Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: MvKAzgY8Aga9Nrw9oNSKvrJWKo9XMUWHbc0tY8WN7ZI=
Subject key identifier: EA:6D:33:AB:3C:83:C3:CC:D7:4F:AC:C9:C0:B9:BA:8C:C9:AC:68:2E
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019E510F9F1B7EBF6E74AE90D0BF3E81D91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 15D4
Signing time: Fri 22 May 2026 19:00:38 +0000
Manifest this update: Fri 22 May 2026 19:00:38 +0000
Manifest next update: Sat 23 May 2026 19:00:38 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: tuXw/mX9br0Zy2NonFCM8tuzaYWg+GKq3DJJY6Txnzg=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:0f:9f:1b:7e:bf:6e:74:ae:90:d0:bf:3e:81:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: May 22 19:00:38 2026 GMT
Not After : May 23 19:00:38 2026 GMT
Subject: CN=ea6d33ab3c83c3ccd74facc9c0b9ba8cc9ac682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:c5:99:f4:fa:b5:9b:55:fd:d1:60:de:6d:
05:db:ce:63:32:b2:29:f9:1f:c8:88:2b:0a:17:04:
da:a8:e4:3e:40:d7:23:c8:df:fa:3f:a0:09:a8:ac:
0c:96:c2:2d:ad:0c:40:06:1a:77:bb:4a:1f:65:c7:
89:96:58:cd:b5:7f:68:05:97:ec:51:91:7d:6d:a6:
07:a5:eb:f0:aa:22:4b:20:09:e6:30:53:a0:84:23:
f7:d6:77:9a:5b:60:a9:f9:d6:41:f2:ab:d3:37:f1:
d7:02:0c:51:d9:55:65:1f:bf:f7:cf:b7:16:f2:db:
56:03:4d:dc:c9:5e:b5:2b:84:cd:70:47:03:dc:ec:
e7:0f:53:03:bf:0b:f1:65:f1:d8:f9:02:b8:e8:75:
c9:28:59:da:5a:a8:e9:f2:88:2a:0d:c5:fb:e4:8e:
00:8c:20:fe:d8:0c:96:64:5b:15:2d:bd:31:38:b6:
76:8b:7f:aa:1a:7c:d1:99:3c:4f:d1:a7:45:92:22:
35:3a:ca:23:52:ab:bc:18:83:10:da:30:13:de:2f:
98:65:88:02:7f:fa:d3:ed:42:78:fa:4d:12:1c:54:
0f:ba:82:81:da:65:e6:2b:70:fd:bc:d7:9b:19:17:
fa:28:ee:c9:0d:4d:f5:8d:56:2f:68:8e:c9:63:1c:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:33:AB:3C:83:C3:CC:D7:4F:AC:C9:C0:B9:BA:8C:C9:AC:68:2E
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:6b:75:f7:38:f8:2d:90:0b:a2:54:42:5b:3d:a9:ea:0f:
83:bd:9f:cc:4e:01:a1:11:9f:89:21:b0:06:5c:2a:7e:4e:83:
c1:08:37:4a:d6:f1:76:be:b4:6d:5f:e2:99:7d:4c:4e:a6:51:
dd:58:d5:a0:55:05:02:9c:9c:25:88:7d:82:e3:22:0f:34:26:
a0:55:b9:37:57:85:8a:02:61:67:c1:d0:b0:bb:4a:2b:51:78:
f5:c9:ef:88:5c:eb:6f:c4:c2:39:9c:19:41:5d:80:fc:eb:3a:
a4:f0:72:6a:8a:5e:bb:7b:d1:68:df:d1:85:49:c9:ad:63:79:
53:0c:12:46:b7:e2:bf:c4:00:e0:e5:b5:4f:91:2c:76:aa:90:
2e:93:e1:4b:8d:b1:a6:1b:5c:2f:0e:49:46:6a:df:87:1c:2b:
af:f1:59:62:45:35:ba:37:ea:e0:bd:03:8a:8a:e4:10:27:35:
65:75:04:69:2e:96:a3:14:d4:dc:a2:31:93:cb:26:b3:3a:9c:
89:37:b2:c9:20:c4:15:63:45:5c:1b:45:e4:09:25:d4:9a:8d:
ad:ae:3a:57:0f:91:8f:17:2a:ed:af:65:ba:4a:3d:b4:a4:8d:
c9:d0:e4:5f:fa:c9:47:28:65:a7:b6:8d:eb:e3:5d:5b:67:37:
55:c5:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:11 2026 by rpki-client