Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File: TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier: 3gseos+w57Dtu/uPxPwtnFwHNniB2BWjhlFVPRN0Pvo=
Subject key identifier: D4:A0:F2:86:AD:E2:1A:D7:8B:62:3B:3D:A1:B9:ED:B2:7F:3F:83:D9
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019E59007D4A129A7616DB52C435FDC1E87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number: 0113
Signing time: Sun 24 May 2026 08:01:04 +0000
Manifest this update: Sun 24 May 2026 08:01:04 +0000
Manifest next update: Mon 25 May 2026 08:01:04 +0000
Files and hashes: 1: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: d9LBOT/e3QjBq0RQ+MEJKiV9PNBoioWlrwOsufMR42M=)
2: cUio0hpjsJnRx8AmIaqnQMfptkc.roa (hash: TloXswXFjgPJXy/hhj6UJV/95L074RAak3LmtcO6r04=)
3: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:00:7d:4a:12:9a:76:16:db:52:c4:35:fd:c1:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: May 24 08:01:04 2026 GMT
Not After : May 25 08:01:04 2026 GMT
Subject: CN=d4a0f286ade21ad78b623b3da1b9edb27f3f83d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:6f:00:2e:df:3d:bc:e8:df:e0:d4:61:30:
8e:df:67:71:58:fc:60:4f:d0:e4:f0:2e:28:ca:88:
b5:d9:5c:fb:d0:fb:d1:5c:64:01:28:a7:54:47:11:
84:59:1f:6e:90:d2:62:d7:11:e4:d5:36:13:d4:3c:
4b:a3:ba:db:f4:ce:34:28:7e:cd:bf:cb:21:11:b6:
2b:44:b4:78:b2:f7:25:3c:b1:f8:6a:e7:23:d3:0f:
06:db:c0:23:88:c2:c1:fa:54:0e:6f:c2:61:10:c6:
fe:dc:d5:c8:5c:bd:b3:27:71:3b:df:dd:6e:52:6a:
a9:10:fe:6d:af:79:d0:9f:97:e5:9a:a5:c1:3e:df:
2d:4d:b6:d9:9f:d1:d5:bd:1e:4a:09:79:1b:2d:a5:
fa:e8:ab:ef:49:ae:48:f5:19:71:5d:f2:37:2a:22:
8b:c5:3a:c9:d3:37:53:75:16:03:36:93:c4:de:aa:
bc:8b:8d:87:cc:db:04:59:cd:91:7d:97:a0:fc:60:
13:3b:86:24:f8:d0:b2:e4:cf:c7:80:77:f6:3b:fd:
0f:5c:84:ab:78:33:17:f6:33:a0:76:53:b3:17:73:
8a:14:24:58:3e:07:ce:03:f5:1d:ef:a0:8c:d1:09:
b7:40:70:16:b1:f1:41:a4:cb:a9:44:79:45:5c:16:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:F2:86:AD:E2:1A:D7:8B:62:3B:3D:A1:B9:ED:B2:7F:3F:83:D9
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:67:bc:5a:75:c7:33:72:8b:53:ef:7d:66:80:85:4f:8a:f4:
5d:39:19:25:d4:db:fa:57:d0:2d:b5:ea:05:9c:b3:cd:5b:3c:
cb:34:32:f3:77:ce:05:3b:eb:0b:7a:c1:6f:f3:3c:ee:f3:db:
1a:17:68:e5:71:85:ba:6f:16:62:68:4c:ee:bb:ef:25:a3:9e:
2b:b3:58:31:f1:10:65:ba:84:a6:52:aa:e9:cf:2b:8e:56:69:
d3:59:e9:6a:59:47:3f:b3:29:b8:71:38:99:6a:50:f2:f8:d1:
26:b6:8b:de:8f:d8:b1:5e:f3:10:86:8a:29:3a:fe:58:cd:d6:
3f:d1:f3:ab:18:61:61:f9:c7:c4:1e:ec:94:99:98:6c:ae:bc:
9b:83:f4:e9:7a:13:1b:41:53:20:21:a2:2b:03:e7:9d:34:10:
41:d7:7e:6f:4b:6e:9d:1a:37:40:ee:80:eb:09:99:6d:f0:66:
6a:5e:85:8d:c3:5f:c6:c4:56:61:02:9f:13:65:e0:7a:99:3a:
8f:9a:fc:05:84:6b:12:d6:72:1b:c2:b5:4d:17:95:b1:19:14:
cf:99:88:27:e5:04:5e:b3:9c:fc:e4:6c:43:bd:45:d4:e6:97:
8b:0e:4b:fe:dc:60:c9:55:74:3a:1c:34:dd:7a:e3:e4:f4:76:
06:72:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:47:58 2026 by rpki-client