Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: 4GCG3W5pbkewoFxITBdYJvdqjktH/HZRmdxntQ+yItU=
Subject key identifier: C3:09:A5:47:F2:D2:DE:F3:9E:DB:AB:9F:9C:2D:9D:FB:35:1F:6B:35
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019D9AABEE2071F5443811F80AD1643D0C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 0159
Signing time: Fri 17 Apr 2026 09:00:52 +0000
Manifest this update: Fri 17 Apr 2026 09:00:52 +0000
Manifest next update: Sat 18 Apr 2026 09:00:52 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: 02G9hsbd+3NsrTzfvq4cSZmsLtD+RG3sp49XQJAte0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ee:20:71:f5:44:38:11:f8:0a:d1:64:3d:0c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Apr 17 09:00:52 2026 GMT
Not After : Apr 18 09:00:52 2026 GMT
Subject: CN=c309a547f2d2def39edbab9f9c2d9dfb351f6b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:5b:a6:07:a4:23:f0:12:9f:be:6c:32:2c:
50:97:e9:80:e2:07:67:c4:c4:a9:df:41:6d:44:ea:
5a:66:33:bf:d6:1b:c2:57:f8:03:0b:7b:54:78:1c:
4e:7c:15:91:47:ae:eb:10:0d:ba:ff:5d:1f:54:7f:
c1:01:00:45:57:83:1a:aa:7b:4f:10:2f:3d:5b:33:
a6:a2:5e:f5:cb:24:4b:18:67:a6:20:2d:fc:97:23:
c2:71:ae:62:41:4a:cc:f5:e0:49:ed:e0:fc:85:38:
e9:e9:d9:95:7e:a6:99:bc:e8:90:20:19:37:0a:27:
8e:02:4c:8c:ec:a7:29:8f:b6:f7:1f:8d:b1:79:67:
9d:f8:13:78:6a:c4:0e:91:32:a0:e6:c6:9b:2f:df:
af:f7:3a:11:3b:17:d7:26:f7:28:9f:a6:85:82:88:
be:5e:5f:76:95:6f:01:de:6a:f3:05:8b:f9:08:da:
b7:64:9b:35:b3:dd:e3:61:fc:29:4f:fa:14:16:9b:
3b:36:f0:be:bf:92:0c:1c:03:f8:ba:63:e9:6c:b0:
a2:e7:d1:de:ad:4f:32:fe:62:d7:6d:0f:44:aa:01:
e3:fa:25:32:53:5d:49:6b:79:bc:30:67:5c:e5:de:
4c:47:e3:ee:6a:e8:ef:25:1c:cc:9f:78:97:b7:34:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:A5:47:F2:D2:DE:F3:9E:DB:AB:9F:9C:2D:9D:FB:35:1F:6B:35
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:77:1a:b0:a8:d7:65:7d:33:78:5f:78:83:d4:71:54:ea:64:
92:ae:49:13:0c:cf:1b:d6:de:5f:8b:44:4c:0f:8d:26:0e:09:
a6:eb:3e:ad:65:dc:25:94:5c:31:a5:92:df:f5:4c:47:bc:72:
c9:22:25:a6:76:3f:98:75:ff:ff:d4:65:75:a8:6e:05:42:8c:
4f:e7:df:cb:79:0f:bb:2b:33:74:93:52:2b:0a:a2:ff:7c:1f:
1f:40:4a:ea:ab:fe:fb:59:7c:69:26:56:30:53:65:f0:9d:cc:
98:00:d3:7a:35:3d:49:0f:de:ed:fb:34:ac:50:5f:db:70:bf:
d3:30:31:d6:e6:6f:7f:45:c0:17:58:b8:a3:81:2d:1c:d4:70:
51:8a:b7:95:e9:b2:6d:1d:e6:5c:96:53:a1:eb:f2:80:5c:23:
de:1b:9f:b6:d0:c4:e9:4a:7b:1b:31:5f:cd:72:92:85:08:cb:
6d:3c:2b:e0:7f:4d:87:91:5b:ae:5f:00:f9:47:a9:34:89:92:
f4:cf:74:d2:15:4b:8c:21:79:8a:7e:48:45:2a:85:39:37:66:
49:04:a8:c3:52:98:c7:68:3c:4a:8f:55:13:f1:d9:e9:60:18:
e8:b1:f2:2b:11:5c:8d:31:9f:0a:81:43:a3:ec:4c:c3:50:e4:
7c:15:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:35 2026 by rpki-client