Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: WZ+n5iXM/XIEsFmu5D7wjkBaH9uEbPr4HTDy7q5mf5M=
Subject key identifier: 0B:76:41:94:53:38:28:61:4C:EE:19:03:F7:8E:AE:59:1E:DD:00:51
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019E24A4DC0C00DE03EBB0F28EF75210DC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1909
Signing time: Thu 14 May 2026 04:00:44 +0000
Manifest this update: Thu 14 May 2026 04:00:44 +0000
Manifest next update: Fri 15 May 2026 04:00:44 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: r6Fgeup6D2Ssa1Se9qAAvFHjg5G0QUuyuwMBPuEy3Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:a4:dc:0c:00:de:03:eb:b0:f2:8e:f7:52:10:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: May 14 04:00:44 2026 GMT
Not After : May 15 04:00:44 2026 GMT
Subject: CN=0b764194533828614cee1903f78eae591edd0051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:5f:cd:68:3d:74:97:a5:bd:4b:89:02:f1:
17:08:c2:8e:18:6f:12:80:19:a4:ed:2f:17:1c:60:
78:bb:d5:95:ce:ed:44:7b:38:97:b3:06:88:a1:0b:
98:9f:a8:98:bd:01:78:c5:b0:02:0b:dd:94:b2:ee:
78:9d:70:19:9e:0c:74:97:19:c6:ed:aa:b9:73:d5:
d1:73:0f:da:a3:12:ec:55:fb:3c:07:63:a1:41:4d:
4c:cb:a9:d2:f1:21:68:d4:a9:f3:45:2f:18:e1:33:
15:fb:1a:19:3e:2a:99:2a:a4:79:65:2d:68:34:5e:
2e:86:ae:db:67:94:9d:92:de:f3:58:66:6c:58:79:
a8:f6:91:af:3a:a8:e1:0f:92:e3:dd:18:3b:82:95:
ba:57:12:14:48:34:38:be:02:d6:f3:12:36:dd:5c:
dc:04:e2:d1:1a:0f:21:96:ef:c7:fa:2c:7e:b4:53:
66:ff:a5:fc:0b:3c:70:d3:ac:ff:d5:7b:0d:57:1d:
86:17:b2:32:a7:ec:dc:4f:6f:6b:1b:b5:db:ca:a4:
52:3d:61:d7:9c:8b:8d:86:a5:a5:23:d7:0d:49:23:
46:b5:e1:9f:14:62:fa:aa:86:1c:0d:98:9e:62:a9:
01:1e:91:ad:42:cc:b2:ca:d6:f0:06:d9:03:07:3c:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:41:94:53:38:28:61:4C:EE:19:03:F7:8E:AE:59:1E:DD:00:51
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:54:f8:43:9f:c6:e4:8a:19:19:96:68:a5:39:84:95:aa:d3:
0a:f6:2a:60:99:9d:94:8d:0b:55:94:ab:b7:f4:f3:44:4e:ed:
c4:a6:54:b7:ae:88:ff:75:05:00:b9:6c:26:27:71:a0:f4:b6:
c3:03:3b:75:17:b1:0f:39:26:60:90:cb:32:5b:b7:4b:da:bf:
46:ef:87:46:5f:c5:76:d7:94:a6:d8:a6:e4:e6:18:ef:fa:13:
5d:91:f8:15:a4:a1:29:f0:13:45:4d:e3:ba:af:e7:21:8f:31:
7b:b5:e9:ad:02:30:1e:a7:1b:21:5b:37:c4:1b:7e:b7:34:75:
3d:4c:52:d1:df:71:fd:fc:75:96:bc:aa:f6:fb:36:c8:4e:b4:
ac:a3:29:b6:97:32:a1:c8:96:ad:91:be:fd:51:92:49:60:86:
7c:01:a1:8d:2a:0f:69:f9:4e:43:94:7a:d1:c7:b9:02:7b:07:
16:a4:de:25:63:a2:de:e5:20:71:22:76:34:d3:42:54:b6:c6:
b3:fa:fd:46:be:6f:3a:a5:17:71:30:9c:47:77:59:0c:d6:52:
81:6b:11:47:93:90:b1:dc:67:45:d5:7a:b2:79:f5:72:d4:fe:
e1:a8:50:28:91:0c:50:69:de:9f:63:a6:00:21:7d:eb:c0:b7:
dc:4c:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 09:07:39 2026 by rpki-client