Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: 2CI5yGR2U1fuDosRjX3ttgYPLaoYNYUQczmTOFC5ky8=
Subject key identifier: 11:EE:41:69:2E:CC:05:52:C9:52:AE:BA:DE:37:3C:6E:0A:C4:B5:70
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A158C1FD7354BE2A2C4BEF4D45D6469D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 10:01:10 +0000
Manifest this update: Tue 20 Oct 2026 10:01:10 +0000
Manifest next update: Wed 21 Oct 2026 10:01:10 +0000
Files and hashes: 1: RCP333K4MJtEO3BsITmh9W8rq7w.roa (hash: il0tlrgTDYLWI+q67CvBvdEJyRCFhOmSDTdmlbLDngA=)
2: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: m5vB7Oo1O9SQKNEiRnGrGG3s4SRjKSEXLibG326oCGs=)
3: Tly1X20kmC9GiMtlAywnR5v42sY.roa (hash: H0lTeyRZMkF4/Jmp2AkeMpiPxuOj8j30tsvE9r36xSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:c1:fd:73:54:be:2a:2c:4b:ef:4d:45:d6:46:9d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Oct 20 10:01:10 2026 GMT
Not After : Oct 21 10:01:10 2026 GMT
Subject: CN=11ee41692ecc0552c952aebade373c6e0ac4b570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:3a:02:ec:3e:81:82:ce:cf:fd:fc:c0:51:
fd:d1:1e:d7:16:61:a9:cc:39:12:8f:96:4a:8a:f6:
06:71:f9:cb:5c:cc:c9:ad:bb:50:94:62:18:e2:fe:
02:14:74:02:ed:5f:71:e7:5d:07:37:32:42:e2:63:
6d:82:d5:84:b3:5e:67:8c:75:b5:a8:e0:ec:9c:d1:
f0:32:39:91:15:c6:02:af:d3:55:31:c9:94:b3:be:
06:14:07:1c:55:39:7d:bf:d3:9d:74:ae:5c:f8:e5:
f5:13:74:e0:c3:85:e1:3b:62:bb:3b:45:f7:9c:80:
5a:49:db:92:71:aa:05:28:9e:b4:29:21:89:6c:72:
b8:6b:d7:cb:6b:5a:70:37:a1:ad:27:2d:b3:25:fa:
5f:b9:2f:c3:a6:59:4b:7d:07:8d:d4:21:47:58:cb:
95:8b:31:08:b7:2c:90:79:d6:36:cb:71:51:d2:ad:
6e:a1:96:65:5b:95:d2:63:9b:ad:c1:f8:30:64:0e:
6e:0d:b4:ca:59:dd:1a:cd:35:3b:9a:88:a5:d7:c6:
14:78:df:6b:cc:d0:3d:bc:9f:62:e5:23:1a:62:6e:
dd:f8:02:5d:70:c5:4b:a8:3f:33:9e:cf:e7:13:56:
f6:3d:66:ae:21:7c:71:89:d6:43:4f:45:60:ea:54:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:41:69:2E:CC:05:52:C9:52:AE:BA:DE:37:3C:6E:0A:C4:B5:70
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:53:50:67:54:cb:29:ed:06:1a:6b:50:17:de:43:0c:91:2c:
1c:1b:47:90:60:52:c3:56:3c:5c:57:29:5c:19:0f:3d:84:10:
aa:88:b8:d0:dc:15:4c:12:fc:cc:6f:23:89:cf:82:e2:7a:75:
e6:71:0a:c0:e7:c3:c0:91:de:5e:a3:69:57:d9:b9:db:8f:60:
80:9d:97:22:59:6d:b0:57:6c:33:a8:cb:4d:45:76:6a:3f:9b:
93:4e:46:b0:d0:86:d5:a4:5c:4e:c4:74:ff:66:da:57:89:63:
9d:13:b5:0a:ce:ba:15:df:cf:85:cf:ab:29:9f:3b:5d:05:63:
f8:45:7a:21:c9:d6:33:bf:f7:74:9c:58:ab:6b:21:29:6d:d4:
cf:47:32:67:04:71:8f:c4:25:bb:cf:38:1a:4f:50:f3:63:2d:
ad:ee:cd:00:c7:32:31:27:3b:f7:1d:f7:15:70:31:26:75:16:
50:21:0b:e8:9c:1c:30:42:7b:46:f0:40:38:e2:5d:18:1e:a9:
d4:8f:d7:52:29:28:1e:c4:e2:51:06:14:b7:1d:3c:54:28:49:
05:81:87:75:b9:0a:95:24:a9:ee:bd:6f:6a:a0:99:27:c8:42:
73:c7:80:13:5d:2d:4c:07:66:70:e7:6c:64:95:37:c3:77:69:
1d:e2:c2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFYwf1zVL4qLEvvTUXWRp17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk
Y2IwMzQwHhcNMjYxMDIwMTAwMTEwWhcNMjYxMDIxMTAwMTEwWjAzMTEwLwYDVQQD
EygxMWVlNDE2OTJlY2MwNTUyYzk1MmFlYmFkZTM3M2M2ZTBhYzRiNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssc6Auw+gYLOz/38wFH90R7XFmGp
zDkSj5ZKivYGcfnLXMzJrbtQlGIY4v4CFHQC7V9x510HNzJC4mNtgtWEs15njHW1
qODsnNHwMjmRFcYCr9NVMcmUs74GFAccVTl9v9OddK5c+OX1E3Tgw4XhO2K7O0X3
nIBaSduScaoFKJ60KSGJbHK4a9fLa1pwN6GtJy2zJfpfuS/DpllLfQeN1CFHWMuV
izEItyyQedY2y3FR0q1uoZZlW5XSY5utwfgwZA5uDbTKWd0azTU7moil18YUeN9r
zNA9vJ9i5SMaYm7d+AJdcMVLqD8zns/nE1b2PWauIXxxidZDT0Vg6lSN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHuQWkuzAVSyVKuut43PG4KxLVwMB8GA1UdIwQY
MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt
YWJkNjFhYTgyNDI2LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2
LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1NQZ1TL
Ke0GGmtQF95DDJEsHBtHkGBSw1Y8XFcpXBkPPYQQqoi40NwVTBL8zG8jic+C4np1
5nEKwOfDwJHeXqNpV9m5249ggJ2XIlltsFdsM6jLTUV2aj+bk05GsNCG1aRcTsR0
/2baV4ljnRO1Cs66Fd/Phc+rKZ87XQVj+EV6IcnWM7/3dJxYq2shKW3Uz0cyZwRx
j8Qlu884Gk9Q82Mtre7NAMcyMSc79x33FXAxJnUWUCEL6JwcMEJ7RvBAOOJdGB6p
1I/XUikoHsTiUQYUtx08VChJBYGHdbkKlSSp7r1vaqCZJ8hCc8eAE10tTAdmcOds
ZJU3w3dpHeLCSg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:26:09 2026 by rpki-client