
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: /caxCqfT6IxbkObc2FLusj2Jdw+kc3a1kdqJaHhKCVc=
Subject key identifier: 2C:22:F4:89:D6:62:D8:81:DC:02:A2:1A:60:0A:16:4F:BD:E3:92:E1
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019D985060269D5C51A1363662B2B43FE436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0810
Signing time: Thu 16 Apr 2026 22:01:37 +0000
Manifest this update: Thu 16 Apr 2026 22:01:37 +0000
Manifest next update: Fri 17 Apr 2026 22:01:37 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: e0Gh7LIH3BdEuAoGZp9euMe0ZAaeK5qI6UC3aBWkcKU=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:60:26:9d:5c:51:a1:36:36:62:b2:b4:3f:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Apr 16 22:01:37 2026 GMT
Not After : Apr 17 22:01:37 2026 GMT
Subject: CN=2c22f489d662d881dc02a21a600a164fbde392e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:3c:c9:4a:36:cb:95:84:ad:f7:bd:1a:f3:
63:90:1b:4a:01:fc:f0:d0:01:04:ec:96:b0:11:95:
00:39:6c:50:1d:87:fd:da:1c:02:d9:ab:7f:50:c5:
67:cd:77:bc:d8:71:01:18:3e:01:77:2e:14:a4:cf:
57:11:e4:c3:0d:a0:c7:92:03:07:75:2a:11:46:10:
c1:0e:42:4c:cf:06:31:fc:bc:36:18:2d:54:c1:ae:
bd:4b:77:c1:18:e6:b0:99:91:45:a8:d4:fc:e8:59:
59:33:38:19:e4:60:82:3d:0f:f5:6a:9c:29:d6:39:
34:c8:94:46:92:89:4e:4f:8b:df:28:fd:9e:21:d7:
74:7d:05:60:ed:c1:6a:4d:96:f6:7d:fe:1f:12:a0:
11:21:51:08:dd:41:39:1d:46:1b:94:0c:5a:56:c7:
6d:fe:e6:e0:61:8e:36:d0:f4:fb:17:c1:ac:3d:c5:
47:62:5d:59:a9:0d:4c:e8:13:0b:69:ff:72:38:b0:
77:c8:89:6b:bb:11:07:df:ef:90:76:2a:d6:9a:c2:
a0:a3:c0:c8:fb:75:c8:71:da:d4:7d:e6:3d:4b:7b:
b5:6e:e2:f6:65:75:7c:f0:69:b2:c7:7a:c9:d5:b2:
96:1e:d8:8e:e4:d0:42:fb:b7:05:80:fa:6f:e7:3b:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:F4:89:D6:62:D8:81:DC:02:A2:1A:60:0A:16:4F:BD:E3:92:E1
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:fb:47:5f:b6:84:a9:e1:eb:79:60:2a:dd:7e:12:bb:92:
43:3a:f1:28:d8:32:4b:f2:e7:38:67:cf:87:c6:f0:b2:c4:92:
f0:92:a8:b5:0b:dd:0d:69:79:05:d6:1d:72:e1:1c:94:3a:49:
a2:a2:e5:3b:b9:5c:36:f3:39:aa:f8:b4:45:3c:ba:86:3e:d0:
4d:e1:5a:b7:31:7a:d1:05:94:6f:03:9d:24:51:8c:ea:fb:c0:
e8:03:c7:7c:73:c5:14:24:c7:a6:09:67:18:e1:ac:2b:ae:d0:
de:67:4c:ec:e1:2a:2f:c4:75:7d:fe:55:6b:57:7e:f6:21:6e:
7d:d7:e2:75:b4:5e:fd:78:fe:72:af:49:62:2f:3f:f2:45:92:
c7:34:11:18:92:ae:f8:40:9c:af:6a:47:18:a8:50:a1:ad:1e:
69:c6:07:64:91:a7:b9:d8:d9:f1:ba:a7:5f:cf:ed:c2:5d:ad:
64:65:26:cf:26:a8:72:7e:61:e9:18:80:40:46:84:b7:a6:30:
13:cd:f4:af:54:54:83:6e:3b:d6:0a:50:e8:c4:13:f4:be:e5:
a6:d2:9d:75:c1:08:d6:76:08:56:39:63:92:4c:64:f6:23:c7:
15:28:2c:14:c2:0d:53:8d:bb:02:af:3a:a9:4a:97:77:df:36:
9f:1d:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:43 2026 by rpki-client