Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: pC10+ykF1txzNO1RY6eMUccY2rGe76rNuTPyRlffKBI=
Subject key identifier: BF:A0:FE:40:18:41:55:B8:32:C7:09:D4:4D:69:7B:83:C1:62:E0:2B
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019D077883A091A9AE292BECA401EBBCFE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 180A
Signing time: Thu 19 Mar 2026 19:00:31 +0000
Manifest this update: Thu 19 Mar 2026 19:00:31 +0000
Manifest next update: Fri 20 Mar 2026 19:00:31 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: 6c0hRZg8GWhjB60VpsXqpMzuGrhw17XxuV9nTM2FUqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:78:83:a0:91:a9:ae:29:2b:ec:a4:01:eb:bc:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Mar 19 19:00:31 2026 GMT
Not After : Mar 20 19:00:31 2026 GMT
Subject: CN=bfa0fe40184155b832c709d44d697b83c162e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:3d:0f:e4:b9:9d:b9:84:58:d6:6b:99:81:
9c:9d:3a:9f:5c:71:fc:0c:b7:a7:61:ff:ba:d2:93:
1e:53:0d:ef:24:f6:d3:ea:04:ad:61:43:01:06:eb:
f4:22:82:99:c2:53:e5:25:4d:84:d4:9d:7d:69:45:
d5:19:b5:b4:37:ef:b9:61:25:5d:ee:78:33:47:25:
9a:ad:5b:78:8e:22:55:66:f5:bb:3b:9a:e7:b2:f7:
09:4f:60:37:df:8e:be:94:af:74:c0:8e:85:d2:4e:
32:b8:e0:ea:e5:ca:1c:c9:89:03:23:bb:9c:24:11:
45:ca:26:17:a5:61:da:0b:7e:8c:4e:64:78:33:12:
8d:fc:81:72:2f:b8:3a:7b:29:c8:ec:aa:73:3b:fe:
91:b4:01:3e:dd:43:ce:7f:f8:b1:2d:e9:b7:24:71:
bc:48:d1:17:e0:cf:3a:e7:f8:57:3e:a0:cf:24:eb:
85:31:4c:eb:e0:6f:f4:a2:41:f8:c5:34:7e:26:17:
0b:e0:60:db:33:80:d4:19:0e:88:3d:03:d9:ca:dc:
81:df:fd:b4:88:9d:9e:b5:b7:91:28:c6:48:5f:ac:
96:a8:8e:98:87:32:81:36:b7:62:3e:8b:69:a2:52:
da:76:ff:8c:66:1c:8a:38:4e:56:56:45:4d:3c:87:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:FE:40:18:41:55:B8:32:C7:09:D4:4D:69:7B:83:C1:62:E0:2B
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:75:62:e1:cd:00:b6:37:a6:0e:e4:53:9f:d4:df:de:a0:
63:b0:cd:8b:b8:0f:10:81:e4:69:e0:d7:f6:25:e1:f6:9e:d7:
85:c4:03:8f:3f:a7:52:34:b9:ad:c0:b6:e6:09:88:d9:71:b0:
57:0b:36:d6:1e:29:80:35:53:26:bd:39:d8:bb:84:2e:66:57:
91:b7:b4:b8:06:08:46:93:30:3d:d6:e0:95:df:7c:15:9c:9e:
9d:35:f1:99:6d:81:30:73:83:7d:5f:c8:2e:46:fb:d5:e0:a8:
1e:4a:d9:63:7a:ac:e2:5b:5a:bc:de:b3:2c:a6:41:f3:f8:f2:
f3:3a:46:bf:a1:bf:a6:d8:c2:40:b7:9e:98:46:71:73:a8:cb:
2d:53:1c:cd:b1:20:54:97:28:c7:25:5a:d3:0b:28:ff:fb:d2:
ee:fc:16:80:a0:5a:20:0e:46:71:ee:d7:b9:89:29:31:60:9b:
71:bf:b5:5c:45:fa:15:0b:e1:48:58:96:30:37:60:e4:50:8d:
e7:a6:89:8f:44:fb:26:17:43:80:ca:0a:16:92:25:42:6c:98:
bc:8e:de:c8:a0:89:8b:ee:eb:b7:61:29:7b:31:05:42:c4:6e:
c6:e6:b1:15:21:32:93:d3:6a:64:a3:c6:da:3e:02:0e:4b:01:
44:d8:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:37:46 2026 by rpki-client