Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: bRwDiE4bkIBTDAsZlXFk7xLVRET9yLXfBEIFVdFiz7c=
Subject key identifier: 12:8C:38:72:B0:54:23:6B:C1:17:04:37:44:81:44:00:10:8D:17:30
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 01A137119C8CA23C58B837A1F625D05E51D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1AA9
Signing time: Tue 13 Oct 2026 21:01:03 +0000
Manifest this update: Tue 13 Oct 2026 21:01:03 +0000
Manifest next update: Wed 14 Oct 2026 21:01:03 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: z4qMx9XL+JlN0ftqZ4OF2rnbc9FHyskSUsDxUGyDpH4=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:9c:8c:a2:3c:58:b8:37:a1:f6:25:d0:5e:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Oct 13 21:01:03 2026 GMT
Not After : Oct 14 21:01:03 2026 GMT
Subject: CN=128c3872b054236bc117043744814400108d1730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:84:5a:c7:fe:99:f6:a4:9d:5f:48:63:02:
98:7e:b3:c0:6f:b5:1d:e5:51:7a:fd:bc:b9:ef:f5:
39:d4:47:9d:96:3a:4e:3c:24:85:e8:f1:55:cf:1a:
a5:b8:68:31:29:18:a2:96:a9:b6:24:84:0e:97:02:
71:f4:09:38:e2:b1:cb:9a:d8:95:37:44:47:07:a7:
fe:d6:41:d4:0f:cb:5e:85:68:d2:31:d6:45:86:0c:
86:fb:d5:91:37:d3:36:0a:40:32:f6:f1:a8:ef:8c:
91:e0:ed:61:5f:63:8e:27:03:70:9a:72:d6:88:36:
52:f1:23:cd:3b:d4:cf:ac:b4:47:fc:5d:e6:e1:e4:
89:ee:ee:3c:07:c2:0c:49:56:02:dd:b0:8b:e1:2e:
e3:4c:f4:fb:b6:ac:4f:fe:c8:a2:08:f0:75:88:27:
0f:d3:b5:ba:43:44:7d:0a:df:bb:76:bb:b3:b4:f1:
b2:b5:d2:04:17:9f:c6:06:74:79:53:a8:4b:bb:94:
a3:c4:dc:b9:ce:b1:0b:d6:d0:e1:19:f8:77:43:4c:
e2:d4:60:ed:03:25:7b:69:04:8e:ea:d8:e7:76:78:
68:79:f8:ec:16:d6:d7:b7:8d:c7:28:43:f8:b6:24:
e4:d9:77:9b:b7:c4:b3:1a:cc:f1:54:19:08:c7:f2:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:38:72:B0:54:23:6B:C1:17:04:37:44:81:44:00:10:8D:17:30
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:8b:6f:3f:69:a4:60:16:bc:ee:4f:4d:b0:33:4c:9c:48:
d4:db:69:40:2a:f2:72:80:b2:77:38:4a:0f:1e:82:dd:f2:6e:
1f:d6:73:2b:e0:57:27:54:e7:87:4b:92:f5:f5:34:99:0e:4c:
68:6a:ef:30:d4:8f:6c:1c:f2:d9:0f:7a:0e:39:41:8f:20:6e:
df:04:a8:d7:60:c6:e3:0c:97:bb:23:f6:d9:b2:1f:5e:60:35:
3c:2f:0d:28:49:07:ca:ba:36:36:f4:11:c8:c6:61:c2:9f:08:
94:fe:5f:f4:40:d3:c9:15:a5:d4:98:93:ed:24:6a:28:26:f9:
b2:62:5e:82:87:24:f5:f7:6c:4a:a1:fc:0d:01:3f:ff:bd:87:
8f:3b:88:8e:b5:c4:b3:f9:ce:0b:97:40:4d:08:11:2d:22:41:
00:53:58:ba:0a:fe:41:41:63:61:db:65:ea:08:42:19:57:89:
ac:7a:37:40:f8:9e:98:de:0c:b1:fc:73:e3:c2:ed:bb:14:57:
ca:5c:38:0d:80:90:50:1a:9f:1f:a0:0b:9a:02:e9:2b:6e:5d:
4f:16:e7:84:a9:8b:59:a4:6d:78:48:94:91:74:2d:fb:f7:25:
3d:b3:24:45:8e:04:b5:42:1c:91:d1:0c:12:01:f6:0f:c4:5a:
89:0c:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:40:18 2026 by rpki-client