Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: t0mWgvshiWXsToSqu/cPge0G6ZYyW8yEP2i377LRgSo=
Subject key identifier: 9C:C0:83:5F:97:D5:34:D2:A7:8F:36:35:FC:5C:41:31:ED:24:32:BA
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019E2AA7733E283742482C5C692FC3B0FF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 08:01:17 +0000
Manifest this update: Fri 15 May 2026 08:01:17 +0000
Manifest next update: Sat 16 May 2026 08:01:17 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: FJgHt3VEURS454U9raveNlaOx4LISnddRPfjAn2tIps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:73:3e:28:37:42:48:2c:5c:69:2f:c3:b0:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: May 15 08:01:17 2026 GMT
Not After : May 16 08:01:17 2026 GMT
Subject: CN=9cc0835f97d534d2a78f3635fc5c4131ed2432ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:ca:04:8f:d8:17:4e:42:7e:ed:ac:62:83:
ea:24:d9:ee:fb:ec:89:15:a3:16:a3:af:3b:15:ab:
04:d6:dd:50:36:f7:3f:c7:6c:a8:ca:37:ea:32:a7:
c1:1d:11:1a:36:6d:42:f9:c9:dd:cf:37:1b:2b:00:
61:c0:9b:d6:1b:a3:c8:35:db:3a:42:07:32:11:8c:
e7:ed:27:68:39:df:7a:6b:1d:08:e3:30:a8:8d:c0:
24:fa:35:32:53:de:4e:e8:89:4a:06:c3:f8:6b:7e:
57:e2:c1:fb:b9:3c:ce:35:c7:c3:c9:9f:73:60:af:
61:c2:f0:2e:5c:ba:7e:32:a1:25:f7:ab:f6:04:3c:
aa:70:81:20:5d:3e:b6:9b:f8:bc:ad:fa:9d:6a:25:
27:d3:13:8d:fb:f9:ed:bc:e4:76:c7:0c:c2:57:96:
c0:0d:94:2b:32:1e:b2:31:c9:7a:b2:f7:df:da:9c:
da:4d:d3:db:f8:2c:57:3a:bb:9c:3b:14:d0:b1:e0:
58:d6:1f:b1:dc:77:f8:ae:df:08:71:d8:58:2f:b9:
10:2a:32:74:64:ec:b1:f7:de:6c:28:ad:e6:3d:58:
9e:bc:6a:e9:97:19:73:d6:44:e7:5e:13:4a:54:c6:
3a:c8:9b:7e:30:5d:d9:08:81:b9:da:1f:e5:9f:8d:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:83:5F:97:D5:34:D2:A7:8F:36:35:FC:5C:41:31:ED:24:32:BA
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ce:1b:2a:a8:eb:cf:bf:af:8b:9c:50:4b:80:c4:60:42:51:
4e:a0:46:0d:e2:41:13:2d:dd:47:73:52:8d:57:31:e8:b1:79:
51:fa:1d:39:89:94:25:0d:b2:47:3c:2e:60:d5:fd:2b:75:68:
7a:8e:bf:6d:dc:0f:9d:0e:81:79:0d:24:3f:55:ba:d3:fc:e8:
b6:72:75:81:57:29:12:14:59:fb:63:a6:e5:49:59:fa:8f:d0:
31:21:60:c9:7e:17:6e:13:ba:de:58:cb:10:09:7c:9a:2a:b5:
32:64:9a:41:17:58:99:0e:99:3b:1b:95:0d:e2:bf:a3:f3:a1:
36:2a:59:5d:d1:2e:40:35:a3:27:4e:c6:ff:4a:5a:10:b9:5c:
02:2b:da:2b:ab:26:98:44:c1:b3:b2:51:65:ee:58:87:c0:0c:
0f:c3:90:01:40:17:22:ff:de:eb:f9:c4:e3:b2:bd:2a:b0:84:
7d:68:2a:9e:8b:12:78:cb:de:1b:9e:31:57:85:61:55:83:dd:
49:de:b1:92:c2:1c:c7:ec:72:2f:02:6c:e6:08:71:9f:06:20:
c8:65:a3:dc:f8:6e:11:b7:16:f9:68:a3:db:f5:d2:5b:91:b2:
45:95:a6:94:8d:71:4c:6e:6e:5c:50:68:3e:93:02:bf:0e:36:
98:10:68:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qp3M+KDdCSCxcaS/DsP+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx
ZmFlZDQwHhcNMjYwNTE1MDgwMTE3WhcNMjYwNTE2MDgwMTE3WjAzMTEwLwYDVQQD
Eyg5Y2MwODM1Zjk3ZDUzNGQyYTc4ZjM2MzVmYzVjNDEzMWVkMjQzMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3zKBI/YF05Cfu2sYoPqJNnu++yJ
FaMWo687FasE1t1QNvc/x2yoyjfqMqfBHREaNm1C+cndzzcbKwBhwJvWG6PINds6
QgcyEYzn7SdoOd96ax0I4zCojcAk+jUyU95O6IlKBsP4a35X4sH7uTzONcfDyZ9z
YK9hwvAuXLp+MqEl96v2BDyqcIEgXT62m/i8rfqdaiUn0xON+/ntvOR2xwzCV5bA
DZQrMh6yMcl6svff2pzaTdPb+CxXOrucOxTQseBY1h+x3Hf4rt8IcdhYL7kQKjJ0
ZOyx995sKK3mPVievGrplxlz1kTnXhNKVMY6yJt+MF3ZCIG52h/ln437JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzAg1+X1TTSp482NfxcQTHtJDK6MB8GA1UdIwQY
MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt
ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4
LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM4bKqjr
z7+vi5xQS4DEYEJRTqBGDeJBEy3dR3NSjVcx6LF5UfodOYmUJQ2yRzwuYNX9K3Vo
eo6/bdwPnQ6BeQ0kP1W60/zotnJ1gVcpEhRZ+2Om5UlZ+o/QMSFgyX4XbhO63ljL
EAl8miq1MmSaQRdYmQ6ZOxuVDeK/o/OhNipZXdEuQDWjJ07G/0paELlcAivaK6sm
mETBs7JRZe5Yh8AMD8OQAUAXIv/e6/nE47K9KrCEfWgqnosSeMveG54xV4VhVYPd
Sd6xksIcx+xyLwJs5ghxnwYgyGWj3PhuEbcW+Wij2/XSW5GyRZWmlI1xTG5uXFBo
PpMCvw42mBBoLg==
-----END CERTIFICATE-----
Generated at Fri May 15 13:24:37 2026 by rpki-client