Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: HFdtHEpt714quaBf1A2muXQopuBEfHXNSxG/r75xJqQ=
Subject key identifier: A1:B1:35:27:B6:7B:1F:DE:FB:61:B9:DF:82:76:4C:28:44:D4:96:77
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 019D9B50BDB3D1B5FD0244CD3BD65DBA84F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0C01
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: odGlR9useJQsvLeZnnmgfrpMmRAQwa/aPjOxzfa4QZ0=)
2: vDyYxaD_OvQHT43TMjNvoifQbS0.roa (hash: OGyJnll9v3Henpio/RUnMctAX/okbHPj8xqJsYAY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:bd:b3:d1:b5:fd:02:44:cd:3b:d6:5d:ba:84:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=a1b13527b67b1fdefb61b9df82764c2844d49677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:05:26:8b:31:2a:a1:0d:b7:21:66:5d:cb:
c4:76:b4:59:83:76:4c:d8:7e:d4:c6:af:a3:7e:f6:
2e:4a:9b:fb:a5:84:2f:90:86:34:97:2e:dc:eb:fe:
9e:73:22:6c:5a:4c:3e:43:40:ff:f7:a7:7f:74:97:
c7:aa:16:5e:7b:d9:e3:10:0f:50:70:60:28:fb:20:
b9:b8:91:d7:c6:a2:1c:9f:02:3e:48:fc:74:41:0c:
48:9e:46:4f:63:17:85:9b:dd:01:81:2a:18:dd:94:
24:5b:07:34:44:47:c9:d9:bf:91:37:4f:c3:6c:ad:
94:2a:f7:24:b3:4b:3e:4f:36:b2:ef:63:db:96:b4:
2b:03:5a:de:a2:94:bf:93:f2:5c:71:45:73:7a:56:
55:38:36:ad:cb:14:f5:3e:b1:42:18:20:4b:52:15:
2b:17:8d:16:d9:a0:e6:88:73:57:55:11:1e:31:1c:
25:00:37:e3:95:44:d0:f6:9c:c4:81:e4:4e:62:c4:
17:d3:87:ad:32:b9:0d:24:ef:13:2c:c9:aa:35:f6:
5a:4e:fc:d3:88:07:b6:c2:c2:f9:85:14:21:c3:ef:
6f:42:81:fe:09:1a:e1:82:37:43:8a:6b:79:c2:25:
7a:82:bf:42:0b:6b:04:6c:52:a9:2f:33:31:2d:c8:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:35:27:B6:7B:1F:DE:FB:61:B9:DF:82:76:4C:28:44:D4:96:77
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:42:8e:f6:75:14:e1:85:a4:d7:1f:3d:62:1b:5c:b8:ec:
5f:02:1a:95:72:ea:8c:ab:35:f2:d9:c6:da:80:b2:15:88:a1:
91:da:54:f0:a4:80:82:99:d9:7b:c8:d1:ce:2d:ec:59:cc:92:
a6:66:9d:78:81:26:c4:55:5c:7a:71:1f:c5:6c:ba:a2:d1:08:
e6:cc:ea:2a:9a:71:98:6a:29:19:4b:b1:ed:16:44:f9:4a:fd:
a2:90:3c:bf:60:b3:fe:6e:56:f0:16:96:4b:05:c9:55:d2:ac:
b7:22:3c:b3:99:ff:d0:9c:54:46:ff:1a:92:48:26:5f:fc:a6:
b9:7b:bc:a0:2c:06:3c:a8:0f:8f:71:04:88:75:58:cd:e8:2a:
fa:f7:1f:81:2b:2a:ae:ef:2e:da:0b:de:b9:38:fb:81:76:ae:
fe:ef:a8:9b:df:49:ce:6f:f9:8b:08:53:ea:83:20:96:d6:35:
e2:e7:98:c0:54:e7:b9:b0:d7:64:d2:fb:96:de:e4:e7:c0:21:
bc:42:59:3a:25:58:2d:f1:22:f7:b1:c2:69:4f:8a:fe:4a:a8:
d9:7d:50:ed:5d:70:12:a8:73:53:d7:93:b8:b6:c2:9c:a5:9a:
40:b3:aa:9d:34:77:f7:93:1f:8e:6c:5b:08:e1:1a:4f:cd:ed:
28:85:bc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUL2z0bX9AkTNO9ZduoTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm
ODg2ZTkwHhcNMjYwNDE3MTIwMDUzWhcNMjYwNDE4MTIwMDUzWjAzMTEwLwYDVQQD
EyhhMWIxMzUyN2I2N2IxZmRlZmI2MWI5ZGY4Mjc2NGMyODQ0ZDQ5Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywUFJosxKqENtyFmXcvEdrRZg3ZM
2H7Uxq+jfvYuSpv7pYQvkIY0ly7c6/6ecyJsWkw+Q0D/96d/dJfHqhZee9njEA9Q
cGAo+yC5uJHXxqIcnwI+SPx0QQxInkZPYxeFm90BgSoY3ZQkWwc0REfJ2b+RN0/D
bK2UKvcks0s+Tzay72PblrQrA1reopS/k/JccUVzelZVODatyxT1PrFCGCBLUhUr
F40W2aDmiHNXVREeMRwlADfjlUTQ9pzEgeROYsQX04etMrkNJO8TLMmqNfZaTvzT
iAe2wsL5hRQhw+9vQoH+CRrhgjdDimt5wiV6gr9CC2sEbFKpLzMxLciOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGxNSe2ex/e+2G534J2TChE1JZ3MB8GA1UdIwQY
MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct
MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0
LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDVCjvZ1
FOGFpNcfPWIbXLjsXwIalXLqjKs18tnG2oCyFYihkdpU8KSAgpnZe8jRzi3sWcyS
pmadeIEmxFVcenEfxWy6otEI5szqKppxmGopGUux7RZE+Ur9opA8v2Cz/m5W8BaW
SwXJVdKstyI8s5n/0JxURv8akkgmX/ymuXu8oCwGPKgPj3EEiHVYzegq+vcfgSsq
ru8u2gveuTj7gXau/u+om99Jzm/5iwhT6oMgltY14ueYwFTnubDXZNL7lt7k58Ah
vEJZOiVYLfEi97HCaU+K/kqo2X1Q7V1wEqhzU9eTuLbCnKWaQLOqnTR395Mfjmxb
COEaT83tKIW8Kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:20 2026 by rpki-client