
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: 9dn/tBm52lJdumsg8FojmKHMfjlJbdyfZuPDMveVOTk=
Subject key identifier: 0B:FB:0D:3D:15:44:9E:90:83:23:E2:B3:3C:5A:6E:EF:C2:44:58:C6
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019D9BF59791F69840970D5A77D2034F475E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 15:00:56 +0000
Manifest this update: Fri 17 Apr 2026 15:00:56 +0000
Manifest next update: Sat 18 Apr 2026 15:00:56 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: LaFEcek3TG0ATpUO08bsxxs5RL1enfX057Gax757Y+M=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:97:91:f6:98:40:97:0d:5a:77:d2:03:4f:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Apr 17 15:00:56 2026 GMT
Not After : Apr 18 15:00:56 2026 GMT
Subject: CN=0bfb0d3d15449e908323e2b33c5a6eefc24458c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:65:09:0e:57:07:f1:95:57:1c:9c:a9:df:
dd:95:35:4e:37:41:36:6e:b3:b0:de:e0:18:f6:8f:
19:3e:d3:84:36:d2:2b:85:09:76:ab:d3:81:6d:9e:
84:37:2c:f4:cc:bd:14:3a:db:33:fd:9c:c4:be:8c:
3f:eb:68:5c:93:6e:54:ca:c7:bc:00:2a:a4:75:65:
4e:9b:28:48:50:a6:9a:6a:bd:4d:56:25:c9:66:b3:
05:f8:34:c5:b8:dd:47:5c:fe:85:c6:a6:3a:23:9e:
cc:d0:1f:37:ef:f5:5f:be:eb:05:8e:5a:d9:64:79:
34:f4:7a:f5:35:d4:db:d7:34:5f:f0:5c:1c:83:3e:
72:81:f8:66:dd:23:56:d2:ec:5b:45:0e:22:c0:8b:
51:fa:aa:ce:d3:db:f8:ef:f0:af:a7:d7:1a:ff:ff:
8f:b8:e0:95:8d:10:e2:05:5c:41:f5:38:99:5c:6c:
27:61:58:d9:85:fb:f5:b6:9c:e8:7c:b8:a6:80:ea:
69:df:2b:1d:16:ca:ee:d0:d7:c7:d2:28:08:c2:91:
e4:60:b1:83:38:8d:f9:dc:34:0f:dc:dc:3b:7d:54:
23:2d:62:f0:34:42:9d:47:29:8d:c4:1d:b2:f8:68:
59:f2:32:2a:b2:82:1e:ef:1e:b8:b2:c6:6f:84:e5:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:0D:3D:15:44:9E:90:83:23:E2:B3:3C:5A:6E:EF:C2:44:58:C6
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:90:b4:03:fc:e8:92:fa:f5:ae:71:81:99:c5:45:8e:a6:26:
65:cf:d1:01:ab:9d:c4:ef:26:a3:3f:d1:db:7b:66:3a:b9:d5:
52:fa:38:70:a2:3c:6a:64:2d:8a:44:bb:07:cc:a6:08:09:37:
7f:5e:5e:38:ef:44:4e:11:b7:38:c6:b0:d7:40:74:08:80:0d:
d4:eb:50:77:44:25:39:30:7c:06:e7:85:57:ff:8f:d3:bb:ba:
e5:0b:2e:f3:0f:b2:f9:de:21:37:2d:d6:aa:51:b2:51:de:ee:
da:fb:ac:09:43:13:f9:b5:12:34:8c:81:8a:4f:5f:3f:bd:c2:
23:56:f4:e9:44:cd:a8:42:2f:e8:eb:de:f6:a5:bd:99:69:05:
27:bb:be:cd:7a:8c:fd:c6:76:a6:13:68:b9:cb:29:06:a7:57:
74:87:79:e6:e9:20:00:3e:75:b6:c0:82:88:a4:58:b8:ea:ad:
0f:dd:24:51:e2:7d:92:3f:e1:d1:99:80:07:f7:5e:22:06:f1:
7c:d2:26:14:d4:98:8c:a9:b9:fa:83:ba:da:31:48:85:31:14:
a9:6b:82:b1:94:a4:d3:40:0b:26:2d:e7:64:d5:7a:b4:f7:a8:
a2:0b:3b:c8:6e:3b:cb:8f:a3:b5:4f:fe:8b:6d:d8:dd:48:e6:
8b:ce:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:28 2026 by rpki-client