Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: dSqc8P6G0XO5m0nc/fMmUOZLsGeIOg5xLWsP74oLXyM=
Subject key identifier: AC:C3:B7:34:68:71:69:55:9D:84:8A:38:68:3B:2C:F6:A6:BE:33:50
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 019ED3BE1AB0632D330A9B8256739EDBBD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 044F
Signing time: Wed 17 Jun 2026 04:01:51 +0000
Manifest this update: Wed 17 Jun 2026 04:01:51 +0000
Manifest next update: Thu 18 Jun 2026 04:01:51 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: dSoEvTc3HPR5VO6SWxFCQmXNbCfTW0mKAhTAGuS3jDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:be:1a:b0:63:2d:33:0a:9b:82:56:73:9e:db:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Jun 17 04:01:51 2026 GMT
Not After : Jun 18 04:01:51 2026 GMT
Subject: CN=acc3b734687169559d848a38683b2cf6a6be3350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:ed:8e:fe:b6:96:e2:a3:ed:06:56:4a:2f:
b8:42:58:a8:ec:71:32:8e:7b:48:00:86:34:1a:93:
54:6e:d3:68:90:88:9f:40:c6:02:e3:99:46:e1:8a:
09:4d:81:8c:c3:79:c9:cd:c4:69:b5:16:b5:1e:05:
b4:07:8f:3d:89:98:ae:de:c2:5e:b3:f8:ff:61:c2:
8a:4a:4a:db:d1:a0:61:08:59:b7:ce:69:d3:05:98:
15:23:3f:f8:47:9e:b2:71:1c:b5:82:58:91:1e:c4:
5d:da:4c:dd:8d:00:a4:4e:58:7b:7c:87:ed:c7:ec:
10:60:95:d1:e6:53:4d:3d:e3:0f:48:7a:af:8e:90:
eb:82:3a:61:bd:cb:32:16:47:d3:63:ec:40:0d:86:
da:5d:94:dd:ba:ac:21:0b:2f:c0:37:cf:13:53:f5:
73:f3:85:9c:22:ba:91:af:7c:3a:79:12:e8:21:bb:
9f:89:61:9c:b9:e8:ec:6c:88:71:b4:42:52:5b:ad:
dd:ee:39:f6:3f:7d:e5:c1:c6:b6:9c:91:5b:7c:a6:
f1:56:f7:31:92:0a:b2:8b:28:09:42:0e:a0:fc:35:
5e:b1:57:32:0e:af:01:d2:86:6c:e5:35:90:3a:93:
86:78:9e:1b:c9:f7:4a:e6:1a:ba:8a:5c:3c:0d:05:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C3:B7:34:68:71:69:55:9D:84:8A:38:68:3B:2C:F6:A6:BE:33:50
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:78:27:b5:8c:26:84:d2:1d:e8:34:fe:e1:22:bb:50:37:79:
b8:17:8c:69:0e:74:28:6d:f1:47:0c:90:d3:ff:0e:32:d0:c7:
fd:86:3c:3e:e5:c9:08:ca:92:22:59:bd:60:b5:6b:b3:34:e2:
d7:36:2c:94:f1:68:09:ed:4c:5d:1d:4e:42:17:c9:e5:0b:a0:
7f:e9:46:b1:4a:45:ce:39:8e:da:d8:9a:39:87:5e:ab:9e:25:
bc:b0:4f:7b:63:a7:b9:91:d4:69:95:b2:36:84:21:c9:ed:6f:
78:2e:b4:ae:59:1f:11:6c:77:2a:c4:1e:dd:47:07:ef:de:f2:
fb:7f:ed:6a:a8:f4:b3:94:b1:b3:8b:ae:95:ab:40:6a:35:01:
16:1a:07:42:5f:7d:07:a4:79:80:97:cf:1b:d3:96:0c:1e:36:
55:bc:77:e1:ac:75:d5:3e:ae:0d:ec:52:00:f4:df:66:33:c6:
cf:ca:b6:f8:ce:4d:d3:26:f2:74:0f:4f:b1:b9:0d:bc:a9:e7:
8f:7f:b5:ba:81:b3:bb:56:1e:ce:05:d9:1b:75:f8:11:39:e7:
97:d2:a4:e8:e4:dd:89:ae:c6:a5:06:81:e3:b3:7e:f2:5f:74:
1e:92:fc:bf:23:33:f1:30:aa:b6:69:20:87:81:1b:ef:fc:82:
a6:fd:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:48 2026 by rpki-client