Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: uAWGfuZ8lZ4N6PFqIpSzsFA0YQqLyeqNYSS86DtML9I=
Subject key identifier: D9:1E:16:8B:7B:9A:95:A8:3E:F2:EB:1B:CE:7B:BE:D3:08:AF:D1:82
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019DA30A729D758E66B287C70FD1F57AD524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 06C0
Signing time: Sun 19 Apr 2026 00:01:04 +0000
Manifest this update: Sun 19 Apr 2026 00:01:04 +0000
Manifest next update: Mon 20 Apr 2026 00:01:04 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: XHksOB20Pp2rYPaq0u7kNJHT+7hp2sAUFCA6iJQBZug=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:72:9d:75:8e:66:b2:87:c7:0f:d1:f5:7a:d5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Apr 19 00:01:04 2026 GMT
Not After : Apr 20 00:01:04 2026 GMT
Subject: CN=d91e168b7b9a95a83ef2eb1bce7bbed308afd182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:2b:fc:19:eb:cf:66:8b:94:e5:79:e4:9c:
b6:d7:3e:dd:ea:49:89:ef:b0:41:cc:99:71:52:6a:
76:dd:41:d9:0a:72:38:98:91:c5:10:e6:2d:1a:97:
d3:69:e8:4e:96:cc:c9:25:e9:90:d1:76:2d:46:60:
b2:d3:4b:4f:60:cd:ad:81:42:d0:4b:5c:e4:27:5b:
79:57:d4:d3:b4:19:c7:ba:a7:ba:8a:a2:4a:4d:f6:
bb:d8:aa:9d:32:2e:42:16:f8:e9:63:9d:77:ab:f6:
ba:7f:50:52:ad:47:71:9e:6c:9f:10:9f:f7:96:f5:
70:68:04:cf:ca:c1:f5:b6:77:3f:97:c2:a6:2e:63:
b9:63:2e:fc:6e:52:e4:f1:c0:ea:7b:26:37:0f:3c:
e9:65:3b:43:b9:50:52:b8:e1:c6:b0:96:1b:55:82:
7a:91:c7:b8:53:52:d3:52:e9:3f:c3:fa:f3:24:d7:
aa:9c:aa:54:c0:69:82:ac:e5:40:c3:28:74:80:d0:
92:e7:da:b0:70:66:d5:14:96:a7:e3:05:bf:a6:ea:
19:be:bb:07:0b:ff:48:b3:24:b8:f4:90:88:2c:34:
b9:cb:21:c2:a8:43:1d:d7:9e:c1:fe:41:97:d6:68:
58:23:54:7a:91:ae:ee:15:8e:ee:75:d7:3e:d1:3a:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:16:8B:7B:9A:95:A8:3E:F2:EB:1B:CE:7B:BE:D3:08:AF:D1:82
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:c7:2b:ae:23:96:3e:0f:51:0e:59:9b:29:3a:53:af:04:
71:7c:0e:61:6a:9f:c7:04:b6:84:9d:98:d0:7c:ee:5d:ce:31:
06:e4:2c:a6:fe:9c:74:b2:e7:ed:9c:6a:5e:50:db:85:86:4d:
3c:0d:83:ac:68:ea:74:7e:3d:bd:31:6e:ed:c0:63:56:ef:48:
e6:9e:63:25:ce:f7:ca:7f:e1:0a:07:bf:37:4c:09:2f:c9:d2:
26:4f:57:c0:66:fb:a1:00:59:78:59:11:b7:33:49:01:f7:c5:
7d:b1:f9:be:1b:18:6f:70:c1:2b:1f:7e:26:1f:c8:21:6b:97:
4b:02:ec:a4:a2:c3:63:cd:df:f0:db:22:ab:12:63:ca:06:fc:
53:2e:56:f9:65:39:44:99:ca:d6:a6:fa:6c:e1:cc:6c:bc:52:
5c:71:7f:a4:32:f2:9b:76:94:bf:94:e9:16:c9:57:5a:19:96:
78:dc:79:f6:80:3c:41:f4:49:4d:ca:e6:16:2a:fc:6d:e0:99:
eb:c6:fa:9d:8d:3e:6f:51:2e:2e:a7:f5:d0:63:a3:73:f8:d4:
67:93:e1:67:8e:87:fe:3c:53:9e:1e:39:f8:3a:3a:ce:c6:30:
6e:ce:83:6d:af:41:40:ac:da:64:7f:af:7c:75:18:65:34:a0:
30:e3:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:58 2026 by rpki-client