Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: /+j1a76XE1DiiywWxpr0vcYMhUPw55RuLyJF7vXbEJA=
Subject key identifier: 7D:3C:4E:C9:69:D5:6C:A9:B6:8D:FE:CA:BC:E6:48:52:9F:DA:F7:E3
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019E00993CCA689A7CE6F619D5E9B85CC25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 188B
Signing time: Thu 07 May 2026 04:01:43 +0000
Manifest this update: Thu 07 May 2026 04:01:43 +0000
Manifest next update: Fri 08 May 2026 04:01:43 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: n9KtmQcDeXvbHZ7uxDnBMcDDf0ONlfMi/epU8Cq+HiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:99:3c:ca:68:9a:7c:e6:f6:19:d5:e9:b8:5c:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: May 7 04:01:43 2026 GMT
Not After : May 8 04:01:43 2026 GMT
Subject: CN=7d3c4ec969d56ca9b68dfecabce648529fdaf7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:fc:ec:0b:99:f1:96:a7:d0:23:2f:3c:59:
7d:0a:4f:09:1a:97:16:cf:ba:70:f3:77:5f:fa:f5:
15:8c:6c:da:d5:5b:17:98:5b:a2:ba:5f:af:7b:c5:
1d:bc:3f:48:87:b1:ea:7a:b2:11:eb:13:3b:ae:7f:
bb:f5:08:4b:eb:55:6e:77:6f:a6:a8:f1:0b:f6:c5:
cb:a2:ef:82:96:13:b0:f9:11:80:15:66:68:06:a4:
a7:38:fa:bb:e7:30:70:f6:33:de:af:55:50:fe:50:
97:5b:34:5b:0e:f4:9c:50:fe:7d:0d:fa:86:1c:c2:
fc:10:d6:c5:56:36:1d:21:52:35:ea:88:86:8d:b4:
15:db:4f:fc:bc:be:84:77:17:5f:7a:12:ed:ec:99:
81:d1:fc:94:3e:07:ab:2d:ce:58:69:1f:51:84:c2:
52:dd:2f:4c:bc:ad:18:a5:d4:42:48:07:65:09:26:
5d:30:20:43:5b:b1:59:82:a2:5a:61:bb:8b:36:15:
0a:c9:b2:a1:5a:b8:6f:ae:cc:57:af:0d:8d:56:46:
26:34:e1:0e:65:bf:53:4d:af:54:c2:8f:38:40:a6:
4c:9f:7f:8b:9c:f6:3c:d6:00:89:03:36:b1:53:56:
c7:04:ad:6c:69:3d:4a:a6:9f:f6:4a:df:06:25:b0:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:4E:C9:69:D5:6C:A9:B6:8D:FE:CA:BC:E6:48:52:9F:DA:F7:E3
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:08:81:84:7d:72:1d:d6:4c:dc:25:a8:c4:91:f7:93:70:
c6:25:c8:ed:f0:61:1b:42:09:ee:4a:a6:bc:ec:6e:56:5b:ca:
8d:42:39:6a:58:ba:5e:91:87:cd:73:08:99:8d:cb:d3:f2:04:
68:ce:58:15:f7:a9:85:80:45:44:b4:5a:2b:10:30:15:b9:f9:
f7:67:ac:9c:2c:80:69:15:d7:aa:10:df:5e:8d:c2:29:94:35:
51:ef:cb:d5:50:c3:86:d4:13:3f:3f:ec:50:b8:c1:9f:1c:70:
ed:61:26:4a:ef:6c:81:c0:6a:62:20:fc:aa:b3:2c:db:70:92:
e1:44:85:08:32:59:ab:95:6f:07:98:28:2e:ea:85:2f:5e:66:
42:6c:2e:3d:26:d3:61:48:6e:c2:fc:36:c3:1a:af:0f:e1:d5:
38:4c:ea:3b:b2:e5:e4:f3:ea:53:24:7c:5b:05:3d:70:c0:d2:
aa:28:57:90:92:d7:8b:b0:e3:61:ec:11:a2:d6:b8:7a:e0:07:
e1:3e:8a:d4:2c:ae:46:d8:d5:86:12:6d:bd:56:a1:42:e5:e7:
12:8d:f8:1b:7e:99:35:2b:05:89:1c:b5:39:cb:08:ba:24:a3:
28:f2:e1:e4:4e:eb:f0:e8:d6:11:16:0e:ab:f7:19:7b:f7:87:
df:85:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:33:59 2026 by rpki-client