Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: 5Hvj2yudnalXPTVdzPq2UzU61MT+hoTa82jL3Ngb5kI=
Subject key identifier: D2:A1:0D:81:57:EB:BE:E7:EF:64:F6:F3:1E:CD:10:1F:32:87:C9:B9
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019DA3E5F01BA8485EFCBD716E8873E13D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1862
Signing time: Sun 19 Apr 2026 04:00:48 +0000
Manifest this update: Sun 19 Apr 2026 04:00:48 +0000
Manifest next update: Mon 20 Apr 2026 04:00:48 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: DINH44SNCEXuTbjw4EXfp4EjRxGM6biJrZe6S7n4J9k=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:f0:1b:a8:48:5e:fc:bd:71:6e:88:73:e1:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Apr 19 04:00:48 2026 GMT
Not After : Apr 20 04:00:48 2026 GMT
Subject: CN=d2a10d8157ebbee7ef64f6f31ecd101f3287c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:ce:01:fc:b2:bb:17:a0:99:51:c4:c6:fb:
07:3f:93:d7:eb:f2:29:40:70:98:0d:bc:d2:88:8e:
12:64:4d:6a:58:14:79:39:74:6a:6d:86:55:75:e1:
58:0e:e5:2f:61:f6:61:3d:a4:fe:7b:85:4d:f5:96:
86:29:48:ca:ca:25:bc:86:2a:0a:d5:c3:57:ee:6b:
ab:4c:07:e3:c9:c4:3e:d5:c6:e1:a7:76:66:9e:b2:
29:79:a1:8d:e0:4f:c4:a8:50:94:71:07:4c:ed:26:
cf:cf:5c:4f:8c:63:99:f3:41:c3:ce:1e:9d:43:8a:
45:71:e7:c2:0c:d1:08:4b:97:9f:57:38:30:20:da:
d0:4e:b1:70:76:73:f2:b1:81:95:df:a7:eb:7d:c1:
37:8b:f2:27:05:ce:63:6c:c6:f6:cf:5f:10:60:35:
93:e6:fc:ad:48:8a:42:b1:77:d0:94:b7:53:9a:10:
ce:05:ab:18:1c:a8:4b:46:c5:08:20:9e:71:d8:52:
b2:d4:72:8d:0b:30:90:48:75:5f:a6:c7:09:39:ce:
0a:6c:51:28:41:13:d6:69:b3:a1:e7:52:73:ff:bc:
05:c1:37:9a:04:7c:2a:94:29:e8:4d:63:64:79:3c:
5e:b6:9b:49:7e:b1:a0:ed:30:11:f9:76:96:31:6f:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:0D:81:57:EB:BE:E7:EF:64:F6:F3:1E:CD:10:1F:32:87:C9:B9
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:83:02:6e:bb:bd:2c:d6:00:d0:45:45:57:9c:69:ce:e6:dd:
dd:c9:3b:2c:7b:1f:4d:63:3b:91:c9:76:ed:f6:ed:ff:1b:f2:
69:3a:94:74:fc:0c:96:a4:53:34:bb:70:1c:4c:cb:95:bd:e8:
54:43:2e:d7:4a:61:20:ce:50:e6:66:30:d5:6f:70:95:07:08:
5b:54:b5:b0:d4:41:e0:2f:ce:ca:d1:44:67:94:5b:97:28:38:
3c:20:a3:e7:bc:ab:4e:91:49:37:07:88:66:4c:c6:58:13:7f:
ae:36:46:d1:74:d8:29:d8:87:79:ea:20:e7:18:fd:a8:51:71:
ef:11:7b:0d:0c:dc:0c:71:b6:57:16:01:98:8a:cb:00:eb:64:
d4:28:1c:04:70:e8:8a:bc:0b:3b:b2:bf:fc:25:6d:d1:61:0e:
86:24:38:16:cd:0c:40:a5:8d:a8:21:c6:b9:cd:ec:46:47:ed:
f4:8f:54:09:f3:2d:f4:a1:0f:63:c0:98:ba:9c:83:68:db:2b:
b3:56:21:76:bb:64:a2:9b:6d:93:1b:be:90:0c:e1:e7:ae:87:
bf:97:2f:06:79:d5:9d:3a:27:60:9e:4f:f2:d2:fa:fc:3b:96:
4c:af:05:af:26:73:e7:f6:0d:b7:8d:a2:b8:43:d6:c5:f6:42:
09:67:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:05 2026 by rpki-client