Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: 1b7spob65AQquX2UvvVJTC2wbE7PLjKyW3M8q0zBlfA=
Subject key identifier: B2:A6:20:FD:84:24:A3:CB:37:78:7B:4C:EB:8D:CC:7C:ED:C8:E7:BD
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 01A15063CD74BA97B0DBF4BDE627E9D665B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1A42
Signing time: Sun 18 Oct 2026 19:01:20 +0000
Manifest this update: Sun 18 Oct 2026 19:01:20 +0000
Manifest next update: Mon 19 Oct 2026 19:01:20 +0000
Files and hashes: 1: 9QPcxbHpWgVOHRfj3NoPhiQ58EM.roa (hash: XHp5Hjfo/9X6W4BtkLuJfmSNkmSR4XZrHJ8I100zW0g=)
2: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: wiVxfm+/dGP5XANVU+9f/4XmrcA5cCs3y2wZR92xAe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:63:cd:74:ba:97:b0:db:f4:bd:e6:27:e9:d6:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Oct 18 19:01:20 2026 GMT
Not After : Oct 19 19:01:20 2026 GMT
Subject: CN=b2a620fd8424a3cb37787b4ceb8dcc7cedc8e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:5d:51:b9:ea:29:0e:af:c0:86:31:5a:f6:
3a:04:24:5e:cc:41:05:cb:97:33:9c:f7:97:e3:66:
64:38:44:b0:71:84:2a:d1:26:b3:e4:1d:f5:eb:08:
c8:d3:a0:62:d8:d3:8b:72:7a:65:e3:81:24:c8:d8:
19:97:73:e1:15:a8:8f:eb:45:9b:11:e9:f5:9b:15:
c1:b1:82:82:c6:86:47:46:49:d6:3a:97:e9:3a:f9:
ce:dc:16:42:11:a2:23:6b:60:f4:ce:7b:66:ed:08:
7a:ea:a0:23:06:67:eb:e7:23:19:fb:68:3f:47:5d:
2c:35:30:b5:0c:1e:76:28:36:32:fc:48:5e:d0:ab:
fc:b5:bb:5e:24:1e:0b:d6:0e:08:36:a0:21:36:dd:
12:2a:f1:ae:07:81:0e:ab:23:12:41:dd:57:ce:91:
3d:24:5a:49:1b:f5:02:ec:ae:01:de:6f:b3:d2:8a:
0b:4f:56:f2:2f:e5:16:dd:f9:6d:51:26:1a:79:ca:
51:70:2e:87:d2:fd:52:a3:fe:d4:c6:16:da:3b:07:
2b:0e:2f:ac:73:bf:ea:61:87:d4:2f:e4:f3:30:ee:
de:20:5f:68:b3:19:b9:8e:8e:87:ce:86:4c:2d:23:
b4:cd:60:57:4b:c0:63:20:c4:14:2d:20:c3:67:65:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:20:FD:84:24:A3:CB:37:78:7B:4C:EB:8D:CC:7C:ED:C8:E7:BD
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:46:30:3a:8d:93:d5:eb:74:bb:59:65:94:5a:5b:aa:df:23:
88:e9:ee:2b:a1:ad:de:64:cb:6d:19:21:a1:14:d5:d4:0f:d2:
3d:cf:dc:ba:09:d9:42:e3:ab:ed:3e:6e:77:72:41:c2:55:b5:
a4:ca:0c:c2:49:a5:53:15:f3:c1:5e:15:20:ef:dd:51:40:25:
a6:17:92:f1:6e:83:44:f4:99:f4:9b:0a:76:e7:fd:2e:07:52:
46:25:03:39:9c:24:79:e3:69:79:7a:dc:66:88:ea:4c:40:14:
c6:ab:b3:bc:e6:83:8d:34:7a:00:b8:e5:c9:0f:af:e2:63:ff:
75:6a:ab:45:3b:da:ed:af:6a:8d:77:91:c4:bf:8e:3a:af:4f:
3a:2a:53:ec:1e:03:95:cd:bc:52:ff:31:0b:75:d1:ab:a7:24:
9a:fe:89:95:12:97:28:07:f4:0f:c8:a6:0c:39:68:e3:25:2d:
d5:7d:61:44:60:a0:5b:a4:16:de:66:02:28:d3:9f:b6:44:51:
22:99:13:18:37:59:b3:bc:0a:fe:6f:30:48:45:f6:29:cb:26:
78:16:11:38:75:0d:72:7d:13:dc:d3:70:bc:f6:81:56:54:a4:
17:43:8c:ac:a0:41:c6:41:42:57:99:c1:09:3f:1e:78:fa:18:
01:03:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:39:53 2026 by rpki-client