Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: LZIaT3a+GaRuXnmv5UHGgqGqQDCRoDhV32dIS2wuShw=
Subject key identifier: BD:20:87:28:AB:FE:6B:09:04:14:52:D1:29:10:8F:00:53:25:9D:5A
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019DDDD6898BDC70C566A97C5A15A1AB5DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0B55
Signing time: Thu 30 Apr 2026 10:01:57 +0000
Manifest this update: Thu 30 Apr 2026 10:01:57 +0000
Manifest next update: Fri 01 May 2026 10:01:57 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: aMeSML6ziqvsL9UZ3Kq1gBHxEHzMzIbFMcDPQk1jeiM=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:89:8b:dc:70:c5:66:a9:7c:5a:15:a1:ab:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Apr 30 10:01:57 2026 GMT
Not After : May 1 10:01:57 2026 GMT
Subject: CN=bd208728abfe6b09041452d129108f0053259d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:3f:10:fe:58:58:21:f7:30:59:cc:ab:06:
97:bf:ee:48:68:eb:18:d0:b6:6f:2f:98:46:f2:3f:
50:28:64:7f:4c:0b:87:8f:e0:65:d0:aa:9b:a5:f7:
9e:18:b8:c0:3d:1d:cf:ca:e3:e4:f8:38:58:8d:91:
a4:35:08:79:33:f3:e8:d4:e8:cc:9c:81:93:92:22:
92:b8:64:36:6c:d9:a1:f8:78:29:a8:26:cb:4c:4e:
43:c3:f8:fe:5e:c3:00:bd:11:82:0d:ed:8c:7c:32:
89:28:b1:08:7a:fd:27:4c:20:4c:32:9d:7e:35:06:
90:b2:c7:0d:0b:84:a5:e6:8c:d5:e2:f7:9e:72:d8:
f7:1b:6d:94:59:c9:ec:e5:6e:46:df:72:65:d1:cd:
38:a3:4d:55:54:73:fa:03:43:03:80:0b:35:c3:43:
2c:94:25:73:42:8b:67:84:0e:2d:dc:19:5e:47:83:
eb:8f:91:3e:a0:cf:10:7c:7a:d6:77:3b:43:83:5a:
da:5a:2e:6d:a6:e6:96:ab:04:17:cc:c9:3d:08:30:
2b:dc:9d:2e:0c:2a:cd:f2:07:7b:81:1b:99:52:29:
38:f1:0f:20:af:02:16:ea:a5:8c:8a:4b:4e:39:62:
57:bd:5b:e8:f7:c0:1c:0f:74:64:ad:25:0d:7e:cf:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:87:28:AB:FE:6B:09:04:14:52:D1:29:10:8F:00:53:25:9D:5A
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3c:6c:e5:4f:06:8b:49:05:71:b3:79:84:30:b9:fd:04:50:
57:d6:53:b5:42:da:08:e5:0e:fc:3c:be:bb:3a:4d:5e:4c:a6:
79:67:90:b8:e1:74:16:df:ed:0e:e0:97:2a:b4:6e:58:8c:af:
45:dd:bd:77:aa:82:25:3e:f0:1b:58:f4:d2:56:ea:c9:48:ac:
ac:6d:3f:d0:d1:77:50:a4:de:8d:7d:23:46:6f:84:bc:0c:5a:
7d:3a:49:24:05:eb:93:04:2b:de:d0:e4:4d:45:4f:9f:96:9b:
73:dd:35:5b:6d:c2:1d:02:77:9a:d9:a1:7f:40:96:da:dd:a6:
e8:39:67:e1:cc:c0:52:7c:db:44:2a:7f:8a:7e:73:6a:1b:33:
47:41:d7:ad:90:c9:e6:c3:77:4d:a7:54:c8:5e:87:09:63:7a:
ce:11:18:54:44:35:ce:79:99:2c:35:5a:18:53:fd:93:6f:2b:
7b:30:dd:b5:88:2a:00:e4:41:06:07:61:75:44:89:4c:b0:ca:
29:cf:53:ce:92:d8:1f:f8:22:09:af:5d:8c:b1:16:fd:45:0c:
84:88:e2:c5:ac:95:ff:05:90:33:c6:65:68:49:cf:18:25:ea:
e1:5b:da:26:d8:7b:09:26:57:58:f9:ac:07:ee:a0:52:f7:3b:
53:e4:fb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1omL3HDFZql8WhWhq130MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2
MzAxY2UwHhcNMjYwNDMwMTAwMTU3WhcNMjYwNTAxMTAwMTU3WjAzMTEwLwYDVQQD
EyhiZDIwODcyOGFiZmU2YjA5MDQxNDUyZDEyOTEwOGYwMDUzMjU5ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArig/EP5YWCH3MFnMqwaXv+5IaOsY
0LZvL5hG8j9QKGR/TAuHj+Bl0KqbpfeeGLjAPR3PyuPk+DhYjZGkNQh5M/Po1OjM
nIGTkiKSuGQ2bNmh+HgpqCbLTE5Dw/j+XsMAvRGCDe2MfDKJKLEIev0nTCBMMp1+
NQaQsscNC4Sl5ozV4veectj3G22UWcns5W5G33Jl0c04o01VVHP6A0MDgAs1w0Ms
lCVzQotnhA4t3BleR4Prj5E+oM8QfHrWdztDg1raWi5tpuaWqwQXzMk9CDAr3J0u
DCrN8gd7gRuZUik48Q8grwIW6qWMiktOOWJXvVvo98AcD3RkrSUNfs96xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0ghyir/msJBBRS0SkQjwBTJZ1aMB8GA1UdIwQY
MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt
ODc0MzMxNTdhMjViLzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi
LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTxs5U8G
i0kFcbN5hDC5/QRQV9ZTtULaCOUO/Dy+uzpNXkymeWeQuOF0Ft/tDuCXKrRuWIyv
Rd29d6qCJT7wG1j00lbqyUisrG0/0NF3UKTejX0jRm+EvAxafTpJJAXrkwQr3tDk
TUVPn5abc901W23CHQJ3mtmhf0CW2t2m6Dln4czAUnzbRCp/in5zahszR0HXrZDJ
5sN3TadUyF6HCWN6zhEYVEQ1znmZLDVaGFP9k28rezDdtYgqAORBBgdhdUSJTLDK
Kc9TzpLYH/giCa9djLEW/UUMhIjixayV/wWQM8ZlaEnPGCXq4VvaJth7CSZXWPms
B+6gUvc7U+T75A==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:54 2026 by rpki-client