Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: ZUQYYb/iwu96ACAzdc+s2SC9IOgkmN00IXXqSJ6OuOI=
Subject key identifier: 47:91:8F:09:C0:D4:A0:EC:9F:32:9B:CE:8B:95:2C:8C:9A:D4:DE:BE
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019FF835C9A7EDB38A72F2AB813C984E98AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 19FC
Signing time: Wed 12 Aug 2026 23:01:42 +0000
Manifest this update: Wed 12 Aug 2026 23:01:42 +0000
Manifest next update: Thu 13 Aug 2026 23:01:42 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: ksDROjVVCjruazYdaOItoeoLiXRoqS6NB5JpT6wmkxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:c9:a7:ed:b3:8a:72:f2:ab:81:3c:98:4e:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Aug 12 23:01:42 2026 GMT
Not After : Aug 13 23:01:42 2026 GMT
Subject: CN=47918f09c0d4a0ec9f329bce8b952c8c9ad4debe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:f0:7e:01:f3:09:1d:44:92:80:4e:d0:0b:
58:a3:8b:01:86:16:83:85:ed:5c:bf:5e:37:9b:c3:
36:f3:5e:58:62:cb:f6:e8:92:17:92:d1:57:4a:67:
5b:7a:ca:81:f3:4c:6f:98:26:91:10:b5:68:08:65:
7d:c5:f3:60:cc:35:ae:13:2f:27:53:13:0a:43:86:
3e:36:29:34:21:d6:25:e0:eb:b9:70:3a:6b:61:3a:
88:20:b0:d0:6f:1a:7c:d3:20:9e:63:83:e6:1e:e5:
07:3c:59:f0:52:69:42:19:e6:f1:e6:d3:57:da:cb:
7d:74:17:e3:f5:5a:87:d6:e2:75:07:66:f9:d9:c5:
b6:e0:5f:e6:10:bd:cf:56:0e:a1:97:0f:8d:d6:47:
d0:73:f1:cb:2c:2d:a1:3b:25:e7:b8:df:b5:78:02:
50:be:59:13:af:64:8c:65:95:92:2b:0e:21:b9:14:
2b:7c:cb:62:e7:91:be:3c:b7:5a:fc:3d:7d:62:88:
30:01:d9:16:16:2b:67:8d:0b:86:a6:ce:67:13:a4:
69:a3:de:57:cd:dd:bb:21:05:44:60:c5:31:ae:b2:
08:1a:eb:d2:48:ca:05:f5:09:71:8e:ad:e2:4e:9c:
ee:a7:18:26:a7:17:40:22:09:47:00:33:dc:65:bd:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:8F:09:C0:D4:A0:EC:9F:32:9B:CE:8B:95:2C:8C:9A:D4:DE:BE
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:22:53:23:ed:d3:27:65:29:e9:5b:e2:e4:96:80:ff:7a:69:
60:11:ae:76:6e:3f:e2:fa:8f:15:34:7e:2a:0d:21:6e:f5:af:
0d:46:6b:1d:f0:8d:71:ff:fe:20:8e:9b:04:58:db:0e:d4:92:
2c:5a:58:de:08:f6:03:00:c4:cf:6c:fe:1d:b4:b2:24:68:e8:
e4:0f:b8:f8:dd:48:92:56:92:b6:27:c5:71:fb:0b:3c:bf:ea:
c7:c4:cc:2c:a6:71:98:16:f9:2c:e6:60:6a:40:9f:d5:f5:54:
e4:76:3d:01:00:dc:71:0b:6b:c8:cd:6b:17:1f:c8:fa:5d:8d:
b1:bd:78:1b:96:03:42:73:97:ef:ed:c7:b0:4d:59:d6:83:dd:
b4:3c:b2:fd:d9:ba:0a:cd:0a:d4:47:64:27:96:c4:be:80:16:
45:82:de:ff:3e:77:44:59:d6:aa:01:69:b4:5b:7b:ff:17:66:
40:35:c4:7d:03:e1:3d:0e:79:5b:4d:14:25:77:91:54:4d:46:
87:d1:74:22:f1:6e:a1:f8:18:c6:af:54:ef:31:2d:0b:c5:7d:
8a:72:23:0b:8c:51:ec:90:4c:75:17:a0:1a:e0:e1:b0:56:a1:
95:a5:9b:bf:0a:74:e4:d0:fc:b0:c7:02:d3:71:6f:08:a8:d1:
97:93:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:15 2026 by rpki-client