Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier: J/EAZGWYDq5ayi5ZtR4MNbNyHDGLNFv2e2I5aVpX9ds=
Subject key identifier: 4D:CF:D0:84:58:90:7B:82:27:7D:2A:77:54:9B:A2:2E:AE:88:FB:C7
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 019DA3E62E2C33CC769C37A8040DF958E907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:04 +0000
Manifest this update: Sun 19 Apr 2026 04:01:04 +0000
Manifest next update: Mon 20 Apr 2026 04:01:04 +0000
Files and hashes: 1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: rLChY0PR3WdrR0S/AY0dnh/MgH+DHc6OI88RVxaE/cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:2e:2c:33:cc:76:9c:37:a8:04:0d:f9:58:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Apr 19 04:01:04 2026 GMT
Not After : Apr 20 04:01:04 2026 GMT
Subject: CN=4dcfd08458907b82277d2a77549ba22eae88fbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:04:eb:34:77:e4:66:6f:69:2e:6d:b2:1d:
10:92:76:e6:c7:c0:bd:30:46:93:e9:42:90:a1:5a:
84:1a:ad:4d:4d:7c:d1:cd:d8:90:ed:5c:dd:e7:a6:
85:32:91:8e:05:9b:4d:28:27:97:b9:6b:bd:a0:1d:
98:3c:f7:ba:dc:59:4e:0d:75:d1:47:4e:cc:e2:03:
c0:2a:a0:af:e7:80:f8:4f:3e:4e:12:16:44:65:5b:
bd:59:aa:ef:6a:57:4e:77:26:36:bb:51:05:9e:4f:
38:d1:5d:a5:00:bb:ad:e0:97:bc:38:9f:28:b8:c4:
3a:a3:42:99:89:c0:3c:82:0e:c7:d4:04:58:23:d4:
0b:9f:5c:a3:eb:c7:37:aa:d5:30:f6:0f:42:05:83:
7c:ac:33:07:c4:4b:fc:78:d3:b0:23:8c:44:86:d0:
41:98:46:d7:e2:ae:78:6e:77:ea:f1:ed:3d:b1:20:
8f:6a:c8:69:10:03:dd:e1:66:de:b4:52:42:7c:e0:
24:f3:fd:3b:d5:19:ff:9e:46:d6:32:1e:4d:92:e9:
55:3e:21:fa:9f:b3:72:44:6b:18:65:a1:c6:b6:05:
dc:16:13:f9:28:30:6e:b9:6c:ed:5c:ad:bd:bb:f7:
4d:af:1a:df:52:7f:1f:05:97:5d:e0:1c:81:d3:8b:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:D0:84:58:90:7B:82:27:7D:2A:77:54:9B:A2:2E:AE:88:FB:C7
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:72:93:10:bc:36:4a:57:18:5e:c5:3b:cb:39:40:e2:21:
7f:f4:09:4d:08:e2:21:a2:64:8d:91:24:25:04:b0:67:e2:89:
5c:13:67:7a:1f:79:b4:39:d8:90:67:f0:fb:52:d2:18:04:be:
f7:7e:4d:b8:d1:28:22:8f:84:d2:97:e9:e9:8e:3e:74:f5:28:
78:f0:87:11:d9:c2:05:21:57:eb:42:4f:57:1b:ad:80:3a:4a:
50:ae:fc:e8:27:b7:51:1d:29:f2:4b:77:61:48:4e:58:d3:ee:
03:4a:97:d6:1d:e9:7e:bb:86:e5:cf:48:f6:e6:e5:a3:35:66:
1f:db:07:ee:27:96:10:66:63:6f:67:60:0f:31:a9:5c:a3:fb:
45:73:c4:a7:34:9a:a1:18:e3:4e:47:52:c3:38:7e:76:25:c1:
a1:76:58:ce:b5:53:f0:f9:96:4f:4d:08:55:01:ff:d4:9a:55:
3b:84:21:a4:71:c5:fe:75:a1:b5:ac:b9:c0:08:89:f6:34:3b:
54:83:fb:7f:83:dc:65:ba:8b:df:83:89:b3:00:fa:cc:19:ca:
dc:80:cd:2e:6b:63:5d:ad:f5:d3:5b:58:92:c8:c7:ec:14:d6:
23:be:c1:25:f9:e8:a5:33:fd:26:aa:ba:bc:1e:a9:bd:41:72:
0f:2d:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:07 2026 by rpki-client