Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: L5vWL203KzDnlWgf2qjSvgnZboLmWhGssP+Z1mDjt+M=
Subject key identifier: 3E:20:9A:26:37:0E:FB:C3:1B:EF:1B:8D:C5:C3:2D:C3:87:1D:08:CD
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019D9C63989D38DFD84E4DB279B664F33A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 010F
Signing time: Fri 17 Apr 2026 17:01:05 +0000
Manifest this update: Fri 17 Apr 2026 17:01:05 +0000
Manifest next update: Sat 18 Apr 2026 17:01:05 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: izAA4CVMAr6qcMh7neRh9IGB0rpGNfX7tC8OmQkWPqM=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:98:9d:38:df:d8:4e:4d:b2:79:b6:64:f3:3a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Apr 17 17:01:05 2026 GMT
Not After : Apr 18 17:01:05 2026 GMT
Subject: CN=3e209a26370efbc31bef1b8dc5c32dc3871d08cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:d0:bc:c8:f5:5b:06:02:9d:7b:e6:ea:74:
86:14:84:51:b6:69:06:63:6d:61:1b:2c:c2:24:15:
62:8e:e2:2f:93:48:c8:fb:91:60:95:d2:e8:12:04:
dd:ac:61:6c:b9:7e:4c:c3:7e:68:f0:de:e9:61:1f:
66:a7:13:c4:03:40:6e:b3:0e:46:bd:b2:fa:82:67:
5a:a4:ec:49:08:1f:70:32:54:d8:5b:54:cd:04:41:
75:5c:d2:93:b5:30:51:05:d0:63:3a:57:34:24:81:
cc:53:56:6b:77:9f:c2:31:78:11:eb:be:1f:a8:f7:
f8:5d:c5:6c:a5:a7:29:68:67:c0:18:ec:29:96:98:
d2:21:06:c7:98:72:ca:70:38:11:e7:af:28:d7:d1:
0e:dd:61:90:f0:28:24:71:66:10:26:d9:0a:56:41:
5f:bc:c6:4c:17:f2:e5:ae:fe:14:e0:ca:5f:be:98:
c8:f0:aa:6c:79:24:2c:45:6c:10:8e:98:ee:35:ed:
51:6a:24:86:4c:6a:4b:0f:82:65:76:35:25:ba:69:
ea:b8:88:bd:e4:51:37:37:27:31:4c:6a:4a:cf:a5:
44:d5:56:5d:6f:27:60:14:1b:05:3f:cd:ac:bc:ac:
03:6f:59:45:11:f2:44:31:60:ba:18:88:b1:68:34:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:9A:26:37:0E:FB:C3:1B:EF:1B:8D:C5:C3:2D:C3:87:1D:08:CD
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f0:5c:45:41:8c:85:51:16:65:c1:49:6e:87:71:89:d7:14:
09:93:66:00:92:fe:ee:dd:10:2e:33:1e:39:39:13:21:07:63:
00:b7:bc:b6:58:62:13:bc:91:87:46:e8:77:8e:a1:4b:66:d6:
60:90:50:59:d0:36:af:c2:56:bc:d0:f5:3b:88:ac:33:91:3e:
1b:e3:5d:79:f4:43:e5:00:3a:6c:7e:08:1a:f7:43:83:bf:7d:
da:2f:8c:f6:4c:da:78:a7:8b:51:fc:8d:15:b5:b8:37:b6:76:
84:cc:7d:c5:73:59:74:ef:d1:f1:a6:e3:45:44:a9:86:35:e9:
bb:6c:3a:1c:d2:57:72:fc:2d:6c:4b:ad:60:9b:f9:af:f5:af:
32:1e:c7:5f:85:f7:f4:66:76:a3:2f:6e:28:c3:b3:d5:cc:8c:
77:30:8c:8e:5a:79:26:31:61:91:bc:e7:11:a5:0a:da:2b:a2:
5c:22:63:bb:da:c9:e8:77:fb:c6:00:f4:1c:91:26:d6:06:a1:
e1:93:04:9f:62:de:81:87:d8:1f:a4:e4:f1:4f:de:a9:04:65:
31:42:15:7e:8c:af:ce:96:81:c7:6d:23:ef:cd:60:0e:c8:47:
12:2f:45:b1:28:89:08:ae:54:a9:bb:48:41:cc:c9:61:09:79:
c9:a2:01:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY5idON/YTk2yebZk8zoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2E1MjYxMGM3N2MyNDA2OWM2YTY1OWY1Zjc1ODYyNDQ0
ZDIxZDEwHhcNMjYwNDE3MTcwMTA1WhcNMjYwNDE4MTcwMTA1WjAzMTEwLwYDVQQD
EygzZTIwOWEyNjM3MGVmYmMzMWJlZjFiOGRjNWMzMmRjMzg3MWQwOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1nQvMj1WwYCnXvm6nSGFIRRtmkG
Y21hGyzCJBVijuIvk0jI+5FgldLoEgTdrGFsuX5Mw35o8N7pYR9mpxPEA0Busw5G
vbL6gmdapOxJCB9wMlTYW1TNBEF1XNKTtTBRBdBjOlc0JIHMU1Zrd5/CMXgR674f
qPf4XcVspacpaGfAGOwplpjSIQbHmHLKcDgR568o19EO3WGQ8CgkcWYQJtkKVkFf
vMZMF/Llrv4U4MpfvpjI8KpseSQsRWwQjpjuNe1RaiSGTGpLD4JldjUlumnquIi9
5FE3NycxTGpKz6VE1VZdbydgFBsFP82svKwDb1lFEfJEMWC6GIixaDT8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4gmiY3DvvDG+8bjcXDLcOHHQjNMB8GA1UdIwQY
MBaAFEzKUmEMd8JAacamWfX3WGJETSHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQt
MWIwM2U1ODk0ZTA1LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQtMWIwM2U1ODk0ZTA1
LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPBcRUGM
hVEWZcFJbodxidcUCZNmAJL+7t0QLjMeOTkTIQdjALe8tlhiE7yRh0bod46hS2bW
YJBQWdA2r8JWvND1O4isM5E+G+NdefRD5QA6bH4IGvdDg7992i+M9kzaeKeLUfyN
FbW4N7Z2hMx9xXNZdO/R8abjRUSphjXpu2w6HNJXcvwtbEutYJv5r/WvMh7HX4X3
9GZ2oy9uKMOz1cyMdzCMjlp5JjFhkbznEaUK2iuiXCJju9rJ6Hf7xgD0HJEm1gah
4ZMEn2LegYfYH6Tk8U/eqQRlMUIVfoyvzpaBx20j781gDshHEi9FsSiJCK5UqbtI
QczJYQl5yaIBUw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:47 2026 by rpki-client