Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: D4s5/k0t+/CfsvHD83nHhpRM0WRw2/k32K/SP+fBRRU=
Subject key identifier: E5:A8:A7:58:DA:05:87:D1:35:F2:81:51:BF:10:06:FB:F1:12:AA:E0
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 019D38D3B85EAC14C4CA87BC9A614DEB7CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0BCE
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: l6m03WabYrite5kEbkAPakMvior36bjnsP1iWN8oTZg=)
2: vDyYxaD_OvQHT43TMjNvoifQbS0.roa (hash: OGyJnll9v3Henpio/RUnMctAX/okbHPj8xqJsYAY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b8:5e:ac:14:c4:ca:87:bc:9a:61:4d:eb:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=e5a8a758da0587d135f28151bf1006fbf112aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:be:3e:23:1b:88:60:47:fc:c1:39:1e:30:
e2:72:93:56:00:f1:40:c9:74:00:1b:3c:42:f0:14:
3d:d3:80:b6:c4:7b:fa:f0:d4:01:e9:34:44:9e:46:
1f:84:4b:8a:e7:0d:55:84:75:52:59:ab:7f:5f:f2:
30:6b:cc:37:86:d0:a2:63:aa:43:f3:7f:1d:ef:76:
10:3c:38:83:a3:cc:74:0e:b7:28:df:54:71:86:5a:
7a:76:ff:2b:de:cb:15:39:87:ab:fa:4b:4a:75:80:
b1:a0:57:f8:1c:81:b3:43:d4:af:91:c4:f0:34:7a:
38:72:59:b2:57:cd:c9:12:47:c2:ea:12:4d:03:82:
9a:41:7f:3c:59:5b:d0:74:86:33:6c:d4:52:a8:b4:
92:1e:64:10:16:d9:4f:da:0b:b8:3d:df:2f:aa:e3:
43:c9:2b:0f:29:90:78:0d:65:38:c4:6f:ab:33:cc:
68:04:c8:38:0f:3c:07:39:4d:09:82:22:c3:d9:cd:
21:81:3e:25:72:e9:00:73:fd:8c:a1:77:d9:0d:46:
f7:fa:d4:83:59:97:f7:19:70:13:c6:78:90:06:44:
39:e2:ea:86:68:e1:9c:2b:bd:1e:59:b7:bf:cb:4e:
d3:15:36:76:97:15:a2:a6:05:d9:82:db:1f:e0:99:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:A7:58:DA:05:87:D1:35:F2:81:51:BF:10:06:FB:F1:12:AA:E0
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:8d:3f:61:a5:fb:a6:09:eb:ed:5c:5d:fe:a7:e0:e0:c6:
71:a7:13:fa:d3:db:2c:21:b5:98:c1:fc:f4:8b:b9:81:50:a8:
f6:41:41:71:6e:76:eb:82:91:5a:7c:66:ef:18:0f:2e:bc:ba:
5f:bc:4c:19:a8:92:a9:2d:e5:6d:65:d7:93:8f:a9:e8:e1:4c:
c8:f8:f5:f3:0a:ab:38:25:0d:b8:f1:5a:c8:97:c2:af:86:1c:
25:ea:0b:e1:67:5c:e0:10:57:e8:7a:a0:5f:9d:67:22:ce:db:
cb:73:8b:e2:33:6b:1f:3b:b4:aa:a3:52:a0:44:24:7f:57:fb:
c3:0c:98:1c:96:7b:de:30:8c:23:56:45:69:42:cb:98:f1:d8:
c3:6b:ea:15:1a:ad:bc:9c:79:53:2a:64:b6:a2:d9:bb:76:1a:
bf:f1:04:e0:d0:c6:3e:82:28:4d:55:f0:0d:4e:fc:e0:20:bd:
4d:b8:62:5e:f0:17:24:85:e8:ff:a5:a5:e7:70:d4:7a:68:bb:
13:8e:9d:b5:96:b1:bb:51:47:67:30:05:6c:93:69:2f:e9:33:
8c:36:8d:a0:ab:f3:0e:5c:84:df:7b:33:de:d2:c6:4f:28:2d:
e9:11:40:b1:ae:64:f7:f7:f2:9f:21:6b:ad:73:8a:9b:79:63:
2e:f8:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client