Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: yW/RoqUTo2U6f2m90KB3iEosiJ/0JC5azIJr26oddYw=
Subject key identifier: 19:8E:A6:76:2F:51:2B:91:3F:CD:AE:FA:64:3F:C3:1C:98:07:5E:E1
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 019D973CF26CF8A9594885A71379A677517F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 17:00:46 +0000
Manifest this update: Thu 16 Apr 2026 17:00:46 +0000
Manifest next update: Fri 17 Apr 2026 17:00:46 +0000
Files and hashes: 1: ISfG2ceyWuWYeRgRuKuH6VXmeXE.roa (hash: dFAyLFozLbvyA3OIY3CyaWsZeKTyXIGDjyZDQv/swnk=)
2: PQzbNhLV7WARqjZ2K9wwzRtvgZU.roa (hash: Jji1aUdojCSmn8rbwnWDExchCVVbDC1F3h2Ol9wg7o8=)
3: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: ofvts9WFBR0PZ3Ns73t4nKE245FAnYWsuljh0En1bhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:f2:6c:f8:a9:59:48:85:a7:13:79:a6:77:51:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Apr 16 17:00:46 2026 GMT
Not After : Apr 17 17:00:46 2026 GMT
Subject: CN=198ea6762f512b913fcdaefa643fc31c98075ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:35:55:90:78:3f:38:c4:1f:68:e0:1a:fd:
3b:cd:0b:0f:52:1b:4c:ae:0a:1f:95:cb:c3:0e:8d:
39:62:dc:9b:96:21:2b:b9:8e:7f:09:b1:50:08:b6:
ea:c5:8f:91:a1:34:44:64:e5:6b:b3:21:35:de:eb:
d8:a4:0d:6a:6a:af:35:0c:a5:9d:ee:b4:25:f2:45:
25:c9:79:e6:c6:dc:c8:da:f7:e3:16:99:c1:f0:2c:
27:76:cd:31:07:9a:d8:86:f6:82:7e:ef:0b:ea:62:
ff:71:ef:a7:5a:75:41:ac:7d:1f:29:fa:0d:ad:f6:
65:4c:fd:b0:b9:2e:5f:f6:2a:64:33:88:4c:cb:34:
6f:eb:9d:f5:a8:dc:2b:99:8b:f6:96:2e:31:e5:63:
af:01:f7:fd:ba:c9:1b:0f:67:97:4d:eb:53:ae:95:
3e:94:67:87:29:25:bf:22:9d:31:a0:30:cf:91:1f:
d7:17:c4:1e:1f:bd:2a:ee:df:7c:c7:8e:0b:fa:12:
40:83:72:5e:cc:44:bd:48:a0:48:27:28:32:dd:fd:
86:d6:9b:bd:66:75:9e:8f:2d:31:3c:3c:fc:23:af:
3a:81:09:26:6a:07:52:ce:61:58:a9:45:58:67:67:
f2:d6:2f:13:89:bd:59:cd:a7:ee:14:a1:85:60:41:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:A6:76:2F:51:2B:91:3F:CD:AE:FA:64:3F:C3:1C:98:07:5E:E1
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:65:a6:23:c6:11:83:e2:2f:be:37:9e:47:a9:21:c7:50:
5a:59:2a:de:d3:e2:f4:e4:f2:41:c7:2f:17:2b:94:c1:98:ae:
b9:70:b2:53:fb:90:f0:86:b5:c1:b6:91:dc:1c:a7:fe:79:43:
70:39:4c:f4:70:5c:d2:12:4e:b4:b2:0c:77:d5:84:6b:97:97:
10:a1:92:35:2d:09:47:d0:23:fc:17:64:ea:5f:4b:c6:35:ce:
70:2a:b8:ae:33:75:51:a2:76:f0:5b:05:a5:c2:e2:77:21:8c:
8e:76:c3:64:b2:c3:a8:65:a4:aa:e2:79:f5:e1:28:a9:96:7f:
52:f1:a6:67:8d:e6:ea:80:20:de:7c:11:4b:62:ef:3e:f7:d1:
f8:3e:49:ac:0a:20:74:8c:49:0d:6f:76:54:2e:be:ae:13:91:
86:4f:bc:89:a1:27:e5:68:12:11:ce:d9:e1:9b:dd:f0:72:2e:
d7:cd:c8:e3:70:dc:e5:1e:a5:36:83:6c:c6:40:db:22:0b:5c:
f4:95:2b:e7:76:0f:b3:8e:0b:e8:15:61:b7:73:50:15:56:83:
93:b6:fd:e7:9d:d7:3f:36:53:15:bd:d6:80:15:9c:82:a1:83:
82:b2:a4:40:23:be:78:bb:a2:49:22:1b:e2:71:78:2f:a2:43:
6d:29:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:56 2026 by rpki-client