Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: 1VHE+96gj9PJyVdORClooTP96e/cIHVqKgnXy1Kx4rI=
Subject key identifier: 39:91:A1:89:46:89:EB:84:31:11:FE:0D:C6:F6:D8:E9:8F:00:CB:B0
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019D9AABE6287A29C4A7D67AC61E6D7A482D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 02C6
Signing time: Fri 17 Apr 2026 09:00:50 +0000
Manifest this update: Fri 17 Apr 2026 09:00:50 +0000
Manifest next update: Sat 18 Apr 2026 09:00:50 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: o/Isnt6IjFpx5u32WTjsrk4je+x1ZzdCq6Ru0Sj7jzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e6:28:7a:29:c4:a7:d6:7a:c6:1e:6d:7a:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Apr 17 09:00:50 2026 GMT
Not After : Apr 18 09:00:50 2026 GMT
Subject: CN=3991a1894689eb843111fe0dc6f6d8e98f00cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:49:96:bf:a4:ed:f5:03:ab:83:80:97:2c:
d6:64:c3:dd:8e:b5:81:ed:79:97:2f:73:bd:a0:55:
bc:c6:1b:da:79:6a:7f:69:72:f1:e4:75:54:9a:03:
bf:71:34:19:b8:77:5b:4f:40:6f:3c:e9:08:3c:aa:
97:3d:9e:83:10:e7:b2:ce:39:da:a5:ef:61:b0:28:
60:33:c8:38:f5:86:d0:79:0d:87:b6:a1:ac:a3:b2:
bd:dd:f5:81:0b:90:c8:7e:6e:30:9b:b8:b9:9b:fa:
5f:e6:8b:69:ae:8b:79:00:ef:2d:32:f2:66:87:e8:
69:37:e9:e4:bb:91:d8:16:8b:dc:1d:f4:ff:6f:7c:
6d:4b:10:53:aa:fd:c4:d8:70:e5:e2:aa:53:92:ab:
01:51:d4:ac:08:5f:e8:9c:fc:af:b6:b9:91:e7:14:
b6:cb:48:d6:cf:71:19:b7:22:ec:5b:13:73:78:b3:
a4:9d:e9:70:4d:a7:98:08:87:73:7f:de:28:1b:fd:
cf:37:d0:77:ea:fb:a3:0e:46:95:cd:be:31:ae:a7:
6a:e7:24:f8:cf:4d:ea:8c:5e:7f:8b:99:d7:c2:56:
13:03:20:cb:8b:35:4c:25:1e:ff:88:3b:80:80:8c:
38:3e:50:e4:1f:95:2a:92:14:b4:fb:9a:6a:1e:19:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:A1:89:46:89:EB:84:31:11:FE:0D:C6:F6:D8:E9:8F:00:CB:B0
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:cf:a5:2b:30:d3:ea:f2:05:14:c5:af:e8:f8:e3:fa:e8:
de:6a:b3:72:93:c2:bd:1c:d2:6b:82:fd:ba:19:3b:57:ee:66:
c3:6c:5f:aa:0e:e7:66:86:74:6e:cd:e7:91:14:48:ea:b5:a6:
a6:e5:2f:ab:6a:0f:76:9b:d0:5c:c2:e4:0a:6e:65:5e:f7:79:
cd:02:fa:7e:fd:0e:49:b4:ff:dc:ca:0c:c4:58:00:20:eb:b9:
a2:fa:c4:28:27:a4:87:49:53:8e:b9:d1:04:af:47:6c:2f:5d:
d4:bb:07:b1:95:73:11:d3:fa:d4:a6:fb:2b:d7:e4:65:62:be:
d5:c1:f3:53:d0:f5:ef:9b:87:40:d8:c3:75:f2:73:fb:17:fc:
d5:43:77:14:e7:54:74:ac:1a:3e:49:2d:66:26:43:6f:44:11:
26:84:f1:3c:60:42:a1:de:14:30:fd:9d:37:28:01:87:62:fa:
88:7b:57:18:13:6f:19:6e:6e:a1:d2:fa:95:8d:1c:ac:b5:e3:
b1:04:48:71:84:13:d1:c1:20:5a:75:e5:61:4a:43:0e:30:50:
32:05:b1:21:af:d5:e4:ea:31:24:81:8a:bf:0a:be:aa:5f:95:
11:33:17:2a:25:4a:ce:88:20:57:8e:33:b4:5d:b6:91:af:8b:
33:c8:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:02 2026 by rpki-client