Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File: TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier: ieM/KuljH2Mt9q6AO1Yb71ODnHLnKyaY57GcpPGRuHg=
Subject key identifier: 64:B9:90:6C:C4:04:AE:0E:26:CA:18:4C:D0:21:7D:B0:AE:C0:48:2E
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019DA566F061C68B4F6AB88ACEFDC763F109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number: B6
Signing time: Sun 19 Apr 2026 11:01:19 +0000
Manifest this update: Sun 19 Apr 2026 11:01:19 +0000
Manifest next update: Mon 20 Apr 2026 11:01:19 +0000
Files and hashes: 1: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: J0GhtXpIDOJS4/HgJsLfexlfUKtfYB7zbUaEKgdCwmE=)
2: cUio0hpjsJnRx8AmIaqnQMfptkc.roa (hash: TloXswXFjgPJXy/hhj6UJV/95L074RAak3LmtcO6r04=)
3: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:f0:61:c6:8b:4f:6a:b8:8a:ce:fd:c7:63:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Apr 19 11:01:19 2026 GMT
Not After : Apr 20 11:01:19 2026 GMT
Subject: CN=64b9906cc404ae0e26ca184cd0217db0aec0482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:51:03:37:4e:35:4c:65:eb:04:a4:9e:06:
50:42:fc:b2:bd:37:ff:b0:d1:c4:15:b2:34:ad:37:
8a:4a:f3:8c:14:0c:f0:4d:83:8a:ac:a4:bf:09:f4:
22:ec:3f:38:fa:1d:8a:7e:a8:dd:26:f7:4d:a4:53:
39:0f:a0:c9:e0:6c:b1:72:3b:30:c9:0a:11:02:68:
3e:ad:eb:77:9d:43:21:b3:60:e1:95:41:6b:43:74:
fb:f6:e8:70:c7:51:21:36:74:3d:b1:e8:6c:db:a4:
4c:17:98:7f:d9:f4:77:f4:5d:95:53:59:e8:b4:6e:
8d:30:96:e5:d6:97:ae:36:f7:bd:a4:11:c1:0b:b6:
a5:d5:48:b8:f7:79:ae:86:62:5a:15:54:3c:d5:56:
89:64:e0:cf:ec:a0:7b:fa:1e:c4:31:7b:50:94:4a:
e4:ad:c0:58:3d:aa:c8:6e:15:7a:b7:0c:60:ea:6b:
24:b9:b1:8f:28:78:17:67:ec:75:cb:d2:b3:ff:67:
55:66:c5:57:42:e1:8a:83:cd:e3:46:ce:c2:67:82:
73:48:46:8c:37:c0:6b:84:8c:a6:01:c0:3e:fb:79:
2d:14:8c:f0:ee:33:26:56:11:db:78:d8:0f:56:81:
3b:ce:20:63:ea:ba:a4:1b:f5:58:6c:05:90:95:f2:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:90:6C:C4:04:AE:0E:26:CA:18:4C:D0:21:7D:B0:AE:C0:48:2E
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:7e:00:96:24:9e:58:5f:4a:72:71:f1:e2:9e:1d:01:6b:
a8:e6:a8:5d:44:47:cb:2d:45:19:13:c9:9e:f4:ea:67:b4:70:
2f:cb:f6:5f:fc:fb:8e:5f:8f:29:34:e7:1d:23:ca:45:54:6c:
33:7d:eb:b4:96:d4:58:4c:e9:4e:fe:46:84:ee:a9:eb:be:e4:
44:1a:3b:34:a1:12:9e:4d:17:98:ea:c7:7c:62:41:f4:a3:02:
cb:99:1c:9e:c6:a1:5d:9a:e0:96:59:64:97:6f:8a:f0:8d:b5:
80:99:c9:17:b7:19:f4:d8:86:7f:45:1d:31:e6:d2:72:09:7d:
b6:a9:95:a3:cf:90:79:83:6a:19:96:c5:bf:18:02:48:a9:e8:
78:5e:ee:10:57:f0:79:66:e4:0a:2b:79:07:13:77:2b:9c:1d:
45:ca:fd:00:e3:e9:e4:f3:11:a9:25:d6:1d:ef:0f:72:72:ba:
91:4b:41:68:e4:73:5b:3a:f9:cf:e2:ba:da:1f:b2:f6:51:63:
61:ee:95:7f:72:a2:76:4e:9d:1a:4d:d5:9d:d2:56:f1:2e:48:
a8:bf:b3:40:db:1d:4c:c5:c3:be:87:d4:c8:3e:b5:49:af:07:
36:41:92:8b:40:df:24:2b:f7:3d:ed:80:f2:e0:b8:c5:66:3a:
c3:bb:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:56 2026 by rpki-client