Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: yyhdtuWX5kn80IfC4w5kr5ElyD09Y7eGH6CVGI86xO8=
Subject key identifier: 91:F4:EA:89:49:46:AF:F1:07:10:67:07:C7:D1:56:69:F5:D0:59:A5
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019DA41D11A05169300ECA73EE0650DFE333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 03ED
Signing time: Sun 19 Apr 2026 05:01:01 +0000
Manifest this update: Sun 19 Apr 2026 05:01:01 +0000
Manifest next update: Mon 20 Apr 2026 05:01:01 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: esyV0/RTbm+Fkjsp2e2eO+Yx1DkUVEdNrMdOyRRpb1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:11:a0:51:69:30:0e:ca:73:ee:06:50:df:e3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Apr 19 05:01:01 2026 GMT
Not After : Apr 20 05:01:01 2026 GMT
Subject: CN=91f4ea894946aff107106707c7d15669f5d059a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:b1:c9:a5:5e:b3:70:b7:d8:eb:53:d7:0e:
a2:35:33:a5:17:7b:9a:a5:34:54:b5:79:1b:44:d3:
f4:9c:99:a6:18:ee:81:b2:ce:7f:ca:4a:fb:3e:c8:
8d:6d:24:c8:b3:31:65:ed:e3:90:45:24:00:7f:db:
7f:9c:aa:5c:d1:f3:6c:36:58:cc:82:a0:7a:25:b5:
cb:22:69:4b:37:2d:78:4b:0e:11:97:96:28:46:0c:
5a:62:30:64:77:83:81:05:0c:7c:cb:b3:d1:90:e3:
5b:2c:9f:cb:7b:79:05:ca:94:21:48:0a:2a:f5:10:
73:6a:92:98:08:f6:ac:c8:e9:c1:2c:f2:1c:c9:bb:
5b:28:8a:27:cf:2e:fd:75:c0:29:4e:20:43:9c:3a:
f4:b7:40:a3:b6:8d:c6:ec:1c:79:0a:43:f0:bc:ac:
0e:4c:46:f7:4e:6b:05:2c:b6:12:ed:12:75:4a:f3:
e3:56:5b:19:78:1c:fa:1f:4b:7f:f6:2f:fa:5f:e7:
57:2f:5e:33:78:cb:d4:4e:8d:f3:4a:f9:49:4d:57:
f8:b7:64:41:23:2a:8f:6f:2e:61:c5:d3:25:68:22:
f9:9e:84:34:bb:ed:23:24:39:ce:0d:19:c0:96:84:
84:59:56:f5:d9:8a:6c:4c:2d:c4:e4:02:97:99:e9:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:EA:89:49:46:AF:F1:07:10:67:07:C7:D1:56:69:F5:D0:59:A5
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dd:12:29:f0:2c:7b:f5:ea:0e:46:d2:5d:3f:aa:16:6f:f9:
82:d5:56:d3:e3:b2:18:f5:f0:94:89:ad:43:e6:81:40:92:84:
1f:3c:1b:c3:a1:25:9a:32:64:70:69:fc:a0:8e:b4:74:50:4c:
1f:d6:03:81:6f:71:f5:fc:d6:ce:bf:f3:1f:ec:8e:7c:ec:c7:
5c:7e:72:7b:d9:a9:5a:7b:ed:f5:a1:7f:cc:78:50:d7:a7:05:
b3:91:a9:f9:97:ae:68:ee:2a:c8:fc:d9:83:3d:4c:0b:2a:6a:
99:15:2f:af:49:c5:19:b9:d5:9a:a3:c3:f5:de:0d:8e:63:48:
0e:15:14:42:58:d6:2b:21:49:e9:44:f2:5d:fd:15:c7:11:65:
5f:42:af:f3:e1:3b:8c:48:6b:5f:76:dd:0b:e3:ba:5f:2d:ea:
0e:fd:b5:49:72:2d:3a:aa:ef:ce:bd:f9:f3:b1:dc:08:72:09:
00:7e:d8:42:8a:2f:e8:2b:bb:0c:4d:ff:45:de:c2:fd:f5:df:
80:fd:95:42:0c:3d:62:72:2d:2f:b1:99:dd:82:2e:2c:35:61:
9f:36:2e:7d:db:c5:fa:68:67:32:ee:11:f9:2c:5e:82:a0:94:
b4:90:73:32:b6:5b:ee:3d:26:80:ca:b1:7c:4f:8e:0e:3a:3e:
22:d4:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:04 2026 by rpki-client