Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: PIkSDaR9N7X6cBNoYgfGk4KnedtjUsB1qDek3juJ/Jg=
Subject key identifier: 0A:C2:64:56:FA:81:4F:DE:AC:96:C7:34:5E:44:FB:C5:31:60:D6:85
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019EFBA8CBD1CDBBD7D21EFBF9E3AAEEEDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0BE9
Signing time: Wed 24 Jun 2026 22:03:23 +0000
Manifest this update: Wed 24 Jun 2026 22:03:23 +0000
Manifest next update: Thu 25 Jun 2026 22:03:23 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: yMQ3f3InuXZcavyqPlIG3pC7iHQxfgeVjb8ZZ+090rw=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:cb:d1:cd:bb:d7:d2:1e:fb:f9:e3:aa:ee:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jun 24 22:03:23 2026 GMT
Not After : Jun 25 22:03:23 2026 GMT
Subject: CN=0ac26456fa814fdeac96c7345e44fbc53160d685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:ac:15:18:de:06:f0:85:09:13:39:32:62:
45:53:b8:b7:a9:c9:2b:32:48:cc:90:db:fb:0a:5f:
1c:a9:93:0b:13:37:2a:07:3e:92:a8:a0:a1:69:f8:
84:36:ad:ed:41:ea:0d:50:ed:fe:b7:ad:3e:5e:0b:
cf:4f:aa:c4:ba:68:5e:bd:f1:19:c1:5c:1e:3b:20:
f8:96:ee:02:02:c8:09:b7:60:d6:ac:bf:3d:ea:30:
ef:44:68:4f:75:0d:27:7d:75:0b:18:37:77:53:d6:
8d:b0:77:69:22:b0:27:b2:ee:cb:77:82:c4:a1:49:
ec:ed:93:e7:e8:5d:af:ba:a1:97:3b:b8:60:a2:8c:
5f:42:11:85:73:e3:c0:f6:55:6f:73:9a:69:6f:d1:
b2:ba:1a:fd:fb:25:b1:56:05:6d:4d:3e:e3:25:51:
6a:e4:93:11:79:6d:76:bb:05:66:3a:fa:78:cb:70:
34:4b:b1:31:0b:d2:de:e7:cf:17:37:81:78:69:8c:
55:66:e8:36:ee:5f:85:da:51:2b:76:79:0f:0f:62:
ec:4d:c3:45:58:f4:23:3f:f3:36:d9:a0:14:80:c1:
fb:f6:92:b6:e6:13:57:6f:55:04:1a:b3:b2:53:eb:
22:ce:d8:0b:d5:a4:23:ac:d0:61:cd:2e:d8:a9:9f:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:64:56:FA:81:4F:DE:AC:96:C7:34:5E:44:FB:C5:31:60:D6:85
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6c:cb:2e:0a:b2:23:d9:47:5b:7b:da:db:f9:12:f6:62:05:
0e:0b:bd:24:3c:19:b1:f0:3b:bf:41:89:f4:e2:ae:e1:4a:7f:
62:8f:ee:d9:24:1f:31:ee:19:9a:80:a5:a6:fd:41:68:79:b4:
a2:18:e1:5d:90:69:7c:30:6e:ec:72:cd:61:0d:47:ba:c6:ad:
f8:31:f0:e7:f8:1b:94:c9:58:cd:37:85:ac:38:74:54:d0:ab:
b0:0b:95:f9:a4:eb:54:72:90:6f:bc:60:d3:01:8f:3b:c3:c0:
de:66:ac:f1:ea:a2:ce:b5:78:74:55:db:13:22:3b:7e:2f:1e:
2a:b9:61:05:86:31:54:2d:0c:ab:31:8d:95:47:80:db:3f:bb:
85:d3:95:01:86:9f:11:6d:d2:53:2a:e6:16:54:c1:bd:bc:8c:
a4:0e:31:be:6c:b3:30:fc:09:73:a6:c0:a5:5d:ac:f6:4f:c2:
05:48:a7:67:4b:c4:f9:cc:9e:94:36:fa:11:e0:fe:27:f9:be:
14:95:a1:7b:9d:66:ec:eb:6b:1c:f7:36:48:da:c0:af:cd:6d:
96:6a:f5:fe:b1:44:01:3b:fa:7d:70:94:2f:66:30:8d:b1:21:
43:a7:ef:9d:85:73:b9:5b:1a:ce:ce:34:e0:7d:e8:45:61:0b:
df:18:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:31 2026 by rpki-client