8:84:05:98:54:40:2d:6a:4c:f8:d1:
8b:9a:db:89:73:27:26:6a:f3:17:4d:75:4d:19:6a:
0c:1c:ff:5c:09:c9:b9:a0:2f:f2:82:0c:d1:2d:6d:
5e:88:8d:b6:19:81:e7:09:3c:00:6b:60:de:7f:23:
02:6d:3b:38:fc:90:15:45:4b:2e:77:f6:75:6c:8a:
db:0a:92:9f:9f:45:95:05:e9:15:57:c6:4e:b7:91:
6f:09:7f:10:29:78:93:8f:48:21:8c:98:40:d1:10:
1d:30:04:d3:91:a3:1c:49:2a:b8:bd:73:a4:fe:50:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:01:D5:E0:C0:63:A5:CE:47:77:18:80:75:BE:5E:C4:0C:B2:C7
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3f:10:fb:74:76:3f:9f:e3:9a:ae:b7:be:07:86:df:c5:5b:
01:a5:85:07:08:af:2f:6c:d4:16:73:f4:a1:fc:03:3c:a1:54:
dd:05:42:74:8c:fa:ee:28:5f:34:67:4a:ed:bb:66:b1:30:f7:
79:fa:e8:4d:82:90:3b:f1:db:a7:e5:b9:df:f9:f9:9a:ad:07:
43:e2:49:d2:d9:73:95:1e:a3:1e:0f:4c:36:bb:52:6e:78:e1:
f8:63:53:dd:56:a2:a9:12:7e:23:da:99:48:52:0b:a3:e5:ab:
c9:02:ac:a6:5a:c8:d2:be:62:48:81:4a:26:fa:aa:1d:df:48:
35:46:38:cd:a2:77:96:c3:22:82:2c:f8:fa:5f:a5:59:2d:d5:
70:b2:0f:5e:e8:ec:75:5d:98:c4:fd:75:61:61:00:f2:bf:38:
9b:59:c5:2f:c3:2f:27:4b:27:bc:bf:02:ca:87:2f:9e:f6:fb:
13:54:ad:28:1b:74:6d:b5:64:bb:4e:b9:17:87:ed:06:6b:3f:
22:d1:5f:39:4e:65:89:6e:81:3d:88:a3:69:85:26:99:fc:35:
94:83:26:cc:bf:a5:dd:f3:56:31:16:c7:6c:b1:9f:20:4b:6b:
5e:aa:c8:67:65:57:04:f5:f8:4a:e3:88:57:e3:60:f0:06:09:
a8:98:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:59 2026 by rpki-client