Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: BRoGx2+MIIjhotl75MRLRaQ6eczS6++Y5z+fYafqkJU=
Subject key identifier: 34:AC:5B:1A:68:10:8A:90:44:45:A2:2D:D2:3A:6D:EC:A4:39:0B:04
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 019DA29C4B410B35667597122CD293F8D519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 0B88
Signing time: Sat 18 Apr 2026 22:00:45 +0000
Manifest this update: Sat 18 Apr 2026 22:00:45 +0000
Manifest next update: Sun 19 Apr 2026 22:00:45 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: 50PPZnjl56jYUY2XqQ3I3v5QNt2PEeb09hixz2/l1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:4b:41:0b:35:66:75:97:12:2c:d2:93:f8:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Apr 18 22:00:45 2026 GMT
Not After : Apr 19 22:00:45 2026 GMT
Subject: CN=34ac5b1a68108a904445a22dd23a6deca4390b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:73:9a:cd:cc:7f:3b:84:f2:d8:c0:2f:8c:
54:3c:1c:f2:ff:aa:33:67:71:f9:c4:44:9a:e3:b2:
93:f8:ef:7f:16:d5:ba:0b:e5:4b:46:13:e8:22:7c:
b9:52:9e:7e:61:05:8e:a3:86:a2:7d:30:74:ec:cf:
86:06:33:c5:72:67:46:2e:ab:c1:5f:f0:c2:18:e0:
d8:f3:22:cd:26:a6:de:32:79:90:21:cc:1a:6f:cf:
79:5e:44:51:3d:2e:b9:94:56:b8:c9:aa:c8:c9:ce:
7a:06:92:21:ae:2e:0a:23:37:47:3e:7d:b6:d1:83:
96:61:27:85:30:32:b2:18:9f:01:48:f6:25:5f:41:
27:d0:b9:de:4c:94:fc:c6:3e:8b:a9:fb:e8:ad:24:
d7:ca:69:6c:f5:0a:70:9b:4c:e3:8e:31:7d:33:63:
25:82:4b:e0:48:86:86:93:9e:c0:2e:1c:fa:8f:8e:
fc:4d:ee:43:b6:05:2e:ea:80:1c:24:0a:cb:75:11:
69:cd:c6:eb:9d:d4:a8:99:1a:7b:95:1b:aa:5b:66:
c6:a9:ff:29:6c:e0:a8:cd:ae:c9:1a:28:e7:3a:bd:
d4:79:a2:88:cd:21:ff:48:b5:07:6a:2f:22:38:46:
46:a6:4a:0d:92:07:60:ed:cf:7e:96:2c:71:85:d4:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:5B:1A:68:10:8A:90:44:45:A2:2D:D2:3A:6D:EC:A4:39:0B:04
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:b9:12:fd:5d:eb:66:b8:c9:fa:bb:7e:25:a1:bb:9b:53:
0f:81:43:a9:33:50:08:f7:4c:8e:85:c7:06:ec:a1:d9:9a:4c:
a9:71:85:0f:a3:0c:7a:b0:a3:35:0c:13:7c:fe:a1:16:1d:d2:
3e:90:2d:93:bc:51:00:92:b1:a2:8f:57:3c:8d:bf:27:40:cd:
1f:df:58:5b:7c:f4:10:3c:ae:49:c8:55:7e:23:0e:36:1b:39:
25:6c:25:80:ef:75:78:64:b6:a9:80:03:1c:4c:3f:2d:5a:0d:
50:be:a4:95:e0:b7:d8:25:00:ac:16:78:cc:88:00:52:a1:d5:
12:c6:35:d9:13:cb:ed:49:e2:44:f8:ed:6c:8f:da:b3:44:fb:
1c:0f:fb:26:99:0a:d3:82:23:29:86:cf:e4:b4:74:f6:05:78:
75:19:0b:4f:c4:63:a8:03:33:63:c0:80:86:c1:a5:12:65:d0:
8d:f0:3b:1f:2d:70:c6:7a:65:15:41:5f:55:69:da:71:be:d9:
62:c8:21:22:41:d4:11:fc:99:f4:81:a6:fe:ae:f6:9b:47:9d:
5f:ee:c0:7d:5f:b9:9f:5e:05:d3:e6:95:7b:ad:4f:85:04:c6:
f6:05:48:f9:73:92:1c:dc:de:7c:cb:c7:33:c0:8e:e4:63:9c:
43:a7:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:39 2026 by rpki-client