Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: G5CNgvBR2NGGkMVJgQr/aBDeRHZSR7HvGLIsxnDKP+0=
Subject key identifier: E6:11:BA:34:5A:A5:FC:11:36:49:63:9D:DE:6A:B8:82:31:DC:3B:0E
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 019D9A74E56F10F28334C87C81B4566EA5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1477
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: HMo_pRRnRqJZqr644LvLDKbEvF0.roa (hash: iH4M3snvNj6PFU+GFjuRkofzdO0jGEo8rVExACKxHtk=)
2: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: TBvnD0P7vjAnsDnoqCxb16IvJMeoYZm++Q6IlW7xkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e5:6f:10:f2:83:34:c8:7c:81:b4:56:6e:a5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=e611ba345aa5fc113649639dde6ab88231dc3b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:90:a8:e0:32:d0:e2:d4:fe:ba:9a:8a:33:
d3:66:42:21:d0:92:c4:6a:bb:f3:04:c2:b6:3e:89:
7e:c1:10:12:a2:f1:55:5f:93:ff:44:ed:38:3c:54:
02:40:bd:4b:61:97:ca:d2:26:2c:d3:40:44:9f:65:
ea:8c:16:1f:b9:fc:6b:d0:e1:02:25:e3:09:eb:7c:
81:7c:cd:6b:b7:92:d1:89:32:44:74:bf:ff:7b:b9:
f7:1e:e3:aa:5e:09:dd:cc:0e:34:dd:87:94:e8:09:
82:b6:a7:76:a2:67:f6:ff:b4:a2:23:01:be:b2:b5:
b7:c8:c2:24:97:53:41:2b:8a:63:f1:82:7b:b6:8c:
df:4c:f4:b0:e3:51:4e:e1:0a:a4:14:d6:96:55:4b:
f5:b2:dd:2a:a8:f7:30:71:cd:82:dc:de:72:f1:24:
61:67:4d:5b:5c:63:3f:0c:24:38:1e:1b:92:1a:54:
0d:45:2e:89:15:0c:38:37:18:7a:cb:67:16:e2:34:
c5:96:b4:3d:e2:a5:d1:e6:b9:26:e5:64:74:28:59:
d6:78:e1:1b:45:c6:f1:96:fd:17:81:60:01:40:52:
5c:e3:23:dd:d3:4a:de:fd:41:aa:cb:bd:b4:4d:98:
11:71:80:6b:8c:e5:14:97:63:4c:49:6f:af:04:1b:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:BA:34:5A:A5:FC:11:36:49:63:9D:DE:6A:B8:82:31:DC:3B:0E
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:11:04:b2:f7:be:a2:7e:f6:34:4a:bc:71:e3:8d:01:87:
c4:91:01:0f:08:8a:da:7f:60:07:a6:7d:f1:ef:09:8a:15:10:
9d:08:cc:fb:55:d2:e8:a5:ef:08:b5:6c:48:92:b9:8d:68:bc:
ba:61:8a:be:35:7d:ac:fc:7b:f9:3b:ba:ae:f9:f5:12:cb:1b:
a2:80:7a:98:bb:95:e0:85:18:75:8e:ed:03:dd:36:1c:0b:39:
07:e6:b7:9f:9e:13:bf:48:00:8b:0b:df:fd:41:5e:31:a7:6d:
c1:45:b2:e4:80:b3:81:3b:74:3d:35:e3:82:11:db:7c:82:6c:
6b:f4:37:0f:25:6f:c7:78:cc:9e:b8:74:73:f8:41:7f:c3:20:
18:4a:2e:e9:3e:98:79:3b:76:33:a9:47:bf:63:55:47:1f:13:
9b:59:d6:58:26:40:94:48:fa:1b:40:fa:cc:98:8a:43:cc:01:
43:28:37:cc:7f:2a:6a:ed:89:41:9d:06:38:8c:42:37:27:1e:
6b:96:e0:7a:e5:06:8e:ac:74:a9:6f:29:44:46:99:89:6d:b8:
5c:ce:41:26:de:75:b4:1c:75:17:ea:61:dd:1f:ff:f6:cf:03:
2f:53:8e:1d:56:0c:a4:a5:5e:6a:79:0d:ee:8c:03:59:bb:99:
1c:5a:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:20 2026 by rpki-client