Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: 9DwW+tM5sXH5dEnn7I3IOFDB+kQN2T0d3FFb8aUWBIs=
Subject key identifier: E9:1A:FB:C4:A1:AC:DD:AA:E6:7B:49:8F:3E:99:5C:64:19:58:5D:BD
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01A0C5FC713A14AABA69C315701E0C8763DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 0551
Signing time: Mon 21 Sep 2026 22:00:50 +0000
Manifest this update: Mon 21 Sep 2026 22:00:50 +0000
Manifest next update: Tue 22 Sep 2026 22:00:50 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: NaMGJtjfEaC0GFSzrL8FyK8zizHZQ5wQ7fVFv5JCIVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:71:3a:14:aa:ba:69:c3:15:70:1e:0c:87:63:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Sep 21 22:00:50 2026 GMT
Not After : Sep 22 22:00:50 2026 GMT
Subject: CN=e91afbc4a1acddaae67b498f3e995c6419585dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:78:78:5d:9b:a3:80:3f:9f:7a:ce:af:af:
cd:5e:35:b5:b6:d1:59:e0:59:e7:d1:b8:69:da:bc:
25:2c:de:d9:6b:c9:87:f3:e6:cf:1d:66:af:d3:2b:
f8:4a:87:d2:60:5b:ce:dd:8b:68:11:f2:15:e1:20:
09:9a:be:9c:32:85:d7:29:53:f2:ae:59:a5:c6:a2:
f4:8a:07:b5:52:ef:0a:02:cd:36:e9:b3:a7:35:b1:
af:f5:61:49:07:59:1a:10:1a:ed:49:5f:48:ea:c4:
57:b7:8c:16:21:d0:ff:f5:e1:42:32:5e:55:b3:94:
9d:3b:3a:63:9e:dd:3f:0c:47:cd:f7:de:64:d8:fc:
85:82:31:d9:7e:21:93:33:0f:2a:bd:a2:50:9b:a3:
f9:41:54:5f:a0:94:68:91:83:6e:4c:8e:a7:c6:ee:
19:0c:87:ab:8a:d1:9c:49:3f:3c:a3:0e:21:eb:0f:
97:d5:47:dc:27:cd:56:3f:f6:52:fb:b1:11:ce:98:
4f:76:e5:84:41:07:83:ac:7e:95:93:5a:b3:61:d5:
42:a5:0b:5b:14:f7:cf:ae:c7:04:43:c8:21:37:ee:
25:19:6b:5e:f4:d0:a4:c6:8b:b8:fe:18:da:cf:d4:
54:48:7a:d2:4e:c4:b7:b6:c4:ae:6a:31:9e:d9:00:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:FB:C4:A1:AC:DD:AA:E6:7B:49:8F:3E:99:5C:64:19:58:5D:BD
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:d7:1b:8e:e9:27:c7:70:8e:e0:c6:72:c4:6d:bd:ab:31:
1b:1a:f1:35:2d:55:0c:2a:bb:9c:5a:17:e1:f8:e7:1e:a4:85:
ab:ca:b0:8e:95:2c:1b:de:61:35:0f:15:6d:4e:e4:f1:56:af:
ea:66:bd:e5:e7:0f:6f:a0:7b:91:77:b6:8e:94:d2:7b:f1:e5:
e1:a8:8a:9f:5a:96:ea:af:cc:fa:f1:c4:1f:24:29:35:34:3d:
dc:f8:17:d0:59:16:eb:0f:30:a4:dc:2b:b7:df:3e:5d:40:a9:
83:76:50:92:30:1a:a2:98:26:f6:ef:d4:11:3f:6d:ee:ee:00:
fc:81:c2:7c:3b:38:21:6f:5c:ad:20:eb:9d:80:33:b5:39:3e:
d6:95:87:78:91:62:f9:43:d7:b3:8b:01:68:77:b2:a2:6e:65:
a8:cb:93:d7:6a:86:c6:58:f2:d9:dc:96:f3:f5:f5:c8:a8:47:
f8:04:8f:f8:7a:5e:c3:d1:cc:c2:4e:67:79:49:e2:ce:7f:bf:
d8:8b:97:e0:d2:a6:86:c0:82:64:d1:e0:ff:c4:f2:cf:85:eb:
70:24:cc:f5:d8:9c:93:3a:61:a2:a2:85:c9:fd:33:7e:08:d3:
8b:b3:66:d2:53:e3:fe:6b:a5:08:8e:ac:7d:f3:c1:1a:1d:39:
66:0d:43:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/HE6FKq6acMVcB4Mh2PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh
ZDJkMzUwHhcNMjYwOTIxMjIwMDUwWhcNMjYwOTIyMjIwMDUwWjAzMTEwLwYDVQQD
EyhlOTFhZmJjNGExYWNkZGFhZTY3YjQ5OGYzZTk5NWM2NDE5NTg1ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln54eF2bo4A/n3rOr6/NXjW1ttFZ
4Fnn0bhp2rwlLN7Za8mH8+bPHWav0yv4SofSYFvO3YtoEfIV4SAJmr6cMoXXKVPy
rlmlxqL0ige1Uu8KAs026bOnNbGv9WFJB1kaEBrtSV9I6sRXt4wWIdD/9eFCMl5V
s5SdOzpjnt0/DEfN995k2PyFgjHZfiGTMw8qvaJQm6P5QVRfoJRokYNuTI6nxu4Z
DIeritGcST88ow4h6w+X1UfcJ81WP/ZS+7ERzphPduWEQQeDrH6Vk1qzYdVCpQtb
FPfPrscEQ8ghN+4lGWte9NCkxou4/hjaz9RUSHrSTsS3tsSuajGe2QAc6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOka+8ShrN2q5ntJjz6ZXGQZWF29MB8GA1UdIwQY
MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt
NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3
LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjzXG47p
J8dwjuDGcsRtvasxGxrxNS1VDCq7nFoX4fjnHqSFq8qwjpUsG95hNQ8VbU7k8Vav
6ma95ecPb6B7kXe2jpTSe/Hl4aiKn1qW6q/M+vHEHyQpNTQ93PgX0FkW6w8wpNwr
t98+XUCpg3ZQkjAaopgm9u/UET9t7u4A/IHCfDs4IW9crSDrnYAztTk+1pWHeJFi
+UPXs4sBaHeyom5lqMuT12qGxljy2dyW8/X1yKhH+ASP+Hpew9HMwk5neUnizn+/
2IuX4NKmhsCCZNHg/8Tyz4XrcCTM9dickzphoqKFyf0zfgjTi7Nm0lPj/mulCI6s
ffPBGh05Zg1D0A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:08:04 2026 by rpki-client