Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: 6M+iRPInrFcKMswwFWYyB8FcB+1gGri7GYlGlysQFTc=
Subject key identifier: 1C:00:A9:4E:F9:B1:C9:57:46:07:76:FC:5C:8A:D1:E8:5C:8A:A7:ED
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01A1833E731743CB810BEB9D5E3788D8A4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 05B3
Signing time: Wed 28 Oct 2026 16:01:10 +0000
Manifest this update: Wed 28 Oct 2026 16:01:10 +0000
Manifest next update: Thu 29 Oct 2026 16:01:10 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: f9NgPHO00VfwmvKUSA+wPkUjfjwFNp0KJmgCWWkylEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:73:17:43:cb:81:0b:eb:9d:5e:37:88:d8:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Oct 28 16:01:10 2026 GMT
Not After : Oct 29 16:01:10 2026 GMT
Subject: CN=1c00a94ef9b1c957460776fc5c8ad1e85c8aa7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:7b:eb:a9:05:e1:1f:e3:95:1c:f8:ee:58:
59:6b:b1:dd:56:ac:8a:d7:22:79:a5:a7:04:1b:ad:
b2:28:ad:7f:e1:00:1c:96:dd:7b:6f:66:b6:9e:e1:
be:3f:11:ef:48:dc:2b:bb:30:39:d3:6a:c8:ed:e3:
46:a7:12:65:11:69:6e:fa:d2:37:f2:c7:1b:27:4e:
15:04:9a:b8:29:d1:cc:29:5b:45:9b:9a:ed:63:47:
e8:03:0f:ce:00:98:e4:2c:11:c5:fa:92:99:06:7d:
0f:d1:bb:86:d0:88:17:67:d8:59:a5:4a:59:6c:33:
86:9e:3b:a2:99:c0:8f:e5:00:a4:42:19:91:c1:36:
e4:41:93:87:25:7e:4a:1f:28:b2:15:ed:82:87:fd:
8f:87:59:22:1e:3c:71:e0:a6:c7:80:33:e0:2e:cb:
cc:8b:5a:7f:a8:b0:f9:ca:a9:e9:51:3b:20:ed:e0:
bd:5d:5c:59:a2:76:03:59:15:77:4e:c9:ef:e3:c9:
3b:9e:1e:44:f2:64:a3:dc:d7:91:24:bd:e9:73:01:
ee:3c:ec:d1:40:56:14:eb:b7:a2:4d:50:d2:79:73:
09:90:f4:35:0c:ef:fa:9c:4d:16:08:7b:a3:5f:70:
ee:df:71:87:2e:fa:b6:c6:92:f7:da:b9:b8:ed:6b:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:A9:4E:F9:B1:C9:57:46:07:76:FC:5C:8A:D1:E8:5C:8A:A7:ED
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:80:8a:9e:b8:ac:97:ca:e8:39:23:ef:48:03:5f:01:e0:f3:
47:32:5d:18:c0:4e:70:35:89:0f:0f:f2:69:2d:cc:c6:b2:7f:
70:53:95:88:5a:bc:55:f1:b2:f2:d6:30:55:f6:eb:d6:e8:b4:
80:96:9d:15:b1:36:91:f6:b5:9b:99:1c:60:c9:00:58:05:0a:
f7:ec:24:e1:91:e2:7b:c5:4a:e8:60:29:20:e1:bb:4d:3a:5c:
5b:20:0e:1a:57:48:85:d4:2f:e8:2c:ed:f4:b1:5b:38:0f:23:
d5:da:a0:e6:09:eb:0c:49:96:dd:43:b2:91:ea:48:85:74:37:
19:76:b2:76:a7:52:bc:04:27:e4:1a:6b:a8:d4:b5:67:9f:24:
b8:ad:d1:3c:77:a6:1b:d8:ae:81:34:a9:b6:22:27:da:12:d0:
8c:c9:69:83:ca:9d:e6:8e:ad:ef:20:13:3f:8c:be:83:56:57:
85:86:27:d5:e2:43:b9:cb:88:a2:c6:d7:b4:52:95:4d:62:57:
70:a6:c0:67:4c:09:51:a4:d3:2c:59:cd:38:65:29:4b:17:f1:
ae:a7:49:e2:6a:ca:48:60:3b:64:51:02:70:63:83:01:a2:74:
34:48:03:a4:8f:47:d0:c5:ef:5d:4a:34:4d:76:b5:f9:2c:7e:
d2:a4:28:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPnMXQ8uBC+udXjeI2KT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh
ZDJkMzUwHhcNMjYxMDI4MTYwMTEwWhcNMjYxMDI5MTYwMTEwWjAzMTEwLwYDVQQD
EygxYzAwYTk0ZWY5YjFjOTU3NDYwNzc2ZmM1YzhhZDFlODVjOGFhN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SF766kF4R/jlRz47lhZa7HdVqyK
1yJ5pacEG62yKK1/4QAclt17b2a2nuG+PxHvSNwruzA502rI7eNGpxJlEWlu+tI3
8scbJ04VBJq4KdHMKVtFm5rtY0foAw/OAJjkLBHF+pKZBn0P0buG0IgXZ9hZpUpZ
bDOGnjuimcCP5QCkQhmRwTbkQZOHJX5KHyiyFe2Ch/2Ph1kiHjxx4KbHgDPgLsvM
i1p/qLD5yqnpUTsg7eC9XVxZonYDWRV3Tsnv48k7nh5E8mSj3NeRJL3pcwHuPOzR
QFYU67eiTVDSeXMJkPQ1DO/6nE0WCHujX3Du33GHLvq2xpL32rm47WtzxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwAqU75sclXRgd2/FyK0ehciqftMB8GA1UdIwQY
MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt
NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3
LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYCKnris
l8roOSPvSANfAeDzRzJdGMBOcDWJDw/yaS3MxrJ/cFOViFq8VfGy8tYwVfbr1ui0
gJadFbE2kfa1m5kcYMkAWAUK9+wk4ZHie8VK6GApIOG7TTpcWyAOGldIhdQv6Czt
9LFbOA8j1dqg5gnrDEmW3UOykepIhXQ3GXaydqdSvAQn5BprqNS1Z58kuK3RPHem
G9iugTSptiIn2hLQjMlpg8qd5o6t7yATP4y+g1ZXhYYn1eJDucuIosbXtFKVTWJX
cKbAZ0wJUaTTLFnNOGUpSxfxrqdJ4mrKSGA7ZFECcGODAaJ0NEgDpI9H0MXvXUo0
TXa1+Sx+0qQozw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:14 2026 by rpki-client