Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: jBHTiJ6SnURH1mzYf1pq9dyPjCV8/iklf1HH5gCzqyI=
Subject key identifier: D8:71:ED:36:D3:40:8A:A2:44:FC:91:8F:9C:49:78:19:B1:98:13:13
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019E28825CF3B358987000E32387B7F00D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 190C
Signing time: Thu 14 May 2026 22:01:32 +0000
Manifest this update: Thu 14 May 2026 22:01:32 +0000
Manifest next update: Fri 15 May 2026 22:01:32 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: vE/zoW4BGsTdTvz9WoUjLyRfUwj8CRYZuXAsXpAqmiM=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:5c:f3:b3:58:98:70:00:e3:23:87:b7:f0:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: May 14 22:01:32 2026 GMT
Not After : May 15 22:01:32 2026 GMT
Subject: CN=d871ed36d3408aa244fc918f9c497819b1981313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:a1:b8:e5:22:b7:03:4d:51:12:5b:b3:4a:
ed:a3:e7:a2:a5:ab:57:34:f8:f4:19:03:4a:a0:20:
34:ca:d1:18:cf:27:0e:0c:25:14:6b:6e:a1:c2:92:
78:91:2a:87:4d:95:93:61:d0:df:d8:fc:34:c7:ed:
0a:c9:8d:8e:a6:f9:c0:f2:3e:2a:a8:c5:1c:34:e1:
20:52:80:cd:16:66:72:a4:d4:d5:7f:fb:cf:a7:f8:
62:ae:85:38:58:e3:6d:be:42:a2:22:33:53:39:37:
a2:bd:23:80:f8:e6:1d:51:f5:d3:11:c5:f0:8d:dc:
3f:49:5c:cb:ab:09:b6:53:46:0d:c5:8b:5a:47:82:
74:a2:d9:af:a9:7e:11:e1:f6:4a:88:e1:b1:22:f1:
25:34:6b:b5:8e:82:23:bd:03:47:9a:52:66:e5:c4:
db:0d:14:7a:48:48:05:ea:ca:87:d5:b8:84:ce:e6:
5c:35:75:fe:53:05:b9:ea:8a:79:fa:73:08:ac:53:
ba:c0:84:f7:c3:57:fd:fc:9a:3b:bd:43:64:66:50:
f3:48:2e:22:45:2b:2d:4b:b9:b5:ab:9e:1a:18:cd:
81:f0:62:14:95:13:79:26:ca:bf:ca:8b:38:17:17:
17:ef:2c:61:cd:3b:12:07:98:80:0e:e8:6a:e5:96:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:ED:36:D3:40:8A:A2:44:FC:91:8F:9C:49:78:19:B1:98:13:13
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:f2:98:b3:ee:b4:9b:bc:c6:c6:c8:43:b2:a2:1c:d2:71:
44:f5:c3:62:64:36:01:db:f9:c7:d8:f1:ef:2b:cb:e5:a2:eb:
c0:d0:ef:fb:36:5b:f6:40:e7:f9:d1:19:f5:0a:88:95:2d:b5:
28:3e:a2:b0:fa:7c:c9:ad:47:26:71:c2:6a:5f:92:f3:e0:26:
76:21:5a:fe:7a:08:b5:14:74:94:7c:cd:7f:d6:16:9e:9b:8a:
e2:d3:94:29:30:fd:51:a9:78:49:14:f3:96:30:e3:46:ae:ad:
da:b0:f8:8d:c9:e0:c4:d5:ec:28:9c:af:10:60:85:32:0e:d3:
92:d5:23:07:1d:22:ae:be:d5:ff:2f:24:28:97:7c:b2:ae:15:
63:0d:82:5d:a9:32:17:1b:3e:d8:e0:88:c3:f6:02:6d:72:2d:
12:de:8f:b7:f9:ed:f3:70:0b:1a:65:03:d0:8c:75:1a:2f:c1:
84:d3:72:5f:e3:72:eb:8c:c8:47:12:a4:84:e0:80:12:38:7e:
23:f9:ee:8a:65:26:95:53:fc:7c:af:81:21:53:c4:77:1c:3a:
27:0d:84:25:1d:18:ae:dd:b8:09:6d:23:2b:75:be:d5:98:3b:
c1:4c:7b:df:b3:e6:64:e5:fb:d1:f9:91:3f:18:54:36:4d:e6:
88:60:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:37 2026 by rpki-client