Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: Tu8iYbjVX2ZT8H1kTZoZLMqTvUoXc2rbQOIzkwh47y0=
Subject key identifier: D9:98:DD:7A:7B:6D:37:EF:C7:33:CB:C3:E2:12:A6:76:C9:03:05:FD
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 019D9AE2BDE3D3739C55683251456FDB27A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 03AD
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: O6+EFR/rPKYyg8BhpGfUmxq/whe26amroG8Hc0HqVyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bd:e3:d3:73:9c:55:68:32:51:45:6f:db:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=d998dd7a7b6d37efc733cbc3e212a676c90305fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:a6:aa:a6:a9:99:c8:82:21:ba:fe:c2:25:
f6:09:19:67:05:22:f2:85:bf:da:de:a0:67:e8:db:
ee:a9:39:5c:41:21:93:33:a4:3f:d8:19:48:5a:f6:
9a:6e:52:91:1f:c7:e4:12:1a:b6:41:c8:b0:fd:e0:
17:0b:7e:85:b6:1f:38:7e:7f:30:0c:62:79:63:de:
86:fc:71:94:3f:4e:65:17:c7:45:a7:f3:56:b8:2a:
98:53:56:6f:01:d1:13:c4:fe:ad:8d:92:ba:c4:92:
dd:98:0c:19:8b:b2:2c:e7:c7:3f:87:5e:f9:e3:47:
4f:1e:f8:e5:9b:38:ce:91:75:6a:ab:f9:31:28:f9:
8c:c0:96:4a:ef:57:4c:60:88:e1:02:34:22:4d:82:
4b:af:1c:26:5b:4b:d0:1b:42:ff:61:a3:2e:1a:2d:
84:6b:4f:ed:46:3f:10:e7:fb:30:1d:38:a6:6b:9b:
2a:00:12:1d:6f:70:00:31:d7:38:4e:e3:ca:b3:f5:
bd:60:f2:78:03:5a:a9:6f:86:b7:59:70:6e:84:0b:
ac:55:da:33:5b:9c:68:0a:bf:44:ad:cb:a5:36:52:
ac:d7:49:f0:71:30:53:a3:ed:44:6f:7d:61:2a:89:
8d:05:f6:8d:5f:8e:2c:e3:72:61:3b:35:e3:d5:fa:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:DD:7A:7B:6D:37:EF:C7:33:CB:C3:E2:12:A6:76:C9:03:05:FD
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:26:a8:9f:3b:82:64:78:ae:c6:bc:bc:7c:95:6c:c6:87:
b7:7b:47:48:ae:a2:d2:bb:36:f4:f0:48:90:84:ef:a5:2d:20:
56:61:82:4d:f4:39:23:69:77:1d:a0:02:d8:9f:a8:9a:2a:6b:
b8:c1:cd:71:fd:8a:3c:4e:c5:39:6e:14:6a:6d:aa:2a:13:d2:
d5:6f:91:44:5b:a4:e2:df:1b:ba:f6:9d:e7:94:1f:87:21:a6:
f2:66:a4:45:8d:ad:67:7c:2f:1e:0d:d9:27:b4:c3:dc:a2:0a:
b2:b8:58:11:01:dd:4a:4d:d6:d6:c7:8b:ce:10:aa:0d:cd:da:
c0:d7:36:a3:e1:d3:f3:0b:af:a8:a3:c0:fd:70:d7:72:90:fd:
6b:68:5a:4e:f8:c3:84:43:33:f6:f5:d2:7d:c9:fd:50:9e:57:
45:1c:2f:c1:8e:2a:bb:32:bb:62:f8:eb:e8:8c:37:12:b9:cd:
c4:4f:4a:e2:6c:b0:1c:9d:a0:a8:eb:53:d2:1e:a3:35:98:72:
62:16:bb:ae:84:bd:ab:45:af:0d:8d:06:03:c7:c4:13:4d:f7:
54:e9:30:de:47:5c:cd:1a:bf:95:d7:08:dd:65:b9:32:9c:59:
de:c8:b4:ad:10:6a:42:59:4e:d6:45:24:b4:9c:4e:72:9d:05:
8b:eb:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:45 2026 by rpki-client