Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: HJDr379EvDAzYZOc7zRYpDraFJRgbYRN0Yw8fAUS4fY=
Subject key identifier: 52:4E:0A:C9:3D:56:81:D7:F2:8D:82:23:64:6C:18:26:44:D1:2E:FD
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019E39ACF8415F6A3AC7A0AE401E2FB622D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1918
Signing time: Mon 18 May 2026 06:01:37 +0000
Manifest this update: Mon 18 May 2026 06:01:37 +0000
Manifest next update: Tue 19 May 2026 06:01:37 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: TAv7MjfvmLpY1VMGVxE0z6yG2G1rXxGE7gma3P4E8wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:ac:f8:41:5f:6a:3a:c7:a0:ae:40:1e:2f:b6:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: May 18 06:01:37 2026 GMT
Not After : May 19 06:01:37 2026 GMT
Subject: CN=524e0ac93d5681d7f28d8223646c182644d12efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:4f:a9:4d:ea:79:5d:5d:04:c3:cf:99:a0:
26:e2:2e:b6:50:ef:00:fe:22:d1:ba:90:18:d6:01:
9e:f2:18:70:04:83:49:35:44:fb:ac:32:ed:e8:b8:
45:b3:fa:b7:9b:16:4b:08:79:e5:21:a1:fd:97:e9:
69:40:ad:6f:fa:c7:bc:24:a9:f5:3a:17:b8:ce:53:
79:d2:3f:57:30:e8:5a:dc:62:82:30:ef:87:84:ee:
aa:e3:3b:33:ff:d6:a3:d9:ea:ae:4b:08:de:2b:99:
7e:59:a5:09:e5:94:d6:e8:53:c4:51:a0:45:af:56:
e9:86:33:1b:ca:d3:87:e1:27:74:08:05:16:cc:49:
17:bd:c0:c3:e0:8a:87:10:65:c6:3c:a4:cb:c5:a0:
41:b5:9e:51:29:52:d6:99:b2:16:07:d0:8f:74:37:
28:10:4a:7f:a7:e7:49:a0:8d:dd:b0:38:c3:40:21:
ba:b2:b3:0d:2d:29:91:cc:6a:90:8a:92:3c:cb:c6:
5d:25:59:b0:0b:12:d0:71:1e:09:5c:80:47:27:86:
0f:a6:e9:5b:40:bd:84:00:c4:4b:1d:c7:ce:57:45:
70:fe:75:59:8b:df:f7:2e:32:c7:a3:a5:4b:1c:a0:
3f:11:18:e0:85:62:f0:55:e5:dc:f1:c7:74:4e:e8:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:0A:C9:3D:56:81:D7:F2:8D:82:23:64:6C:18:26:44:D1:2E:FD
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1e:f5:23:11:65:65:03:b7:14:ac:c7:4d:66:f5:e9:22:92:
a7:31:46:c6:f8:e7:4e:1a:69:4f:f2:be:34:2f:75:66:f5:7c:
77:2c:83:df:be:d8:da:23:77:3b:11:a1:b4:0e:0f:16:93:af:
26:8e:cd:0a:a0:9d:42:b0:00:d6:c2:05:36:e9:04:5a:1b:2f:
1f:cf:e6:29:c5:f6:07:83:6b:85:61:d3:65:70:66:71:d8:44:
91:21:7c:9d:8c:2c:cb:46:86:fe:48:81:ac:70:47:69:33:b2:
d3:05:7a:79:ef:f9:41:37:d9:70:f7:ce:89:cb:e5:ac:0a:6a:
55:92:dd:1c:04:b2:38:6f:61:47:9b:2e:12:96:25:16:68:f8:
33:a9:5f:63:d7:f2:0d:06:72:3f:73:2f:8a:d8:d0:27:2c:d9:
38:49:f6:56:e1:26:20:dd:5a:67:ec:c0:ac:ad:40:72:98:b1:
74:a5:2a:a5:9a:2e:c6:6a:98:6e:58:28:5c:41:b9:a4:e7:f1:
94:be:da:7b:41:04:69:a2:79:fb:db:e3:75:4d:cb:a1:7c:e9:
02:b2:9e:29:6e:2e:77:52:72:65:7c:bd:cf:d8:1d:a5:5c:29:
58:be:0a:7f:c1:a1:07:a9:24:d5:9f:5f:3c:1c:7f:18:fe:28:
44:32:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 12:44:25 2026 by rpki-client