Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: ELd4KAGmWffaDBONDGLdO5vCMa44cw2sC+ZfdPZ/D3Q=
Subject key identifier: F2:E7:D4:38:47:13:2A:4E:CB:CB:FF:B5:46:D6:8D:D8:B2:BA:8A:5C
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01A181502BB6B8A403120728C349C4B1B624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 05B2
Signing time: Wed 28 Oct 2026 07:01:17 +0000
Manifest this update: Wed 28 Oct 2026 07:01:17 +0000
Manifest next update: Thu 29 Oct 2026 07:01:17 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: Z9uPIxoI48Q6jz6yExCzAPTvoe26ANN0DKw3Cd6cBho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:2b:b6:b8:a4:03:12:07:28:c3:49:c4:b1:b6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Oct 28 07:01:17 2026 GMT
Not After : Oct 29 07:01:17 2026 GMT
Subject: CN=f2e7d43847132a4ecbcbffb546d68dd8b2ba8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:af:8f:e8:33:a1:f3:eb:78:30:6a:80:44:
2d:d8:e9:06:44:bb:98:7f:96:75:85:6f:b7:ff:b3:
3c:69:2d:38:a3:c0:98:ab:15:bc:78:73:ef:74:74:
23:0f:20:d0:ff:8f:20:5e:4b:1d:e4:d8:75:84:5a:
27:39:67:15:c0:51:e4:64:15:a6:fa:0d:58:6f:fa:
15:44:b5:28:90:d2:45:14:23:d7:df:ce:9c:67:29:
91:e6:e4:da:82:d5:e6:b4:4f:49:7c:50:70:15:a2:
f8:00:a7:6a:a9:6c:46:04:b0:b5:6b:ae:d6:51:5e:
91:a9:c2:bc:3a:5c:16:9d:f3:a6:44:5d:99:04:e0:
ca:97:c5:47:7a:ec:02:03:b4:21:53:59:1f:c7:96:
a9:76:b1:ff:6a:98:00:47:48:15:bf:87:fa:a9:76:
b6:f7:5e:c0:2a:83:83:b1:e5:3b:3f:45:80:08:f2:
3e:88:63:de:7b:dd:30:f6:10:f3:47:ad:44:8d:4b:
bb:8d:4a:e1:ad:38:72:ea:73:60:0c:4a:2f:dd:11:
85:2b:4f:5d:49:02:65:24:a4:47:41:37:04:0d:2f:
40:fc:22:3d:c4:93:af:e4:d3:90:d0:2f:fb:4c:bc:
3a:28:0a:71:23:1b:4a:b5:94:61:be:9d:65:1b:09:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:D4:38:47:13:2A:4E:CB:CB:FF:B5:46:D6:8D:D8:B2:BA:8A:5C
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:6b:ae:b3:6b:c6:1a:e4:4d:4b:5b:b2:60:68:4c:24:f3:
1d:2e:24:85:2e:7c:c8:6e:3b:9c:34:e1:b2:ba:ed:6a:70:22:
d6:8b:d3:b8:00:64:a9:cb:e0:64:bc:63:f7:50:c6:5b:45:71:
03:1a:3d:0c:e0:9b:15:a2:e2:37:d1:a1:a7:33:6f:36:12:d1:
1d:3b:51:19:f6:80:5b:f6:99:24:ef:fe:17:de:51:52:36:b5:
ed:b4:92:3d:56:12:3a:0f:2f:e0:60:cd:e7:d6:40:1f:c8:58:
f9:9e:b6:a8:3b:51:e4:fd:1f:aa:a6:60:66:62:f6:3b:7f:a8:
63:af:eb:1b:d2:fd:35:11:c3:20:ce:4a:ac:07:95:c6:9b:87:
5a:df:22:bd:95:f8:7a:d8:39:72:86:d3:56:0a:5d:9c:ba:6e:
79:15:19:88:53:7c:c8:84:52:aa:20:aa:ab:10:a4:c1:4e:34:
0d:4c:37:6e:89:4c:6c:49:ab:1a:a9:03:b0:e3:82:f2:45:11:
1a:44:a0:5c:b3:6b:e3:49:93:74:80:55:33:bb:28:21:37:c5:
a9:0d:e0:16:1e:48:e6:a1:dd:26:3d:a4:74:b0:cd:7a:08:53:
e0:75:9e:e5:c7:09:b3:2c:18:69:ec:81:85:92:e8:58:50:fd:
2d:ee:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:25 2026 by rpki-client