Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: 8ED0IakkFbHmqW94VxlUfsANanDFWCWPzQo+oBpoB7s=
Subject key identifier: E3:25:4F:3D:E1:76:C0:48:84:32:41:2E:D6:E6:A3:67:7A:A1:3E:5D
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019DA378DF5BCC1A88AFA8D5ABE4FE1518B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0AC1
Signing time: Sun 19 Apr 2026 02:01:40 +0000
Manifest this update: Sun 19 Apr 2026 02:01:40 +0000
Manifest next update: Mon 20 Apr 2026 02:01:40 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 2TBbdEeHkZdEXAiqGS1Ethye33NhrEJhP90n54RxZoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:df:5b:cc:1a:88:af:a8:d5:ab:e4:fe:15:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Apr 19 02:01:40 2026 GMT
Not After : Apr 20 02:01:40 2026 GMT
Subject: CN=e3254f3de176c0488432412ed6e6a3677aa13e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:3f:37:a4:12:c3:ae:29:4b:58:a6:fa:54:
33:96:15:66:26:60:bd:d6:94:f2:cd:c4:3c:1b:38:
5f:db:4e:0b:14:07:91:dd:ed:e4:0a:a5:a9:bf:6b:
3e:56:82:b3:59:29:c2:2f:5f:1f:8d:54:59:56:39:
89:4e:e7:89:40:d9:b0:e2:f3:9a:3b:a3:6d:8e:8a:
ee:4e:bd:77:33:2f:68:8a:4f:ad:3e:b7:14:ef:6e:
07:be:ea:b9:17:14:16:9d:86:2b:14:0d:4c:82:99:
15:74:81:78:ff:68:fb:da:61:02:e5:f4:3c:1a:2b:
26:32:7f:15:9b:c8:ab:8c:ab:67:98:2e:3e:f7:eb:
dd:31:6e:76:05:89:e9:19:8d:df:fb:fe:5c:97:f6:
44:45:ec:a2:74:31:98:59:68:6a:53:fa:25:4a:bb:
22:89:c1:74:f5:78:96:c7:22:39:1f:d0:cb:d2:3e:
db:df:55:1f:49:0c:93:64:d1:67:d4:30:aa:53:84:
b4:e7:14:8b:02:71:d7:d8:9d:71:d7:94:d8:b8:a6:
8c:12:3e:3d:d2:27:19:06:66:76:46:db:ad:c8:27:
6f:60:a1:ca:2b:23:3f:f0:dc:fa:f5:4c:9f:6e:75:
9a:f4:a7:d9:62:a5:1d:f5:56:26:b9:75:2b:c5:5c:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:4F:3D:E1:76:C0:48:84:32:41:2E:D6:E6:A3:67:7A:A1:3E:5D
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:ed:80:6a:3d:c3:38:d0:79:e3:ee:c1:9c:ec:b0:75:12:
e5:b6:86:30:9a:64:e2:e2:de:1b:c9:57:b1:42:60:c0:60:f2:
da:3a:9a:3e:ee:e7:d3:91:22:af:7e:59:b1:e2:40:16:dd:d4:
65:0a:05:bb:f3:6e:89:3b:af:d4:88:ac:1d:19:2d:9d:77:6c:
7c:83:7c:eb:71:93:63:30:b6:f6:b6:c9:81:66:b4:4c:4b:a4:
56:90:08:46:a7:6f:ce:36:9d:f4:35:c6:92:70:ba:f7:b4:36:
ad:59:1c:d4:1e:33:a6:dd:7e:d1:f4:2e:14:ac:69:d4:b8:cf:
31:9d:b1:21:21:c6:d4:f6:f2:45:e2:b8:d9:d1:2a:f6:88:35:
c7:e8:a7:df:16:c9:b9:ea:32:1a:51:23:1a:9f:23:0c:4f:4b:
d6:30:4d:c1:de:e9:25:5b:aa:70:f1:d5:4a:84:e5:29:4f:b6:
fc:5d:90:b7:84:62:f2:0a:58:67:74:d2:04:8f:db:75:2f:6d:
52:ce:2d:71:53:14:5e:bd:0f:11:f4:3e:d0:7b:d1:c3:4a:f0:
89:01:85:b4:b4:10:ac:72:e2:bb:d0:88:d7:be:a7:9a:cb:16:
9e:be:9d:7a:0e:b6:20:98:8d:e6:a1:61:b5:98:2a:7d:56:ff:
20:d1:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:09 2026 by rpki-client