Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: s5amvEKhxvHdIMyabf/wM5SM9r/GFFCZUkgEBVRJzL4=
Subject key identifier: 64:A2:4F:5C:93:FE:EC:42:B6:7A:97:D2:76:4A:87:79:8B:01:D6:C2
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019DED496B76C8CA0FC1AD4B3318F59B1C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0DA3
Signing time: Sun 03 May 2026 10:01:44 +0000
Manifest this update: Sun 03 May 2026 10:01:44 +0000
Manifest next update: Mon 04 May 2026 10:01:44 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: x7BfJF0uNAZzUD59To7bXMYf/e9K5gPHtGhABfEMJ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:6b:76:c8:ca:0f:c1:ad:4b:33:18:f5:9b:1c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: May 3 10:01:44 2026 GMT
Not After : May 4 10:01:44 2026 GMT
Subject: CN=64a24f5c93feec42b67a97d2764a87798b01d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:b1:dc:01:0a:4a:90:c6:6d:8c:49:32:17:
e1:2e:bb:09:58:8c:70:02:c5:1f:b6:a0:5f:53:0c:
91:f5:34:c9:46:76:8c:a6:0b:aa:2b:37:ea:82:4a:
97:8b:72:b0:b0:ce:d7:6c:2c:7f:50:11:5d:08:a1:
0e:7a:0e:dd:01:ab:1e:4d:71:33:07:ef:cb:5f:50:
78:d8:8f:89:ea:49:13:70:7b:c4:42:4b:00:cf:7f:
46:4d:fd:89:7e:b7:a2:61:57:c7:fd:46:5d:4f:cc:
68:e8:0b:64:45:97:fb:2a:36:92:ec:d8:61:c6:c6:
8a:02:0f:df:7d:c9:c2:36:55:21:fc:97:54:57:39:
90:25:78:e8:3c:93:cf:17:b3:53:da:8d:62:d0:38:
2c:1f:ba:31:c4:9f:30:53:7a:c1:f3:65:f5:b8:1a:
69:ef:ef:9c:ca:f7:00:5d:6b:95:d8:dc:06:a6:f0:
b0:db:f4:ae:55:2e:90:23:91:4f:1f:58:9d:e8:67:
cf:de:f0:f2:5e:78:3c:97:5c:76:59:7d:a4:84:bc:
63:84:77:0a:b2:c0:ba:e0:80:f2:17:e2:cb:c6:1c:
0f:ba:22:c4:39:5c:b2:50:bf:83:63:85:a1:05:54:
a0:2a:a4:fd:be:25:77:e9:8a:ae:95:49:b3:7c:c1:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:4F:5C:93:FE:EC:42:B6:7A:97:D2:76:4A:87:79:8B:01:D6:C2
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:7c:be:4f:bc:02:7f:a8:c1:73:4c:47:3c:28:c4:19:71:
7c:0d:72:3b:f0:a1:61:5e:cd:bd:25:a6:49:c0:34:b8:59:a8:
50:0d:51:94:d2:c9:f6:37:91:15:54:8f:b5:d3:94:cd:20:8c:
dc:6b:ff:6a:0f:e8:61:13:71:70:a4:7b:f1:f1:b8:a2:ee:d3:
65:72:75:78:97:11:76:ef:06:03:5a:28:de:a6:1b:38:52:17:
32:5a:1f:0e:57:d4:42:56:17:48:ad:c9:69:d7:cb:c3:41:b3:
5f:98:35:5f:d0:ed:45:a7:68:4b:ea:e8:bc:2c:e3:b2:8a:37:
d1:25:ec:2b:76:61:c5:f2:29:ab:0c:57:21:01:6b:f1:63:7c:
4b:30:57:36:65:0d:e9:4a:66:f6:75:cd:54:77:12:22:60:0e:
3a:e3:bf:e7:59:10:60:a1:8b:af:8a:52:73:52:c3:85:9c:f0:
d3:94:53:b9:14:ae:57:cb:3e:73:66:08:2a:77:0b:e3:06:e4:
6c:6f:db:15:16:f9:9c:78:f0:83:7e:b5:95:4c:b5:27:41:3a:
d7:d8:b4:59:c7:c5:f7:d3:a8:e4:0e:75:fb:47:03:bb:c3:2e:
23:7d:c9:a5:8d:bf:ba:8c:c0:31:e9:06:dc:31:ad:92:d3:2d:
9e:0d:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:36:15 2026 by rpki-client