Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: jJcaqeZBHcUMLu9TW50di+14VBVY9CFgPKly65Vq4eg=
Subject key identifier: D0:3B:E3:BE:B8:DD:04:96:F4:47:C4:FF:85:40:90:98:31:87:65:26
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 019DA48ACDDC3D76AA14C6CA1E5DFDF7B430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 04A9
Signing time: Sun 19 Apr 2026 07:00:53 +0000
Manifest this update: Sun 19 Apr 2026 07:00:53 +0000
Manifest next update: Mon 20 Apr 2026 07:00:53 +0000
Files and hashes: 1: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 1j51knh6046Z8z+OIz05OYF+mstEq6nlUgvlNqm8ceE=)
2: bl7MJdXz_EhEovm2UbN_gTDULoY.roa (hash: d4NySi+tNKI3bH93zeiTjj+HNhdoL7gliIMJmvtOe7U=)
3: cLXri-wviIsJ5iHidksAtpZN5SY.roa (hash: UtWyYW3E/+2IaDZ2hwPVOR71jr9t19OookjTmPk0g7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:cd:dc:3d:76:aa:14:c6:ca:1e:5d:fd:f7:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Apr 19 07:00:53 2026 GMT
Not After : Apr 20 07:00:53 2026 GMT
Subject: CN=d03be3beb8dd0496f447c4ff8540909831876526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:7c:33:60:c6:9b:a5:de:10:88:25:9e:63:
a9:76:db:06:41:6b:10:68:19:00:88:4e:5a:f2:c2:
27:dd:b3:50:3d:03:07:a4:27:8e:e9:f6:49:1f:61:
c6:df:90:56:17:10:2e:03:b4:41:55:ed:43:74:f0:
d7:4b:f6:06:d2:6f:9c:69:2b:21:9e:45:3c:6f:fe:
84:f1:cf:43:29:58:44:4b:5d:79:3b:f7:22:3a:5d:
5b:28:81:18:e5:d1:0f:21:1d:b2:94:f6:31:05:6b:
9f:19:9a:0b:2b:4f:53:9d:1e:06:a7:3a:f4:29:e6:
0b:33:0a:cc:e9:99:84:48:1b:20:b3:d0:c9:6b:62:
b5:56:cf:81:b4:2f:1f:81:86:6a:f0:ac:ca:50:99:
85:a1:3c:50:85:7b:0f:a3:ad:7a:b6:63:cb:a7:3b:
3b:2c:9e:8c:c8:7e:1c:a5:a1:0f:e0:4b:37:9f:2b:
9e:5a:94:8d:03:57:e0:00:ee:23:db:64:81:64:7c:
da:a8:8e:44:c3:21:3b:58:5a:92:6e:77:cc:08:ce:
d8:f2:00:a7:27:32:24:06:88:ac:6e:d0:a0:42:94:
b4:b4:42:d1:ae:e6:27:3a:1a:97:eb:55:3e:6c:7b:
c1:a4:b9:5f:b4:65:09:27:58:0b:64:9a:9c:8e:b2:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:E3:BE:B8:DD:04:96:F4:47:C4:FF:85:40:90:98:31:87:65:26
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6a:63:4f:24:0c:aa:52:42:12:5f:11:7b:dc:0a:d3:4a:2f:
13:3e:9c:e3:c2:ae:99:b9:01:16:b6:71:94:8a:d9:c9:40:66:
0a:fd:af:82:94:b9:ba:b8:55:d8:b2:7f:54:10:aa:49:18:4e:
87:26:14:15:84:4d:3b:71:46:01:a5:be:8e:b3:72:97:ef:7d:
20:0e:99:b0:1a:e1:bb:2d:55:f2:3b:b2:f3:e6:6c:71:f4:bb:
f3:43:9a:a9:b1:37:ee:ff:bd:e6:51:fd:b7:38:bc:26:b4:05:
eb:c9:d8:5b:c7:cc:25:d3:5f:81:ca:69:64:42:f7:bd:78:4e:
86:6d:aa:80:fb:6d:f7:f0:b4:d6:ed:1f:28:26:73:ac:f3:63:
7c:13:05:37:55:91:58:ac:89:7c:53:a5:6a:0b:32:a7:0c:64:
e1:db:3c:8e:8f:ec:c1:7d:0f:fe:1d:ad:40:10:3b:35:e7:1a:
3b:c3:68:3e:4f:29:a6:9e:e1:50:c0:17:32:bf:48:07:f9:cf:
56:e4:b7:82:65:8a:e4:ea:4a:ab:54:c5:99:53:d0:47:0b:89:
9b:9a:ac:4b:9f:88:e9:0c:2a:a2:2c:59:58:42:8f:68:09:92:
96:a1:0f:d4:2d:95:59:46:c0:3c:d2:f6:22:9d:07:25:2f:1c:
82:eb:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:33 2026 by rpki-client