Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: z9Q7JSRHc0zahoOargcXNuMpRp8ewKVCipGbEh2EqMU=
Subject key identifier: EE:6F:91:F2:60:4A:0F:44:AE:74:C2:2C:C5:06:C3:87:AD:8D:E1:CF
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019DAF45B23A50A39F312F7C14A923CC0BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0555
Signing time: Tue 21 Apr 2026 09:01:13 +0000
Manifest this update: Tue 21 Apr 2026 09:01:13 +0000
Manifest next update: Wed 22 Apr 2026 09:01:13 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: RYvGxu+XsdPEWC13dkaeqbPVvSVjmZlCkztiWzBsxb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:45:b2:3a:50:a3:9f:31:2f:7c:14:a9:23:cc:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Apr 21 09:01:13 2026 GMT
Not After : Apr 22 09:01:13 2026 GMT
Subject: CN=ee6f91f2604a0f44ae74c22cc506c387ad8de1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:e6:47:d5:43:f2:72:7e:c9:08:a6:ce:ff:
94:50:c3:20:b4:16:51:2f:7c:e4:fb:8e:22:ab:17:
4c:f6:31:17:78:6d:a8:40:17:9f:d3:60:f9:15:5e:
9c:f4:bc:b0:ab:67:ce:bf:86:68:0b:75:57:e9:dc:
f3:8c:ff:23:26:45:6f:3d:30:00:14:14:d8:b8:a8:
3e:01:7d:30:a1:5a:78:bd:8f:d2:5e:e3:00:26:f9:
12:9a:70:c3:64:8a:47:fa:02:00:fd:70:62:a3:77:
55:23:dc:2e:30:b8:06:f6:9b:99:2d:fd:71:49:e3:
65:7e:75:4e:2d:2d:23:21:ad:76:0a:5c:d8:ec:22:
44:de:18:25:7a:df:20:e7:d0:30:b7:61:33:be:ea:
d5:07:72:e8:b3:40:a7:bb:e5:d8:ce:3e:8d:5f:e9:
4b:4b:10:b1:c2:18:ff:88:4b:be:7c:b1:9a:9a:94:
eb:84:69:13:7f:c8:72:6d:01:ff:64:cf:d6:24:8a:
c8:46:66:9d:b2:2a:8f:f0:f0:b9:e0:01:8f:28:6f:
4a:d7:34:44:c9:1a:b7:5c:71:af:4c:ac:95:8b:1f:
3c:8e:48:37:57:9b:5b:d6:35:22:b6:f0:8a:25:d1:
e5:ee:78:41:40:f0:c6:d5:70:65:a5:5a:0d:94:73:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:91:F2:60:4A:0F:44:AE:74:C2:2C:C5:06:C3:87:AD:8D:E1:CF
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2c:aa:0a:cd:7d:aa:c2:04:b8:d6:01:b0:1f:f3:dc:ab:92:
7a:06:6c:a0:aa:66:6a:68:9b:27:62:05:de:bd:52:e3:57:fa:
94:2c:80:55:e2:b0:c6:60:e5:e7:76:df:d3:2a:56:b4:ab:52:
6b:4e:67:f8:64:5e:46:5c:52:24:ac:c7:44:91:53:09:a2:92:
e4:48:83:8f:ef:d9:7d:46:66:d6:26:db:8f:d4:77:41:2e:92:
ff:11:55:7d:f9:cb:ee:b9:e8:95:42:bf:c8:a2:dd:6d:23:39:
ae:58:70:22:fa:70:f4:9b:a9:f3:82:8c:de:94:b2:5f:b9:62:
5b:d8:63:16:c6:17:13:27:bb:f6:37:b9:4a:76:f0:4b:5e:df:
75:cb:cc:84:9b:90:c4:47:05:1d:a7:4d:71:5b:7f:30:8e:91:
0c:04:a2:5d:be:04:a1:bf:2f:e9:41:77:42:48:ed:b7:0a:ff:
e3:75:55:80:24:1a:5b:1e:85:bf:57:1f:14:73:81:cc:e3:48:
26:fd:11:41:8e:72:8c:0f:6e:80:ab:80:e2:76:e3:39:0f:13:
a4:8c:da:43:5c:34:de:be:c8:7e:71:7a:a1:18:8e:63:d9:88:
db:9c:ea:c8:08:a4:f9:05:04:b7:17:48:bc:6a:34:f5:90:aa:
b5:89:b4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:09:00 2026 by rpki-client