Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: 10geKaEDWLaXME0lBN9Eu6PenrhK4mFJo6gAkmVrHBY=
Subject key identifier: 76:41:D3:C1:BD:82:C3:AC:65:B1:F0:54:62:D9:0D:DA:59:E2:39:66
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019D9A071EE7CFA5C583C2B97334042C0E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 054A
Signing time: Fri 17 Apr 2026 06:00:51 +0000
Manifest this update: Fri 17 Apr 2026 06:00:51 +0000
Manifest next update: Sat 18 Apr 2026 06:00:51 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: 5EsGbQXN+NF0DZM3gyjXdjbiKtgxxOH2755C3X+XBBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1e:e7:cf:a5:c5:83:c2:b9:73:34:04:2c:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Apr 17 06:00:51 2026 GMT
Not After : Apr 18 06:00:51 2026 GMT
Subject: CN=7641d3c1bd82c3ac65b1f05462d90dda59e23966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:81:60:0a:57:28:f5:65:61:05:65:35:92:
2d:c2:dd:4e:f2:56:a5:14:33:b4:f9:51:53:ff:63:
37:b4:81:41:ce:50:96:18:29:93:8a:0b:b7:44:ca:
a9:c7:74:c4:81:07:db:a1:72:ab:85:d6:82:91:f9:
4a:07:2f:de:cd:17:c6:69:58:f0:da:4b:71:9a:18:
ea:84:b5:d3:cc:19:f7:9f:fb:86:6b:a8:0b:c6:36:
6f:a6:c6:1f:9d:c6:1b:72:7e:4d:0a:45:6a:90:ee:
f6:e6:b6:ff:3b:f1:f1:d7:30:96:21:7f:d6:8c:0b:
ff:c1:b4:25:94:b8:f3:a9:7f:bd:5f:4c:96:5f:49:
c4:3e:59:68:57:72:be:fe:3b:d6:65:0d:56:c1:57:
fd:63:0d:32:cc:08:88:0b:f5:3c:cc:b8:f8:da:81:
cd:77:e6:28:76:4a:10:7a:e9:28:1e:13:ff:65:ea:
1e:2a:d4:2a:18:d8:41:b7:b5:3d:d9:b7:74:24:0d:
10:0f:75:56:86:ee:a3:0d:f8:16:c5:fa:f6:61:c3:
f7:78:35:8e:41:3f:bb:24:1e:a5:05:df:32:25:84:
7d:8d:e8:27:c4:d2:c7:df:7e:f0:b5:39:5f:c6:a6:
1d:7a:71:49:5b:9d:16:e6:cf:26:21:f3:d7:34:09:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:D3:C1:BD:82:C3:AC:65:B1:F0:54:62:D9:0D:DA:59:E2:39:66
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:45:52:6a:cb:ac:1f:7e:9e:25:d8:0c:2f:9a:54:5e:e5:e0:
7e:16:88:7b:5e:69:88:83:d8:fe:86:c8:81:34:a4:b2:ac:9b:
84:73:5a:e9:b6:98:5f:7d:a4:68:f7:cc:01:7a:0f:80:36:36:
f1:8f:a8:e1:32:c9:a9:01:b5:4c:ae:ed:ab:80:21:01:67:60:
d7:23:82:22:6d:9e:d0:3e:a0:02:6c:34:bc:d7:f8:31:3d:66:
fd:b5:3d:5d:f9:88:e9:1f:88:42:af:90:bd:5f:31:d5:de:f0:
06:c2:0a:f6:ec:97:a8:d9:57:56:cb:15:e6:a2:8a:da:13:fe:
32:08:46:20:e4:bf:68:fb:f4:6c:f7:73:e7:20:ef:6a:f8:84:
e3:49:76:f6:cf:1a:31:77:12:27:af:53:bc:69:19:b4:99:2b:
13:b2:8f:d3:6f:6f:e7:ac:65:d3:4e:c5:07:3d:c3:e3:d4:c0:
05:13:27:91:11:0e:65:e1:02:d5:fd:e4:ab:ef:cb:ac:bb:03:
24:dc:65:f0:19:56:0b:95:b7:7b:f0:d6:57:3b:47:29:a1:82:
89:83:74:74:f7:cc:d8:44:0f:e4:20:11:37:75:ff:a5:ed:e8:
dc:ba:f1:f8:e1:b1:7d:ec:84:3f:c1:40:d0:ca:39:3b:bd:22:
83:35:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:32 2026 by rpki-client