Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: 54Uu9FkIELuEuLX1//xY421TLU/oHs5do1FVgHfIUFw=
Subject key identifier: 51:E3:B0:F2:3D:C2:74:9E:4A:39:DB:60:A3:E2:51:11:E2:68:47:6E
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019D9B511ACFCE1FD866C4F1DA02A1997047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 15EE
Signing time: Fri 17 Apr 2026 12:01:16 +0000
Manifest this update: Fri 17 Apr 2026 12:01:16 +0000
Manifest next update: Sat 18 Apr 2026 12:01:16 +0000
Files and hashes: 1: QE8bcggi0VZyHRPBfYdhoFDqJM8.roa (hash: wboN+pw+KvvkFtiFgOQIE2+tkc1MrMcN64l5TflOk5g=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: 3WRr4AzLXu11xpvHA4A3AdLRJI8fhG5v9Q4juMNMlMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1a:cf:ce:1f:d8:66:c4:f1:da:02:a1:99:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Apr 17 12:01:16 2026 GMT
Not After : Apr 18 12:01:16 2026 GMT
Subject: CN=51e3b0f23dc2749e4a39db60a3e25111e268476e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8d:a8:13:ae:23:99:09:08:0a:2a:59:12:e7:
65:9c:6b:c4:ff:9a:bc:1a:0c:70:ec:cd:ae:2b:59:
ea:f6:3c:99:93:5b:ff:d1:08:0c:e3:87:fb:87:a8:
16:e2:7c:58:50:9d:ff:83:d7:9d:d3:6c:90:90:68:
b4:1e:0e:a2:dd:47:b5:3f:87:78:97:72:5d:40:37:
e4:66:91:6b:33:aa:82:fa:a5:66:b8:e3:85:0a:67:
fa:aa:9a:28:2e:4b:ba:b0:e6:de:89:a8:5e:ab:b0:
1d:28:df:d4:47:53:09:e8:e1:31:4a:2a:76:39:da:
ff:7c:e2:b8:f5:72:24:33:45:03:ec:b5:4f:e3:54:
aa:7d:1d:26:8c:c6:f6:09:63:a4:fe:3a:0b:15:be:
ac:36:cd:b3:75:0b:cf:2c:77:56:19:75:f6:46:f4:
40:56:dd:e5:06:4f:79:f8:08:89:26:f2:ea:2d:81:
af:38:27:de:91:e5:1a:ed:ab:20:29:51:4d:82:d8:
3e:d6:bd:11:cd:91:eb:9f:c0:94:e9:f1:43:8c:3c:
07:bd:29:cf:4b:60:6f:23:8c:c9:96:1d:0d:c9:b5:
47:78:96:38:64:bf:38:eb:72:84:ee:d7:b6:e6:f7:
50:0b:f4:6a:ab:25:a5:19:03:5a:c6:08:74:00:60:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:B0:F2:3D:C2:74:9E:4A:39:DB:60:A3:E2:51:11:E2:68:47:6E
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:5d:6d:88:f4:5c:26:e5:c7:70:2c:57:ff:a4:4c:a3:bd:
f0:a2:88:21:de:c7:c5:35:22:86:24:51:55:63:57:7d:d9:27:
57:b3:2c:4e:19:ee:e5:b3:90:a9:1f:f9:90:2b:c1:f5:8d:0f:
b8:55:d5:22:dc:39:e1:87:cb:32:f3:c8:8a:30:cb:0e:9c:09:
96:f0:32:02:de:44:83:b9:aa:c2:b2:fe:a2:3a:57:30:ef:88:
3b:82:17:55:81:80:d1:97:69:01:36:7f:3a:49:b4:5e:96:e2:
00:62:d4:3a:a4:c6:d6:54:1d:96:17:ab:c8:05:d6:eb:17:39:
cf:32:80:17:20:fb:cb:a0:af:28:9c:ec:ff:c6:2f:b1:24:6b:
25:fa:df:28:25:5d:de:93:97:1b:ff:2e:1d:9f:c0:fd:b9:2e:
0a:d9:39:ed:59:2d:dd:a6:25:45:fa:61:b3:f2:8d:ed:33:c2:
a0:bb:61:2b:ca:8c:3e:a3:36:d3:83:26:46:36:dd:38:40:b9:
de:3c:52:54:8c:51:6b:d9:fc:2a:fe:6a:90:28:f1:b0:26:44:
47:fe:9b:53:1c:48:51:2e:89:0b:3e:a9:f0:64:a3:00:0b:0d:
0f:65:10:86:60:d9:7b:63:df:86:8a:b6:fd:ac:a0:fe:5c:67:
8e:cd:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:06 2026 by rpki-client