Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: EaMTNiC/DzNk4cR+mmOffUcVUTh73VvublGiKBrGSlE=
Subject key identifier: 14:FC:F5:80:DB:DE:5C:31:FA:90:5E:06:FE:57:7A:73:1C:17:0F:24
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019EF7CABD55E2B5CB784D0DEBD706E832CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 190B
Signing time: Wed 24 Jun 2026 04:01:59 +0000
Manifest this update: Wed 24 Jun 2026 04:01:59 +0000
Manifest next update: Thu 25 Jun 2026 04:01:59 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: Vc75rWA0jxr16NKBg+8NXBtmqOF2TGUrlrCp0YJKopg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:ca:bd:55:e2:b5:cb:78:4d:0d:eb:d7:06:e8:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Jun 24 04:01:59 2026 GMT
Not After : Jun 25 04:01:59 2026 GMT
Subject: CN=14fcf580dbde5c31fa905e06fe577a731c170f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:ae:84:b8:da:f4:28:b8:96:f5:24:66:82:
21:7c:59:6a:16:e4:ca:1f:52:79:9b:e7:30:48:bf:
55:7c:b8:cf:3d:d8:d5:b8:d9:bc:6c:ad:c3:73:8a:
b9:e5:ca:48:17:48:9b:24:06:74:89:c6:4c:88:15:
27:cf:a2:fe:08:44:da:4d:0b:aa:34:bc:4b:6d:36:
2c:67:ce:21:88:91:85:2f:1f:dd:8d:82:0d:2f:78:
85:75:2a:67:54:f7:54:28:19:99:c9:07:bc:2a:ba:
4d:b8:ea:be:a7:44:ba:3b:7a:ca:76:55:57:5b:3d:
6e:8c:2b:84:9f:0e:01:5d:c1:9c:aa:78:5b:7a:fa:
0b:8e:e3:a2:6e:c0:16:de:0a:22:ae:02:3b:22:0f:
64:e2:1f:14:51:bc:03:b6:dd:3a:34:a9:ac:fd:0e:
63:f9:5a:c1:05:a3:d4:27:a8:84:a9:4b:34:fb:56:
ec:67:3d:f8:9d:c5:c9:2f:0c:15:43:bd:b1:8a:73:
a5:2a:c3:36:53:46:e1:37:88:65:9c:64:5a:36:31:
58:83:a0:1d:91:be:4e:d1:58:c4:0b:66:79:17:6c:
da:3f:48:1f:eb:24:f1:cd:a2:38:0a:be:d8:38:62:
19:e5:65:ce:7c:9c:4b:8b:b4:38:7c:52:a3:3d:2c:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:F5:80:DB:DE:5C:31:FA:90:5E:06:FE:57:7A:73:1C:17:0F:24
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a7:7f:7c:14:5e:87:2c:59:65:b3:c1:b0:24:c0:aa:41:d0:
39:6f:c3:08:25:03:5e:96:9d:59:ff:95:6e:1c:6a:d0:0e:f6:
57:f2:53:44:65:8e:95:ca:a6:bb:d5:c7:e5:e6:0d:f8:bf:f1:
4f:b3:fd:2b:a1:74:06:8c:db:f7:bf:56:c5:0d:9c:23:af:40:
45:ec:e5:f7:89:95:a3:40:6b:c2:c3:d7:58:e2:93:b1:0c:8a:
f3:ef:a5:4d:da:f2:b8:d7:52:a7:4e:e0:e3:ca:dd:41:b8:22:
6c:34:bf:6e:8c:ad:ea:d1:c7:a4:03:e7:e2:0b:51:8a:87:cf:
2e:5b:0d:43:1b:8a:d1:46:16:8a:2d:db:a6:c6:38:3f:38:79:
52:44:50:53:8b:31:ee:67:53:12:37:94:e7:59:44:72:20:5d:
7d:6e:f8:10:b3:01:49:0d:b6:1c:22:d0:ff:15:eb:41:4d:19:
b6:69:78:bf:85:a6:cd:bf:2f:fc:f3:27:56:05:79:65:0f:30:
b4:5a:15:82:53:49:bd:ac:98:0f:a7:4b:09:5f:2a:1e:af:c3:
aa:f7:d2:09:a0:9e:68:99:ad:16:6c:1a:fc:f2:67:80:55:0e:
12:a5:c0:f2:e4:75:c8:fb:52:87:a1:76:39:93:e9:ac:8b:9d:
70:fe:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:24:22 2026 by rpki-client