Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: X5qJaDp/fgnjdV1/R9lsvP1twET+TW3Qv0CgpRxHZr8=
Subject key identifier: 8B:A2:14:67:56:4C:AD:BB:E7:28:39:56:05:0A:55:D1:8D:31:63:AA
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019E30A9B6910FD2A64FC0BAC5A51E2EE71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 191F
Signing time: Sat 16 May 2026 12:01:29 +0000
Manifest this update: Sat 16 May 2026 12:01:29 +0000
Manifest next update: Sun 17 May 2026 12:01:29 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: XkyTyBaZnFqqtEycm1uORSw+YfTV7xswv/a3YsBr14k=)
2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:b6:91:0f:d2:a6:4f:c0:ba:c5:a5:1e:2e:e7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: May 16 12:01:29 2026 GMT
Not After : May 17 12:01:29 2026 GMT
Subject: CN=8ba21467564cadbbe7283956050a55d18d3163aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:7d:69:a2:88:9d:3c:29:15:56:70:6a:cf:
9f:66:f1:e6:dc:c8:55:22:eb:f4:af:fa:5b:c3:d6:
70:91:a3:4e:40:6a:16:aa:e1:47:75:a6:6d:3f:b3:
2a:19:17:02:31:2d:50:4b:04:c2:65:47:59:d0:1b:
90:42:ac:9e:00:2c:07:05:2e:ea:e2:0a:17:77:25:
06:bf:84:a3:20:b6:f4:3c:f5:04:a9:7b:58:7f:c4:
d1:a7:cf:6a:6f:2d:15:94:b8:da:3f:3f:b0:86:c7:
bc:48:95:08:a5:73:e1:90:ef:f6:4c:7c:75:f9:4b:
50:ba:8a:42:ce:ab:1b:2c:93:ed:81:e9:5a:d9:11:
31:5b:04:f5:ea:fb:c0:8c:4b:45:3d:a5:6e:ec:3f:
32:5d:40:4d:84:b6:04:d7:4b:a0:c7:ae:1f:c4:7c:
b4:34:e4:a5:44:6c:eb:28:d0:19:7a:f7:ed:b3:bc:
a2:fb:cc:71:22:74:9d:64:aa:a9:cf:15:b2:85:ed:
b3:9e:1b:fe:79:4f:ed:48:8a:fc:d3:a3:89:eb:c1:
93:e3:22:fc:1a:1f:69:0a:71:d3:dc:cc:60:e7:32:
cc:b8:7a:c3:0a:f8:f0:0b:c0:3e:62:d6:03:0f:25:
64:b3:48:9d:31:40:9d:24:62:17:1e:bf:f2:b2:6d:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:14:67:56:4C:AD:BB:E7:28:39:56:05:0A:55:D1:8D:31:63:AA
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:2b:d7:42:91:d1:2b:3b:c3:79:9e:56:c8:9a:4b:dc:da:
34:24:cc:de:2a:89:d8:6b:02:28:d3:52:b8:dc:78:4c:07:78:
d6:c6:a7:b0:e6:22:42:5c:f9:a9:73:7f:ed:59:7d:03:8f:44:
f2:7b:1e:fe:c7:a2:34:38:bb:79:3a:20:70:24:f4:d6:2b:59:
b2:b0:08:23:ff:5a:e0:d7:0e:88:e8:0f:61:67:1d:eb:aa:96:
9a:12:93:81:e3:51:87:c4:f3:fa:5d:48:78:7e:bc:8f:86:5c:
39:ae:41:b7:48:ae:5d:6a:6b:8b:ab:1c:b7:fe:6f:36:d8:00:
4a:b0:42:5c:00:dd:8a:d0:e8:7d:8e:42:11:3f:e1:4c:8e:d1:
8c:c0:df:5e:c7:00:40:56:f9:b9:36:8b:ab:17:f7:17:97:5b:
a2:c4:5d:66:a3:e8:82:76:97:ad:a5:88:15:f7:37:43:8f:af:
ba:18:a9:cf:95:f5:09:25:05:e4:81:89:5a:97:cd:78:32:13:
ba:37:3b:d0:e0:69:32:af:97:b9:29:76:d4:15:0b:bf:3a:15:
c1:cc:8c:ee:ce:83:c7:8c:26:33:f7:d2:ed:02:0d:10:a4:6e:
2f:77:30:c6:a1:ec:af:72:20:f5:d2:50:89:ba:e1:e3:7e:19:
b8:bc:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:35 2026 by rpki-client