Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: novzJM4zAiXu/fzUbqvU3/mIlVs0qFZbfqx4CnU00hg=
Subject key identifier: 74:A1:39:90:A0:C0:6B:29:42:81:71:EB:30:37:8B:29:37:70:DC:E1
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019CADC7E3B9F505F23C3B4B8C43696A51B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: K51zXkg1aSl_rsYaPgBKlZz7NZk.roa (hash: fiZ7r/he+qme26623UWVqiKQ/igOBcXXkogZZFlFQfg=)
2: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
3: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: a4xvve6OYWjxm7vYmU9Nj/XGE/yVD1/t1iRfS9kgzoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e3:b9:f5:05:f2:3c:3b:4b:8c:43:69:6a:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=74a13990a0c06b29428171eb30378b293770dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:df:23:11:23:e0:53:07:0e:f8:4a:ea:5a:
23:0e:4a:96:a3:94:ae:8e:63:84:7d:af:9d:dd:93:
ac:da:d5:6a:49:df:57:5d:77:08:71:da:71:fc:f6:
c6:63:2d:19:c7:ca:f7:59:71:a5:f4:f5:23:bd:da:
94:ee:1e:6c:24:14:97:6a:1e:36:9a:f8:48:4d:5c:
c6:ee:ec:c9:19:98:4c:fb:4b:d9:cc:37:de:7a:84:
e8:fb:f9:9d:ee:90:2f:78:99:0d:67:e6:db:16:c8:
be:e6:93:92:82:81:d8:18:a5:dd:7c:91:14:e2:f8:
48:a1:3f:c2:60:af:93:12:89:ca:09:8f:41:9f:c0:
91:ed:7c:6e:00:40:c8:80:53:70:36:3b:83:10:05:
f0:d5:24:06:d6:a3:2e:30:2d:3e:00:01:5a:56:3a:
4e:f2:27:bc:f6:11:23:77:e8:98:60:18:26:ab:f2:
08:4c:c6:5c:8e:b3:27:48:da:56:ec:ca:45:06:8b:
c6:c8:58:09:fb:8a:b7:22:14:c5:28:13:65:ae:35:
a0:82:6f:19:a8:25:d8:23:2b:32:a5:b3:33:d3:a7:
8c:80:88:b8:83:14:60:6d:65:02:4f:86:a2:c2:bd:
77:f8:94:d0:d8:f9:2f:c9:82:ad:ef:de:f1:54:82:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:39:90:A0:C0:6B:29:42:81:71:EB:30:37:8B:29:37:70:DC:E1
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:79:32:7c:9a:40:66:28:f8:60:94:ef:e8:7e:9e:e8:d8:
c7:9f:75:2b:0a:5f:73:35:f4:b2:9b:17:8e:f6:70:fa:da:ce:
89:1f:41:73:8c:04:e7:b2:19:21:4e:e3:6a:ad:55:86:71:04:
bb:ea:cd:c5:d6:a8:0c:4d:53:79:f5:7d:de:4b:a3:7e:70:24:
15:33:83:90:62:1d:a9:e9:56:53:be:8c:0d:61:67:c4:bd:20:
80:22:4f:fd:bf:ba:aa:20:43:d3:2c:1a:1e:dc:16:2e:27:08:
58:e7:92:49:be:53:a3:51:45:ae:af:8e:13:f2:8d:66:05:01:
42:14:06:a2:f4:d6:95:16:52:f3:f4:e7:b6:44:66:d2:6e:1f:
22:9a:a5:af:a1:ba:65:86:da:51:bd:60:dc:b7:45:20:3b:1b:
86:3e:0f:b2:45:23:7b:10:c8:5b:98:9c:0c:f1:bc:75:c7:b1:
5a:b0:8b:b8:6e:78:35:0e:7b:58:7f:e6:22:1e:67:02:7e:9b:
53:a9:03:0c:a6:48:d6:5f:db:4c:12:93:cc:46:ef:4c:64:4e:
83:7c:b9:c0:0b:3b:10:51:d7:5e:5d:d2:2f:11:6d:d3:82:d1:
a7:05:ee:6c:8d:5c:ee:39:ae:1b:24:4b:32:30:7f:c2:54:68:
2f:a4:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:18 2026 by rpki-client