Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: ZUEt1lMZ1hVj1y0c/0Bv9G/1KrlWDTvpvjE9wqR7WiY=
Subject key identifier: 43:8B:BB:22:DF:84:C0:8F:B7:F3:21:A1:8A:06:E1:B2:4D:7A:68:7C
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019DB16AA230CCD2570B99293941F1023EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 081D
Signing time: Tue 21 Apr 2026 19:00:48 +0000
Manifest this update: Tue 21 Apr 2026 19:00:48 +0000
Manifest next update: Wed 22 Apr 2026 19:00:48 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: qqXR2UV6Z5VoYFWFXpXkeLzBBMOfRckPkUvWj/IlbGE=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:a2:30:cc:d2:57:0b:99:29:39:41:f1:02:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Apr 21 19:00:48 2026 GMT
Not After : Apr 22 19:00:48 2026 GMT
Subject: CN=438bbb22df84c08fb7f321a18a06e1b24d7a687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:c0:59:98:95:4a:dd:fc:ea:86:46:25:ff:
25:45:86:86:60:17:43:54:a8:8b:c5:a1:cc:21:0a:
b5:80:e1:7c:95:1d:0a:e9:c8:bb:13:36:fc:bc:d3:
aa:8e:dc:18:be:23:6a:56:49:87:b7:73:66:28:af:
64:6c:c4:5c:9b:f1:a3:e2:5b:f5:52:25:b2:77:ce:
54:49:08:97:50:fc:26:42:fd:b5:c0:ad:8a:02:f5:
f9:94:4d:34:33:ef:a5:31:e6:b0:1f:dc:fa:5c:ad:
01:cf:7d:33:1c:46:fa:56:a8:b9:f8:d3:c7:58:b5:
69:cf:91:7d:1b:d5:62:e3:c0:5a:bc:80:29:4e:71:
0c:de:4a:77:07:75:4e:3a:b4:e8:d7:1b:6e:09:70:
b5:9f:f6:d9:d7:fe:35:bc:42:a7:50:2a:aa:c9:bc:
85:7e:93:dd:dc:d5:3b:79:68:cf:c1:15:57:f4:2f:
b0:0f:40:67:45:c7:a6:c1:0e:f5:c8:1f:25:85:03:
1f:58:ed:e1:78:76:59:ef:96:01:96:b2:f6:24:55:
8a:63:ad:62:6e:1b:04:81:f4:ab:e7:2f:bc:3e:2f:
57:5d:e9:cd:be:3d:db:4f:d9:65:ea:26:3f:a2:35:
d6:70:25:70:67:ce:4f:ab:df:70:e9:ea:a4:c3:11:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:BB:22:DF:84:C0:8F:B7:F3:21:A1:8A:06:E1:B2:4D:7A:68:7C
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:f7:d1:e1:90:2f:40:ed:0f:b3:42:c1:19:76:64:8b:9e:
f6:35:ff:3f:63:06:79:b2:27:1e:2d:fe:29:db:f9:43:7e:d5:
7c:b6:09:8e:5d:78:b4:05:3d:26:fd:a6:4f:42:2c:26:96:c6:
7c:74:39:67:ee:b3:61:26:56:99:38:d3:ad:81:08:dc:ee:84:
ed:66:45:a3:04:bf:36:a3:83:0a:c1:7c:58:4f:4f:84:47:9b:
ff:56:88:40:3c:5e:dd:0e:9d:67:7c:e1:a7:a5:37:b3:9a:71:
fd:42:5f:68:e1:6c:30:dc:c5:b7:5d:8c:1b:b5:95:af:7a:3f:
4b:f9:62:71:26:9c:6e:90:59:b1:af:33:6e:4c:22:7e:17:b3:
24:b1:65:83:c8:fb:d4:7d:8e:f7:68:b0:81:e4:eb:dd:d9:c5:
e6:54:12:76:dc:c6:ba:c6:17:67:a3:54:51:92:51:fa:d7:34:
3d:53:c0:fc:d8:ab:ae:ec:c2:97:89:3e:b7:3f:50:b8:10:5e:
af:a3:15:4d:e2:84:26:28:d2:81:87:5d:49:6d:c2:26:66:29:
9f:a7:ad:88:cd:56:d2:ef:11:a9:2a:6f:c0:db:a0:cc:6c:db:
73:aa:c1:86:f2:25:05:a5:84:ad:e2:3d:11:b7:03:46:de:7a:
30:93:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:34 2026 by rpki-client