Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: MDh44QgcIMoCDh67V9cL9/as6itFWnbgffarhgPcokg=
Subject key identifier: 71:F1:15:EA:CF:03:9A:8E:24:58:15:DD:90:42:CF:A9:B1:86:70:67
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019D9B5105C17E3D87F4AF2EF80A332FAD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 1322
Signing time: Fri 17 Apr 2026 12:01:11 +0000
Manifest this update: Fri 17 Apr 2026 12:01:11 +0000
Manifest next update: Sat 18 Apr 2026 12:01:11 +0000
Files and hashes: 1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: ABNUKQEqOHyYBHiO9tKO8OgDsx0t46b81ygaOTCuGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:05:c1:7e:3d:87:f4:af:2e:f8:0a:33:2f:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Apr 17 12:01:11 2026 GMT
Not After : Apr 18 12:01:11 2026 GMT
Subject: CN=71f115eacf039a8e245815dd9042cfa9b1867067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:52:2e:af:63:0d:f5:5f:e0:7a:6e:c4:24:
95:df:46:14:aa:b5:7f:ee:9a:6d:6c:fe:5a:94:ad:
64:38:52:0b:23:1d:cf:2f:6d:3e:4b:8c:ff:f2:ca:
7f:17:95:55:ea:3d:91:b0:e0:05:16:63:e5:3a:5b:
81:0f:34:a5:86:bd:f6:de:19:68:f1:71:b4:6b:0f:
ac:04:61:01:1b:f7:56:15:e7:31:df:19:9b:3a:b3:
dd:18:f1:fa:58:41:c5:4a:fd:09:c0:27:08:a8:41:
41:44:5b:b3:e2:4d:4a:e1:b2:7d:b5:26:17:96:d0:
88:2a:01:f1:a6:31:60:17:ca:bf:4e:cb:9f:f1:c6:
2d:55:76:39:6f:8d:0a:5e:8a:fa:df:0e:58:b0:83:
02:45:48:33:ca:d3:97:a7:dd:8a:f6:47:ce:93:1b:
d0:56:27:50:ef:a9:36:61:2a:a1:b6:29:76:28:fc:
35:34:a5:4a:7c:9b:d6:cf:06:64:01:2f:e6:26:05:
bd:0d:8f:07:cb:e2:0c:ee:03:46:0a:36:fb:43:9d:
4a:af:d8:41:61:d9:93:ff:88:c8:44:49:8a:62:0b:
b3:29:c3:c2:d7:76:c8:e2:0d:62:bb:10:ec:c3:f2:
f9:af:c3:c6:da:c6:ce:0d:65:cb:a7:ff:33:39:c0:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:15:EA:CF:03:9A:8E:24:58:15:DD:90:42:CF:A9:B1:86:70:67
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:f7:88:81:ac:dc:1d:25:29:f2:1b:69:b7:9b:6e:cd:17:
41:d6:2d:e9:40:c7:33:10:3c:fa:06:1f:4b:2d:bf:a2:80:fd:
e2:98:de:9b:f1:98:8b:06:75:5d:88:73:48:c6:8c:bc:88:f4:
fe:c0:2c:a7:98:84:fb:46:ac:48:eb:70:b0:91:af:62:c8:82:
3c:e9:3c:c7:b6:b7:5c:9a:6f:af:66:85:71:cf:02:ff:b7:be:
c0:c5:75:15:89:c9:b5:a8:a1:23:87:fd:da:aa:61:04:d2:2e:
ce:a8:08:1b:2a:d0:09:d1:3c:ff:54:1a:e5:ec:2a:71:f2:d4:
91:7c:21:9e:6e:1d:8b:4d:0b:51:0a:b7:8e:5e:60:d4:b9:8c:
1e:f4:e0:c3:34:5c:bf:ee:50:0f:df:8b:93:e3:3b:be:63:34:
9a:05:71:5a:d6:d5:dd:a8:1a:77:ca:9d:e9:94:17:bc:5e:4d:
43:9a:51:72:0b:2a:ba:13:35:5e:47:05:ec:d5:b6:6b:f5:bf:
17:87:97:78:03:19:3f:fc:3e:eb:73:55:da:96:87:db:a5:eb:
c9:92:1c:92:46:2d:16:b5:fb:6b:79:b7:25:c8:47:ca:57:7b:
a4:d9:fd:c8:e5:3d:fd:8d:b8:f0:4b:fc:1c:de:a1:db:51:84:
ba:5f:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:33 2026 by rpki-client