Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: WjxCQiPDYNl2HNqSlOlrmwthKm954DNmWuw4hoYQaFk=
Subject key identifier: BC:52:D1:BD:0B:FF:9A:98:1E:6B:4F:27:0F:6C:0E:0B:B4:FA:3B:7D
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019D382E98E69D1579A275BA4B738A780C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: GXhFfzPpIHoP7RLYcFMqTWluEZ0.roa (hash: Yx/Lhj5zxPnVZAFBihFZiUuZcLJQ578c7k6Oe82WcJ0=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: hdjr3q9Pf/uyEw3xu/1SfK/77f9WJp7hqrnnXc+e3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:98:e6:9d:15:79:a2:75:ba:4b:73:8a:78:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=bc52d1bd0bff9a981e6b4f270f6c0e0bb4fa3b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:9e:14:2c:71:80:6c:56:c2:32:b9:ae:30:
aa:6d:0b:e7:54:ba:70:92:c8:0d:de:18:ed:2d:a5:
13:07:07:b4:34:58:5d:c2:b2:b8:80:1d:f3:d4:4c:
0c:2a:a1:1c:1b:32:8b:68:f3:95:4b:73:96:1e:b3:
4e:7f:e2:2c:8b:6e:e4:88:3b:e4:83:0e:de:56:87:
52:de:ea:a6:aa:18:3c:a9:26:74:06:38:d5:ed:74:
19:ce:4a:b1:01:49:4e:28:9f:cb:3a:35:ef:cf:08:
e3:10:16:fc:54:45:5c:40:97:b8:91:21:b8:67:de:
4d:f3:32:2d:da:6f:f8:98:5d:36:57:00:3f:0a:32:
68:c3:a4:02:07:ce:7a:97:ff:f7:d7:f5:e9:8a:cf:
d2:e6:c4:d6:de:88:ee:f1:f8:9a:03:e8:5a:84:44:
7d:3f:b1:af:60:6f:4a:67:78:c5:16:c5:73:00:70:
c9:6e:a0:a0:ad:68:74:e5:bb:13:4a:12:9a:2c:bc:
b1:8f:3a:5a:b4:11:da:a4:58:2a:d4:31:e3:7e:39:
b1:47:e0:52:31:da:1f:91:be:99:0c:b0:83:60:1d:
05:5f:98:9a:7f:d3:b9:af:13:d7:fa:63:e7:7b:b1:
7d:da:9e:e9:6e:ba:e1:19:13:c8:0d:0d:ac:d3:81:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:D1:BD:0B:FF:9A:98:1E:6B:4F:27:0F:6C:0E:0B:B4:FA:3B:7D
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:a3:7a:18:da:b8:a0:23:40:96:06:e0:2a:8f:d9:83:32:
4e:0d:07:78:b2:07:22:36:b5:d7:82:0a:83:6c:ae:71:46:5b:
55:3a:58:7f:20:30:be:93:62:77:fb:78:a7:33:50:2d:01:ea:
3a:d5:7b:a3:0e:e1:17:60:ec:9f:2a:b7:64:ce:48:9a:ce:b7:
49:c1:7e:15:d1:8c:27:e6:9e:a3:0a:68:f0:f6:1a:1c:c5:1f:
16:cc:3f:23:c8:4f:e0:00:70:5c:da:54:ce:0d:67:a0:d9:74:
c8:ff:6d:1a:80:84:e1:3a:ea:6d:4f:79:ce:8e:55:d7:45:a9:
02:ae:49:7e:00:c0:86:dc:bb:3b:47:83:35:fb:9c:99:68:a0:
d0:25:44:89:d5:39:54:8f:aa:d0:4e:7e:5a:6c:30:54:4e:70:
01:ab:43:49:96:f7:71:eb:b1:91:d1:f9:03:b7:7d:6c:f1:74:
be:4e:e3:31:78:75:7b:aa:05:9d:d4:22:fb:82:bb:9f:63:33:
8b:3c:25:cd:bf:f2:ec:c3:2b:22:4f:42:20:23:62:cc:7f:65:
1e:37:e0:b8:b7:16:9d:d3:0b:ff:04:07:62:ff:b3:05:23:98:
f2:75:87:d3:00:ef:74:6f:6e:76:9e:ae:7e:59:31:ac:3a:38:
61:37:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:49 2026 by rpki-client