Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: nShW7gox+X+9+nNOT7OcYUPrJ7pJ319MDlL8THa5zR4=
Subject key identifier: 48:02:2F:AB:BF:38:9B:21:66:93:04:3B:AA:B7:C1:95:9A:3D:0D:B9
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019D9AABC4BD75F6A576E64D4D7FD5CCD076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 0926
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: PiSkuJIcfqQ6W6KsourSTtW8kwO5w2eY0wBtwTOEkUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c4:bd:75:f6:a5:76:e6:4d:4d:7f:d5:cc:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=48022fabbf389b216693043baab7c1959a3d0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:aa:20:73:77:da:66:ff:72:a1:de:f4:b3:
9f:6d:49:1b:55:23:03:60:d0:70:ed:c1:ed:73:c1:
9a:95:f7:cb:3d:ef:d3:e3:4c:8d:f2:6b:32:e6:ea:
d2:95:83:c8:1c:1e:45:b3:61:45:1d:73:eb:29:78:
21:03:b1:13:da:10:bd:96:bb:63:12:6c:7c:01:cb:
c2:48:67:07:f5:ec:38:3f:16:29:50:ce:70:67:c6:
d0:49:02:cc:74:23:14:51:3c:c2:74:df:21:aa:bd:
c5:7a:a8:59:d6:db:5e:90:05:b4:28:46:08:b5:21:
02:70:28:3f:a8:b1:72:65:a2:9f:1b:20:48:31:4a:
38:45:3f:71:fe:69:22:67:5a:50:2e:e1:61:e2:67:
34:73:4e:81:68:1f:8a:88:f0:66:66:e8:10:80:7a:
1e:f8:ba:e6:74:d9:ed:a9:bf:6a:88:e8:ed:57:e3:
2c:83:fb:71:51:8f:3a:8a:84:16:12:9d:a8:51:a1:
e0:92:dd:2a:73:6d:90:5b:5e:28:37:d5:e3:64:c2:
b7:8c:51:cd:0a:d4:5b:75:27:74:4a:dc:77:7f:75:
d2:e1:1c:b4:3c:ce:74:0d:a5:89:c6:21:be:3d:42:
cb:e8:93:cb:e0:9c:78:d2:bb:25:aa:d2:cd:67:82:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:2F:AB:BF:38:9B:21:66:93:04:3B:AA:B7:C1:95:9A:3D:0D:B9
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:6e:99:cc:5c:d2:36:50:a2:06:53:90:19:17:bf:63:c5:
b9:88:ac:07:27:15:1e:7b:41:a2:6b:a8:f1:d6:6d:d1:0c:d4:
d7:4f:8c:77:8f:6f:2f:d1:75:91:05:b8:39:f7:f0:e8:7e:e5:
69:2f:24:89:c3:f6:ba:80:66:8b:bd:14:f2:9c:41:e8:42:f6:
7a:7f:5f:48:28:ec:29:db:b6:4a:aa:0a:20:b6:80:9e:e8:1d:
aa:23:26:1d:ad:86:30:d9:8a:7c:b7:2f:7d:35:69:18:03:74:
2e:d6:13:cb:67:d5:79:3b:a7:47:db:54:46:33:27:1d:46:4e:
c2:3f:de:50:60:35:38:1d:05:1e:ee:d3:dc:7e:68:f8:d9:02:
87:a9:81:36:2b:b0:cb:3f:27:f7:5a:ef:af:a7:96:cd:99:a9:
da:c8:a9:ed:1f:c0:50:8a:11:f8:c7:cc:00:82:eb:be:b5:b3:
d4:47:6e:60:46:da:f7:8e:0e:c3:22:b1:0b:e6:6b:5e:08:68:
2c:65:22:49:5c:d5:b5:2c:76:d1:70:a6:56:ba:7c:e3:b3:83:
f9:6e:c7:f0:e8:89:4b:74:03:95:4c:83:85:32:18:75:26:2b:
4e:cf:b1:fd:6a:70:d7:c0:2a:6b:8a:a1:79:cc:31:64:ff:6e:
3f:8a:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:17 2026 by rpki-client