Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: ObDlirOunixh7n8unIFzZI3q2byFHEFebnuskMVsBiA=
Subject key identifier: 0D:99:A3:44:10:3F:EA:99:B4:16:3C:14:80:92:D0:68:D0:03:5D:F0
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019CC004FAEB197C455D546AC28786F3C71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0ABC
Signing time: Thu 05 Mar 2026 22:01:17 +0000
Manifest this update: Thu 05 Mar 2026 22:01:17 +0000
Manifest next update: Fri 06 Mar 2026 22:01:17 +0000
Files and hashes: 1: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: nxFItbHnP2er1fp8E/UCs2gUIxXl9BDz0bF4mwakoh4=)
2: bgZQ4UEqqc2nBoH6BoGbh94tqMI.roa (hash: TI3RmrhW13Nq6yDFyJTeXpPjioYudBC6EapBtlWy/gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:04:fa:eb:19:7c:45:5d:54:6a:c2:87:86:f3:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Mar 5 22:01:17 2026 GMT
Not After : Mar 6 22:01:17 2026 GMT
Subject: CN=0d99a344103fea99b4163c148092d068d0035df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:f6:3f:38:48:54:28:ef:ef:d6:d1:5e:34:
cd:a2:18:df:98:8e:de:26:45:14:d4:9e:c9:55:a2:
46:e4:d1:c1:ba:11:ab:d3:18:b1:00:5d:02:1d:33:
cd:d3:9c:be:e2:22:54:ef:d7:3c:db:90:65:1f:e4:
ea:74:74:37:1f:c8:3c:40:80:de:14:fb:0a:b5:81:
fd:c7:5d:4d:74:67:1a:13:11:bf:3a:44:e4:52:9e:
d4:de:94:59:4a:db:dc:34:d6:8d:f4:02:f6:37:d5:
64:a4:ac:ce:bf:e1:91:22:73:ed:34:07:11:be:41:
68:ab:53:77:10:4c:ca:1a:1d:32:e9:db:32:12:bb:
f0:38:3f:47:a3:0e:e1:91:80:10:ca:ed:3c:8f:30:
0c:59:f3:f6:31:3b:a9:59:16:18:a2:bc:40:0e:7b:
21:3c:b0:aa:c4:c0:06:27:24:53:da:ec:25:b4:96:
bf:c8:f5:d0:fd:3a:9f:43:64:f2:ec:2f:d4:e0:83:
6d:35:dc:60:2a:91:e7:17:21:5d:d0:51:a2:12:02:
3e:f2:99:38:4b:c2:83:cc:62:06:3a:91:4d:ea:23:
9b:4f:88:4e:96:97:9c:3c:d7:a4:88:02:9c:1e:a1:
e9:02:77:31:ce:5d:e9:ce:3a:93:76:4a:25:24:c0:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:A3:44:10:3F:EA:99:B4:16:3C:14:80:92:D0:68:D0:03:5D:F0
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:36:cf:95:6a:04:ea:3a:5b:56:e0:93:eb:00:85:bf:88:
ea:85:cf:8e:60:26:78:0d:b5:99:ff:2f:93:3e:c1:61:f8:e6:
b1:d2:e9:10:6a:e6:65:39:7b:6c:44:ae:49:c6:3c:c3:0f:b5:
e3:fc:a5:1e:89:52:a3:93:fb:d9:18:a1:37:09:20:1e:31:42:
17:7c:26:34:25:8a:a9:d8:33:0e:2e:b3:24:98:55:c6:7a:7e:
e5:8d:e4:6b:e5:7c:62:88:95:c8:54:48:4d:c4:ec:d4:ea:2c:
75:73:30:8f:6f:d5:b1:95:6e:3d:68:19:40:cc:83:ac:da:35:
6e:73:66:33:2a:8c:37:15:15:0d:f3:45:92:2a:c8:27:d1:1b:
5e:1b:84:56:d0:7b:10:7a:bb:77:e4:a6:e3:06:40:6d:47:ab:
a4:eb:25:ba:86:bc:b9:ae:ef:58:27:95:39:95:55:1c:53:b8:
14:7d:27:0f:ae:96:8d:d8:ce:8e:17:00:7a:11:73:c7:e3:37:
c2:71:c4:65:74:2d:d3:14:57:a4:85:74:02:e6:39:14:32:d9:
56:6e:f0:34:22:40:8f:ba:f9:47:ff:9a:b5:91:26:49:93:28:
a5:f7:b5:2e:1b:3d:b6:7d:38:21:3d:0a:73:99:af:98:b4:aa:
f7:9e:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:43:43 2026 by rpki-client