Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
File: TYEGKSpQrK_qaBfLoczmd6J34OE.mft (raw, json)
Hash identifier: 9GTlsuQXXghqzhnL/2j6gYfF4PG6a4XMIKvd7w+tWOQ=
Subject key identifier: E5:11:3C:61:88:18:B9:05:98:2C:CE:D6:76:9D:72:6D:4D:80:BB:CF
Authority key identifier: 4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
Certificate issuer: /CN=4d8106292a50acafea6817cba1cce677a277e0e1
Certificate serial: 019D9BF5BF493DCDB04B52C87C9DC033EFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
Manifest number: 0736
Signing time: Fri 17 Apr 2026 15:01:06 +0000
Manifest this update: Fri 17 Apr 2026 15:01:06 +0000
Manifest next update: Sat 18 Apr 2026 15:01:06 +0000
Files and hashes: 1: TYEGKSpQrK_qaBfLoczmd6J34OE.crl (hash: Hv2swDCgqKzu9uwVgztmPAbkJJ9DyHXa+U7zpItbQoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:bf:49:3d:cd:b0:4b:52:c8:7c:9d:c0:33:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8106292a50acafea6817cba1cce677a277e0e1
Validity
Not Before: Apr 17 15:01:06 2026 GMT
Not After : Apr 18 15:01:06 2026 GMT
Subject: CN=e5113c618818b905982cced6769d726d4d80bbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:58:c5:e2:36:d0:b0:22:25:66:4f:f2:0b:
9c:fc:66:6e:c4:f9:36:61:cc:a7:ca:6f:95:2d:a5:
2f:50:d5:08:ff:6c:88:ec:35:29:05:51:e1:6a:4f:
e6:23:17:5e:87:9b:78:ca:7f:d2:a5:56:68:a5:9d:
0b:0f:69:22:2b:0d:78:7d:76:c5:c7:55:73:4a:5d:
63:23:d7:58:29:3f:c0:e0:be:2f:f8:32:b5:af:5b:
b5:2d:3b:e4:5b:3a:53:67:a6:de:2c:7b:25:37:8a:
d9:ef:19:ae:c6:2c:ab:53:fb:9d:99:4a:d4:0e:af:
ad:56:87:77:74:81:0f:41:02:37:95:ae:b9:70:32:
fd:b9:35:dc:55:84:52:4c:75:83:6d:f6:ae:79:06:
9d:9f:cb:42:69:22:77:4a:eb:a4:bf:c2:07:91:01:
66:73:a8:7c:8a:ca:7f:59:c1:de:06:98:a1:ca:f2:
6a:71:66:56:69:ff:7a:8b:3b:5a:79:95:5b:bc:81:
3a:bc:49:d1:82:9e:13:68:38:e8:e5:a9:71:75:36:
41:0c:5a:fe:87:61:6f:66:52:a3:3b:6f:ce:dc:22:
ec:c4:9f:f4:8d:b8:f3:cf:6e:9d:aa:df:9f:20:7d:
21:a3:c0:43:dc:2b:79:e8:8c:46:ba:23:b3:91:ed:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:3C:61:88:18:B9:05:98:2C:CE:D6:76:9D:72:6D:4D:80:BB:CF
X509v3 Authority Key Identifier:
keyid:4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c8:1c:40:91:55:9f:4a:c6:7c:cc:17:4a:ca:3c:d1:37:27:
26:6a:50:04:2d:56:67:08:6e:4b:d5:ab:33:4e:04:98:f8:8c:
e3:78:77:3a:7e:10:bc:0e:a6:68:43:48:26:7d:f8:1d:9a:15:
7f:18:2b:0e:31:06:17:dd:81:d1:6d:00:30:12:46:f1:d3:3e:
fb:6e:c2:1a:7f:ff:b9:63:4a:1c:6c:ff:ca:82:50:56:6f:fb:
c3:2a:53:ce:b3:f2:dc:93:e9:79:ff:0a:85:5f:5d:59:a6:8b:
03:dd:3f:c7:28:33:11:24:2b:66:d2:21:3e:30:03:18:93:80:
69:21:62:b5:b2:70:a5:87:b3:53:20:b9:75:43:27:63:e9:a5:
75:1d:05:20:7a:d8:ce:81:f3:00:91:df:df:ab:fc:59:42:86:
f2:aa:bc:b1:7f:da:d2:bf:30:bc:fe:2c:86:0a:76:86:be:9d:
c2:e3:4f:e7:c7:af:00:05:ad:ec:b5:08:c9:a7:0e:6f:9f:f6:
2a:0a:ab:ec:20:89:c7:ae:4e:16:1f:92:1e:3b:8f:9f:cc:92:
88:19:50:20:0e:46:a7:ce:4a:5b:d8:2d:dd:b2:fd:2b:19:7d:
ed:5f:35:2f:49:92:cc:4a:c9:81:12:a7:d3:ae:60:3b:dc:92:
3d:be:aa:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9b9JPc2wS1LIfJ3AM+/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODEwNjI5MmE1MGFjYWZlYTY4MTdjYmExY2NlNjc3YTI3
N2UwZTEwHhcNMjYwNDE3MTUwMTA2WhcNMjYwNDE4MTUwMTA2WjAzMTEwLwYDVQQD
EyhlNTExM2M2MTg4MThiOTA1OTgyY2NlZDY3NjlkNzI2ZDRkODBiYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArllYxeI20LAiJWZP8guc/GZuxPk2
Ycynym+VLaUvUNUI/2yI7DUpBVHhak/mIxdeh5t4yn/SpVZopZ0LD2kiKw14fXbF
x1VzSl1jI9dYKT/A4L4v+DK1r1u1LTvkWzpTZ6beLHslN4rZ7xmuxiyrU/udmUrU
Dq+tVod3dIEPQQI3la65cDL9uTXcVYRSTHWDbfaueQadn8tCaSJ3Suukv8IHkQFm
c6h8isp/WcHeBpihyvJqcWZWaf96iztaeZVbvIE6vEnRgp4TaDjo5alxdTZBDFr+
h2FvZlKjO2/O3CLsxJ/0jbjzz26dqt+fIH0ho8BD3Ct56IxGuiOzke2fowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOURPGGIGLkFmCzO1nadcm1NgLvPMB8GA1UdIwQY
MBaAFE2BBikqUKyv6mgXy6HM5neid+DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDct
M2E1YjM2OTY4MTdkLzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDctM2E1YjM2OTY4MTdk
LzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8gcQJFV
n0rGfMwXSso80TcnJmpQBC1WZwhuS9WrM04EmPiM43h3On4QvA6maENIJn34HZoV
fxgrDjEGF92B0W0AMBJG8dM++27CGn//uWNKHGz/yoJQVm/7wypTzrPy3JPpef8K
hV9dWaaLA90/xygzESQrZtIhPjADGJOAaSFitbJwpYezUyC5dUMnY+mldR0FIHrY
zoHzAJHf36v8WUKG8qq8sX/a0r8wvP4shgp2hr6dwuNP58evAAWt7LUIyacOb5/2
Kgqr7CCJx65OFh+SHjuPn8ySiBlQIA5Gp85KW9gt3bL9Kxl97V81L0mSzErJgRKn
065gO9ySPb6qlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:27 2026 by rpki-client