Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: 44AB86IXUdjIb4lRixWojVZUC/nJ7bLzFgui8l0iyQw=
Subject key identifier: E3:AC:5A:FB:B7:23:86:8B:7E:03:E8:F6:34:31:8C:F4:53:37:7E:0C
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019E295D91DA855C34490D2DB0B1AC58F28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 0158
Signing time: Fri 15 May 2026 02:00:58 +0000
Manifest this update: Fri 15 May 2026 02:00:58 +0000
Manifest next update: Sat 16 May 2026 02:00:58 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: bQlzwDZaa0idJPHPbae2Ww8OX8BeBfHyHo9R9poHyW8=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:91:da:85:5c:34:49:0d:2d:b0:b1:ac:58:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: May 15 02:00:58 2026 GMT
Not After : May 16 02:00:58 2026 GMT
Subject: CN=e3ac5afbb723868b7e03e8f634318cf453377e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:c2:c5:de:63:02:49:91:6c:2a:97:3d:c7:
f1:18:28:75:be:a5:40:ec:00:bc:0d:35:b0:2e:a5:
8f:e3:7e:8f:6b:25:9d:12:e3:69:2f:0d:06:00:44:
53:2d:51:29:0b:8f:d1:15:cc:ff:16:9a:e6:37:1a:
83:93:0c:9e:dc:32:60:43:25:1b:0f:77:a7:2b:f0:
fb:71:3e:17:64:6b:07:ae:fe:86:7a:8f:73:92:c5:
b3:0a:f1:83:74:8c:64:59:26:5d:fc:ad:fe:7e:34:
4d:0c:51:ec:7f:13:c1:ca:24:e1:30:f2:2d:90:bd:
7a:1c:55:81:a6:ad:f1:dc:c9:7d:0d:7b:6c:32:01:
0b:f9:51:4c:d3:e6:92:3f:67:76:7f:52:6b:b4:37:
94:60:53:f0:ae:44:12:5a:39:1d:11:8c:77:43:90:
18:f3:af:fa:79:4a:61:28:7b:7f:88:35:6f:69:a7:
67:c5:73:5a:9d:95:a4:95:0b:0b:33:a7:da:a6:6d:
0e:89:11:16:78:99:d6:f3:ca:c3:08:b0:6c:4a:b5:
47:ed:30:75:b2:71:e2:0e:6f:53:9f:5e:91:16:3e:
3b:f7:bb:b9:ab:a5:25:3a:1b:aa:80:0e:26:da:86:
8d:bd:64:18:08:7f:26:60:8b:89:b8:9e:62:62:c9:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:5A:FB:B7:23:86:8B:7E:03:E8:F6:34:31:8C:F4:53:37:7E:0C
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:68:1b:29:be:94:c1:3c:d6:10:7e:43:5b:9a:e9:90:f7:60:
ab:a7:f9:7b:19:23:e0:11:0d:17:fa:be:21:0b:55:7e:25:84:
58:5f:9b:4b:56:c7:94:b0:5b:ab:b8:8d:94:a8:af:22:ad:7c:
d9:4f:30:89:d4:db:f1:a2:43:33:71:68:e6:ea:c2:95:65:18:
5c:d8:b7:fa:e6:84:4b:6c:34:10:3f:38:3e:57:16:80:a0:76:
03:f1:66:50:b0:24:f5:e8:20:87:64:d2:78:e4:eb:7e:72:1f:
31:60:6f:b9:cf:a8:e1:81:d7:8c:33:1d:de:ed:bd:0c:47:1e:
d6:f6:2f:ac:83:a8:48:fb:80:43:c5:62:94:ef:7d:a3:4f:89:
cb:6f:fb:00:c7:67:e6:9c:6d:2e:d1:80:ea:3b:77:55:b0:f3:
9d:5f:25:32:a4:ef:5c:da:56:70:32:a1:78:46:f9:f1:c5:68:
7d:8a:ad:e4:0b:35:69:85:98:73:27:f8:7c:0f:21:16:04:ad:
33:14:87:cb:dc:37:5d:02:a7:a5:6c:49:fd:ee:c8:92:c7:4d:
37:3c:e0:cd:8c:51:74:71:b7:a9:7f:a5:b3:5e:1e:88:79:ae:
8d:c9:0b:d0:15:b1:ec:f7:87:24:8c:0b:90:16:b2:26:29:f1:
5d:a2:00:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXZHahVw0SQ0tsLGsWPKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2E1MjYxMGM3N2MyNDA2OWM2YTY1OWY1Zjc1ODYyNDQ0
ZDIxZDEwHhcNMjYwNTE1MDIwMDU4WhcNMjYwNTE2MDIwMDU4WjAzMTEwLwYDVQQD
EyhlM2FjNWFmYmI3MjM4NjhiN2UwM2U4ZjYzNDMxOGNmNDUzMzc3ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvfCxd5jAkmRbCqXPcfxGCh1vqVA
7AC8DTWwLqWP436PayWdEuNpLw0GAERTLVEpC4/RFcz/FprmNxqDkwye3DJgQyUb
D3enK/D7cT4XZGsHrv6Geo9zksWzCvGDdIxkWSZd/K3+fjRNDFHsfxPByiThMPIt
kL16HFWBpq3x3Ml9DXtsMgEL+VFM0+aSP2d2f1JrtDeUYFPwrkQSWjkdEYx3Q5AY
86/6eUphKHt/iDVvaadnxXNanZWklQsLM6fapm0OiREWeJnW88rDCLBsSrVH7TB1
snHiDm9Tn16RFj4797u5q6UlOhuqgA4m2oaNvWQYCH8mYIuJuJ5iYslOmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOsWvu3I4aLfgPo9jQxjPRTN34MMB8GA1UdIwQY
MBaAFEzKUmEMd8JAacamWfX3WGJETSHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQt
MWIwM2U1ODk0ZTA1LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQtMWIwM2U1ODk0ZTA1
LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmgbKb6U
wTzWEH5DW5rpkPdgq6f5exkj4BENF/q+IQtVfiWEWF+bS1bHlLBbq7iNlKivIq18
2U8widTb8aJDM3Fo5urClWUYXNi3+uaES2w0ED84PlcWgKB2A/FmULAk9eggh2TS
eOTrfnIfMWBvuc+o4YHXjDMd3u29DEce1vYvrIOoSPuAQ8VilO99o0+Jy2/7AMdn
5pxtLtGA6jt3VbDznV8lMqTvXNpWcDKheEb58cVofYqt5As1aYWYcyf4fA8hFgSt
MxSHy9w3XQKnpWxJ/e7IksdNNzzgzYxRdHG3qX+ls14eiHmujckL0BWx7PeHJIwL
kBayJinxXaIAQg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:43 2026 by rpki-client