Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier: Khhf+Uu14aYEl5xCVgYeHrOhuiXxVtoVAqDa5Rzlhm0=
Subject key identifier: DC:DF:DF:F0:98:4A:12:31:52:85:FF:96:57:46:3B:35:AE:23:2F:66
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 019DA4F8F5CC92FD862AE315F2375A3CA0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number: 06C1
Signing time: Sun 19 Apr 2026 09:01:12 +0000
Manifest this update: Sun 19 Apr 2026 09:01:12 +0000
Manifest next update: Mon 20 Apr 2026 09:01:12 +0000
Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: lgyUvjDGbnbdXAr7r8fje8LxjvmXkjVIKY5DtWKGfME=)
2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:f5:cc:92:fd:86:2a:e3:15:f2:37:5a:3c:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Apr 19 09:01:12 2026 GMT
Not After : Apr 20 09:01:12 2026 GMT
Subject: CN=dcdfdff0984a12315285ff9657463b35ae232f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:af:03:e6:ee:cb:04:d4:03:38:04:ab:38:
09:ae:de:d2:7a:ad:ae:fb:cb:9c:79:b3:dc:23:5c:
58:12:5c:31:53:69:db:d9:a5:e5:41:99:8e:59:dd:
cc:32:ae:08:c0:84:88:07:66:28:21:19:0e:18:b6:
94:fb:22:71:f0:15:ce:ae:3e:69:f9:bc:52:c6:fb:
53:90:08:d2:da:9a:54:27:fc:9d:87:dd:54:fb:ec:
80:39:41:fb:bc:b2:2f:50:8e:f5:dc:c6:55:43:72:
84:dd:7b:57:1d:53:e2:46:ad:19:69:04:35:78:9e:
51:c6:4b:e1:46:d7:b6:e3:17:15:74:bf:55:97:e4:
01:6d:8f:48:9a:30:21:2d:cc:8d:10:3e:64:6d:0a:
93:77:bb:84:11:04:7f:e8:fe:bb:79:79:1b:71:b2:
47:88:ab:0b:c6:9f:aa:f5:45:55:f4:9c:76:c0:ff:
fa:3b:1b:22:01:76:5b:8d:95:88:48:45:f4:45:56:
62:f6:20:e8:53:10:66:be:47:5c:80:34:9a:78:c1:
e2:b8:3c:37:d2:80:29:08:45:dc:20:d0:37:a7:85:
26:ce:02:6d:32:01:85:ab:2a:c8:e9:38:f0:dd:b0:
45:c4:bd:1f:b4:39:6b:9e:f8:bb:97:d8:90:41:e5:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:DF:F0:98:4A:12:31:52:85:FF:96:57:46:3B:35:AE:23:2F:66
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3a:02:bf:f2:19:01:2b:79:e4:ac:c1:11:31:b1:a6:89:7d:
7b:d3:1d:0e:33:aa:dd:9d:59:31:d8:a7:12:70:0d:41:29:e0:
34:7e:8d:05:c4:02:68:ef:d6:8d:5d:13:9e:b3:e2:7a:8f:81:
b6:be:0f:25:19:0e:53:78:63:87:db:28:51:48:ed:7b:b5:30:
13:d0:d5:b1:bb:e9:d4:5f:ac:06:eb:01:b6:5f:7e:62:f1:56:
c7:7b:2e:40:01:22:0f:2d:54:95:98:3b:75:5d:1b:59:69:f9:
dd:ea:88:45:c2:a1:04:ba:36:83:7c:f5:57:ad:9c:2f:19:c9:
bd:b0:80:c1:5b:9b:8b:cf:33:65:77:6f:9f:11:65:c2:1c:b3:
dc:99:22:7b:4a:5f:e8:d7:68:4e:05:a6:1a:83:18:c6:16:ef:
90:14:ee:c9:4e:2c:0d:52:4f:24:12:2c:2c:7c:88:1c:97:c9:
b0:cf:f7:1e:8b:73:d9:a8:29:f4:f4:df:96:8e:43:a9:57:a2:
ea:13:07:ef:ce:af:11:e0:d0:51:18:da:3a:71:43:d1:6c:39:
a4:1e:d8:23:66:de:21:f5:0e:9d:5e:1e:aa:0b:a2:46:d9:62:
b1:47:fa:ac:b7:a7:4c:7f:c7:7f:90:8e:91:1c:50:4f:5c:0b:
06:25:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:29 2026 by rpki-client