
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: iiOrlrDBZBdMfr84PCxIt28hVAJ6N2uh0Xk+lAux0nU=
Subject key identifier: 18:2B:1A:95:1F:9E:06:D0:0A:87:CA:95:E1:4B:BF:72:58:F8:00:C0
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019EC36E1CC3F3371F65879E0997ADB666E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 1964
Signing time: Sun 14 Jun 2026 00:00:33 +0000
Manifest this update: Sun 14 Jun 2026 00:00:33 +0000
Manifest next update: Mon 15 Jun 2026 00:00:33 +0000
Files and hashes: 1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: Pl39TKqh3wt+yRSLRnRGtMv0o+KGbAyUeUz5gXyk4F0=)
3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:1c:c3:f3:37:1f:65:87:9e:09:97:ad:b6:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jun 14 00:00:33 2026 GMT
Not After : Jun 15 00:00:33 2026 GMT
Subject: CN=182b1a951f9e06d00a87ca95e14bbf7258f800c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:1e:40:98:85:96:12:bb:64:e4:27:6c:39:
0d:50:24:8f:c4:4a:23:dc:73:1c:36:0f:2f:a8:04:
f7:7e:87:8e:ca:b6:2c:8e:30:99:99:35:76:fd:ed:
02:7b:9c:b5:ec:07:1d:c5:a0:cf:c6:1c:92:7f:da:
12:f0:1e:76:63:58:82:aa:d1:cf:32:14:02:9f:45:
56:d3:15:aa:3f:f1:e7:9b:cd:fd:94:c1:e9:3d:2f:
8b:85:26:42:db:a2:df:1f:2e:c8:e9:7a:1c:8a:b4:
2f:3f:50:21:ad:b4:b0:94:95:be:7c:85:18:93:58:
a6:a3:52:cc:91:1f:66:4f:fa:95:ec:10:0f:9d:aa:
8b:b3:03:ef:bc:3d:67:7b:f8:3d:a7:fb:ef:81:96:
6f:3b:e0:5c:27:2c:64:b2:37:a3:e6:b8:84:1b:4d:
f5:db:6f:00:6d:c2:8f:32:d6:56:1f:ff:39:18:4f:
f2:c8:cc:56:b3:e6:bc:8d:aa:32:22:7e:a5:4a:6d:
9e:e3:e7:cb:62:4f:ab:12:61:5d:cc:2f:2f:03:f4:
11:03:55:47:31:fd:5a:35:42:c5:a8:0d:ec:c3:e2:
c2:2a:00:28:8f:0e:3c:b3:f1:b8:6b:f6:94:89:4e:
1b:f5:0e:c8:b7:bb:15:a2:db:43:39:a2:a9:45:3a:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:1A:95:1F:9E:06:D0:0A:87:CA:95:E1:4B:BF:72:58:F8:00:C0
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:b5:a4:35:e5:a7:59:d3:4a:b3:87:ec:56:47:09:69:3d:
ba:02:ec:8c:bf:95:4a:5a:90:9a:01:5a:0a:26:ea:c3:72:85:
05:2a:67:5d:f7:07:3e:37:72:96:17:bd:82:d1:d8:93:8d:52:
4a:05:39:91:04:6a:98:e3:01:fa:d4:a0:58:fc:69:64:cf:77:
41:46:bc:42:ee:8a:a9:f8:4f:2c:e3:b8:fb:c2:32:9f:74:11:
4b:5d:17:86:fa:b5:72:79:43:47:a5:c4:62:5b:d8:b1:2e:62:
ac:73:f1:35:ac:01:02:77:d5:6e:2e:02:df:f6:ff:31:33:a4:
fb:91:34:7f:f8:c2:04:c7:4d:c9:f1:39:42:9e:9e:25:2f:a5:
b1:c8:21:9d:87:70:df:2b:d8:08:32:e6:cc:86:92:50:e1:a3:
8e:3d:3e:66:cb:1e:ef:63:b2:4b:55:47:e0:3a:6c:23:da:b9:
ee:a0:53:f3:25:23:7e:dc:f9:9d:ed:3a:6f:a8:be:c6:10:f5:
8c:d4:27:aa:89:61:9b:a8:4e:e1:9d:f3:36:9d:60:08:cc:ee:
85:4d:7a:79:ff:b6:1a:4d:9a:b9:d6:52:cf:16:b9:55:5c:8e:
4c:1b:29:ef:f2:99:c8:56:bc:72:4c:e7:38:ea:5a:20:e2:26:
a4:3f:04:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DbhzD8zcfZYeeCZettmboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjYwNjE0MDAwMDMzWhcNMjYwNjE1MDAwMDMzWjAzMTEwLwYDVQQD
EygxODJiMWE5NTFmOWUwNmQwMGE4N2NhOTVlMTRiYmY3MjU4ZjgwMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOoeQJiFlhK7ZOQnbDkNUCSPxEoj
3HMcNg8vqAT3foeOyrYsjjCZmTV2/e0Ce5y17AcdxaDPxhySf9oS8B52Y1iCqtHP
MhQCn0VW0xWqP/Hnm839lMHpPS+LhSZC26LfHy7I6XocirQvP1AhrbSwlJW+fIUY
k1imo1LMkR9mT/qV7BAPnaqLswPvvD1ne/g9p/vvgZZvO+BcJyxksjej5riEG031
228AbcKPMtZWH/85GE/yyMxWs+a8jaoyIn6lSm2e4+fLYk+rEmFdzC8vA/QRA1VH
Mf1aNULFqA3sw+LCKgAojw48s/G4a/aUiU4b9Q7It7sVottDOaKpRTqJ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgrGpUfngbQCofKleFLv3JY+ADAMB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuK1pDXl
p1nTSrOH7FZHCWk9ugLsjL+VSlqQmgFaCibqw3KFBSpnXfcHPjdylhe9gtHYk41S
SgU5kQRqmOMB+tSgWPxpZM93QUa8Qu6KqfhPLOO4+8Iyn3QRS10Xhvq1cnlDR6XE
YlvYsS5irHPxNawBAnfVbi4C3/b/MTOk+5E0f/jCBMdNyfE5Qp6eJS+lscghnYdw
3yvYCDLmzIaSUOGjjj0+Zsse72OyS1VH4DpsI9q57qBT8yUjftz5ne06b6i+xhD1
jNQnqolhm6hO4Z3zNp1gCMzuhU16ef+2Gk2audZSzxa5VVyOTBsp7/KZyFa8ckzn
OOpaIOImpD8E/w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:16 2026 by rpki-client