Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: WRiMhMPf6aSgcAfKaed4yHrhTsDd2oNHlmZ+C2eTD3Q=
Subject key identifier: A9:BA:5E:D3:98:22:1E:8C:1F:56:9A:AC:00:DC:53:20:3D:E1:CB:08
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019DECDB4B5F351412DD9F8E8571F7565394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 18ED
Signing time: Sun 03 May 2026 08:01:27 +0000
Manifest this update: Sun 03 May 2026 08:01:27 +0000
Manifest next update: Mon 04 May 2026 08:01:27 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: m57eJKbqFf6pZ+tHDuWQHkuRK7efN9Vug+bxMEawNMk=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:4b:5f:35:14:12:dd:9f:8e:85:71:f7:56:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: May 3 08:01:27 2026 GMT
Not After : May 4 08:01:27 2026 GMT
Subject: CN=a9ba5ed398221e8c1f569aac00dc53203de1cb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:95:4b:1c:ce:8e:d8:1b:0d:ee:c2:74:98:
9b:53:3b:c2:9d:15:f4:2e:ab:4a:0c:7a:da:62:27:
87:e1:43:9f:9f:3e:d9:b3:6e:64:e3:f7:f9:ec:1b:
1d:65:88:11:53:5c:e0:e1:6b:db:dc:f5:36:ea:0c:
a1:f2:09:9c:c7:ae:e3:b7:ff:f0:1d:99:15:89:4f:
eb:65:e5:6f:81:0b:66:0c:9d:32:90:29:02:5a:50:
df:55:2c:36:1d:97:4f:5e:fa:cf:6f:80:1f:77:c4:
96:a2:74:a6:a1:6a:57:d2:2a:44:58:9e:63:de:e6:
4c:26:53:5d:42:a3:8d:86:e0:e1:42:2f:c4:92:84:
48:07:f6:94:e1:7b:81:9f:31:9d:85:13:04:70:af:
6c:43:82:fd:0d:e8:f8:d7:2d:0b:46:a9:3d:42:6f:
fa:19:60:7f:17:fd:b9:2f:7a:35:55:b1:75:02:1a:
34:ce:a6:9c:b7:70:ff:e9:b0:b6:44:44:a0:ee:84:
89:37:32:35:8a:d9:e3:20:92:c7:be:9e:33:3a:d6:
d0:4f:11:e3:68:2f:f2:01:bb:6f:e2:2f:65:c3:a3:
81:9c:62:d5:07:bd:b3:3e:1d:0f:d5:c8:9a:05:7d:
17:a9:32:79:52:92:35:fa:80:97:35:ef:a3:3c:ee:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:5E:D3:98:22:1E:8C:1F:56:9A:AC:00:DC:53:20:3D:E1:CB:08
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:37:e6:5b:0b:ba:59:08:ee:d1:a0:3f:b6:58:74:8a:74:
0f:4f:7f:81:32:16:f7:1f:10:99:43:64:10:24:f0:82:98:61:
5a:32:0e:56:d9:cc:6d:af:1a:2d:45:eb:e9:4a:9b:56:8c:e9:
b7:b4:17:74:f2:bd:91:55:fa:7d:bd:6b:5a:3a:2b:48:31:70:
c9:66:95:58:9e:06:8b:a7:20:3f:62:53:30:ef:cd:5e:88:02:
73:f0:a9:88:84:30:2c:7d:5f:6b:d7:ca:75:67:7c:7e:c1:15:
0b:39:b3:a7:18:2c:99:f7:7f:63:69:dd:86:77:8b:fe:e0:a9:
ee:f2:d8:ed:97:59:d2:e3:48:c5:1b:df:a7:d9:be:1f:f3:5f:
07:26:bd:49:3d:83:19:c8:41:36:72:30:21:f4:e0:01:01:35:
86:7b:4f:45:5e:08:ee:c3:4b:33:7e:7d:e3:e5:e0:49:3b:1b:
24:ca:e2:1e:93:a3:16:47:e6:d8:3e:07:b7:39:f6:74:a3:eb:
14:59:e2:f6:30:19:1b:76:67:90:60:a2:69:e2:ad:e1:23:c6:
3f:d9:80:9a:17:53:9f:5f:e2:d2:20:ee:be:b6:eb:21:6f:c2:
4f:d9:68:e0:94:c1:ad:35:7a:68:51:9e:7e:5d:77:9c:13:b2:
1d:c7:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:48 2026 by rpki-client