
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
File: TZkZWi_leH1dYCYBjDUY88HlABk.mft (raw, json)
Hash identifier: yuP5sYPlAQt4pMmFfhwLcDiHrZUjHgd2oPtEutzHGiM=
Subject key identifier: 63:A3:3B:9D:18:3B:6F:2A:55:EF:92:91:2E:C2:D2:BB:34:1B:04:E7
Authority key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Certificate issuer: /CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Certificate serial: 01A17BF2D98A979436C5CA45499366D10BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:01:15 +0000
Manifest this update: Tue 27 Oct 2026 06:01:15 +0000
Manifest next update: Wed 28 Oct 2026 06:01:15 +0000
Files and hashes: 1: TZkZWi_leH1dYCYBjDUY88HlABk.crl (hash: WZJaTXrysOE+jljFPwkcLtM1zYmWegUjqLduCtqqH9Q=)
2: iZEmjwEPRyx8QyyQn4gnbiaigT4.roa (hash: I3dS4NuQKJEmxy0uXjJxX1xrNFM+VLP6Pll5fzdeVhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:d9:8a:97:94:36:c5:ca:45:49:93:66:d1:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Validity
Not Before: Oct 27 06:01:15 2026 GMT
Not After : Oct 28 06:01:15 2026 GMT
Subject: CN=63a33b9d183b6f2a55ef92912ec2d2bb341b04e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:7f:36:17:d7:5c:e9:1d:9d:7d:fb:90:36:
87:4b:14:c7:36:c4:69:63:32:cc:19:33:69:0b:48:
c1:3a:c1:96:08:29:93:5f:6e:f6:c0:d8:5d:e7:11:
a4:30:f6:0d:ba:6c:b4:21:a6:a8:9c:ff:2c:46:53:
84:cb:a3:e4:4d:06:3f:0e:2e:fa:8a:53:d4:f4:51:
ad:ef:19:55:3b:29:dc:90:d2:7e:9f:39:1f:42:f1:
ee:40:24:f4:3a:21:47:bd:79:9e:92:0a:2c:f8:41:
99:9e:ab:b0:76:c9:78:25:ad:7d:e7:e5:04:81:61:
ab:c5:ed:e3:95:a9:e8:66:ee:96:f6:f0:a0:71:2a:
a3:a0:86:d1:9d:f5:5e:7c:a6:ce:9d:0e:d9:ac:5f:
0f:f3:c5:ca:e0:64:71:db:e1:2a:6c:bd:d7:f4:e9:
87:20:f1:65:50:68:21:de:8e:2c:41:65:d3:6b:29:
f4:a3:4f:f3:21:9b:72:b9:ca:86:35:64:49:29:25:
58:a5:9b:83:40:d2:44:49:28:64:34:19:70:3e:4a:
6a:50:6a:2e:ee:b3:e8:a6:61:81:ff:1d:bf:0f:a3:
d2:42:56:bb:39:d2:55:8f:e8:fb:eb:11:f0:5b:3b:
77:52:a3:c1:cf:88:66:d4:19:2b:00:fa:9f:90:79:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:3B:9D:18:3B:6F:2A:55:EF:92:91:2E:C2:D2:BB:34:1B:04:E7
X509v3 Authority Key Identifier:
keyid:4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:92:fb:da:1b:6f:0f:93:95:7a:9c:4b:1a:07:2f:4c:4b:a9:
fd:79:d9:26:45:ec:27:68:b5:ac:65:2b:da:c3:73:c7:bf:99:
ca:04:75:14:98:d0:06:a3:e2:b9:3b:99:8f:08:c1:6c:a7:7c:
0e:bc:98:db:b0:0f:2a:28:ad:1a:e0:a9:a5:25:14:42:6e:94:
2b:25:90:8f:85:cf:29:5d:fe:0f:55:ed:22:68:34:20:32:33:
c9:c8:e9:11:46:1b:b9:bc:12:55:0f:89:3e:02:8c:43:f9:ed:
a0:cc:fa:94:8c:17:db:9f:7d:c9:06:fa:83:e7:65:79:4c:92:
c5:49:7b:3a:be:de:da:2a:43:a7:c2:6f:f5:4a:97:fc:9b:50:
72:80:54:f3:e7:dd:8e:84:43:54:bc:e2:0b:cc:8f:27:26:d9:
9a:08:d4:a2:5d:e9:b0:76:81:be:83:a8:2c:e3:87:41:e9:a0:
fe:06:46:7b:b6:b0:6c:df:16:b2:3c:d1:0b:bc:71:a7:4c:97:
22:3c:e5:b4:d4:1a:5f:f2:35:ef:35:c3:51:b0:c4:c0:e9:c5:
16:5e:92:0e:5a:80:48:4e:dc:af:4d:34:c8:e8:52:29:4b:6c:
6a:7b:d7:3f:cc:1a:7c:92:bf:ca:65:2e:66:f2:69:65:cf:63:
8e:3d:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:16:37 2026 by rpki-client