Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: 9gMeq/gtLA3YafGwbLiP4TDTKCki3m08X0NrnndMYSk=
Subject key identifier: 80:AC:CC:95:F1:A2:3E:05:96:39:1F:6A:41:C4:6C:57:31:B0:E8:01
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019D9B50E1CD2DEC21CC73C8925C1B8DC956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0E1D
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: Jyr3qQaLkuFGdzyQkxaiY8QG9Zk.roa (hash: +0lMWS/2H1/8Ey92DgxBFaeX3VGewzw1q8R4yOnjB60=)
2: tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa (hash: Xnq4r13lagE2sQ4IPeUB5jj7VyVhoMHz0umUI4YNTLY=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: DQNVTU3UwQIPRTOj0dXblzcCEI30hU3WGxAZK4GiKaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e1:cd:2d:ec:21:cc:73:c8:92:5c:1b:8d:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=80accc95f1a23e0596391f6a41c46c5731b0e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:70:bf:ba:7d:ef:cb:eb:d2:2a:9e:aa:e2:
34:bf:b0:6c:38:ba:05:ff:e1:26:f4:9b:db:10:9d:
01:36:40:d1:2b:49:c0:2e:c3:47:47:e0:5b:6b:ef:
9c:0f:96:f9:d6:35:22:19:06:8b:a7:db:22:55:9e:
d7:20:9f:c0:22:f9:e1:13:59:c8:8b:f9:c5:5f:5c:
3c:85:44:25:05:4f:fa:95:9e:8d:34:3f:77:72:41:
07:09:61:4a:46:05:a9:af:21:f1:74:6f:87:4b:5d:
ac:16:01:c4:6e:fb:61:c3:38:b0:c0:65:d7:26:04:
37:75:d3:f3:c8:04:31:99:dd:05:44:c8:42:1c:7e:
32:8f:ed:60:1d:3d:6a:c0:39:60:88:f0:2b:fc:91:
1b:68:97:4e:96:5f:e0:90:92:98:d0:43:ab:87:18:
19:37:a7:96:29:da:3c:60:01:34:81:17:5d:d2:31:
86:3a:d5:2b:83:4f:ed:25:a5:61:31:ce:69:b0:42:
30:4e:f9:1c:2d:5b:d0:1b:9d:3a:9b:c0:ff:d1:5c:
3b:62:4c:9d:a7:c5:c0:9e:92:4f:a1:b5:2a:31:b7:
73:80:c6:84:e3:74:db:d0:f2:4a:ba:db:f2:c8:55:
62:6d:5f:11:41:ac:4b:d7:fe:7c:5a:95:26:45:a1:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:CC:95:F1:A2:3E:05:96:39:1F:6A:41:C4:6C:57:31:B0:E8:01
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3a:3a:4c:34:f5:ea:eb:1e:68:da:cc:9c:3c:35:41:2d:c2:
9c:8f:e2:90:ce:52:2e:c1:77:2c:49:ec:61:59:7f:08:da:21:
df:79:fe:2f:87:da:ea:6a:1b:82:8e:c6:de:11:ef:20:bb:7e:
e8:c4:68:5d:fd:70:f1:5f:e6:c0:8f:f6:2c:cb:eb:a0:8a:1f:
55:8c:5d:0e:83:67:65:d8:48:82:90:48:9a:9a:25:66:c7:cc:
0f:96:70:e2:7f:89:72:45:46:b4:aa:67:5f:51:a9:6a:98:0b:
0e:8d:6a:df:0a:09:5f:c2:f5:f0:62:43:44:66:5b:c1:be:b6:
32:4c:9e:31:36:3b:3c:47:62:66:b3:85:18:4a:e6:dd:0e:6c:
40:ca:76:5c:b4:bc:a6:9b:c8:cd:2b:93:98:8d:58:41:93:13:
90:9e:66:4b:78:a3:f6:7f:9c:99:1e:19:a2:bb:7a:ff:73:c7:
e6:70:ce:0b:4f:34:e9:3b:3a:ee:98:33:8e:61:5a:14:25:b7:
fa:b1:a0:cb:20:8e:6f:6e:df:37:f9:5e:39:fb:2c:3f:53:b5:
7e:8c:47:45:a6:f5:8b:ba:e3:51:65:25:bb:42:bd:94:3d:22:
26:1f:27:77:01:05:c7:91:20:29:b7:3e:13:3f:01:64:8e:42:
b9:69:a8:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUOHNLewhzHPIklwbjclWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Njc3OWYyMDU1YjI1NGY1ZDViMzI5MmVlYWYwZGQ1Nzk3
NzM3YTYwHhcNMjYwNDE3MTIwMTAyWhcNMjYwNDE4MTIwMTAyWjAzMTEwLwYDVQQD
Eyg4MGFjY2M5NWYxYTIzZTA1OTYzOTFmNmE0MWM0NmM1NzMxYjBlODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKBwv7p978vr0iqequI0v7BsOLoF
/+Em9JvbEJ0BNkDRK0nALsNHR+Bba++cD5b51jUiGQaLp9siVZ7XIJ/AIvnhE1nI
i/nFX1w8hUQlBU/6lZ6NND93ckEHCWFKRgWpryHxdG+HS12sFgHEbvthwziwwGXX
JgQ3ddPzyAQxmd0FRMhCHH4yj+1gHT1qwDlgiPAr/JEbaJdOll/gkJKY0EOrhxgZ
N6eWKdo8YAE0gRdd0jGGOtUrg0/tJaVhMc5psEIwTvkcLVvQG506m8D/0Vw7Ykyd
p8XAnpJPobUqMbdzgMaE43Tb0PJKutvyyFVibV8RQaxL1/58WpUmRaElDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICszJXxoj4FljkfakHEbFcxsOgBMB8GA1UdIwQY
MBaAFLZnefIFWyVPXVsyku6vDdV5dzemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQt
Y2FiNzE3YTgwOWU3LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQtY2FiNzE3YTgwOWU3
LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTo6TDT1
6useaNrMnDw1QS3CnI/ikM5SLsF3LEnsYVl/CNoh33n+L4fa6mobgo7G3hHvILt+
6MRoXf1w8V/mwI/2LMvroIofVYxdDoNnZdhIgpBImpolZsfMD5Zw4n+JckVGtKpn
X1GpapgLDo1q3woJX8L18GJDRGZbwb62MkyeMTY7PEdiZrOFGErm3Q5sQMp2XLS8
ppvIzSuTmI1YQZMTkJ5mS3ij9n+cmR4Zort6/3PH5nDOC0806Ts67pgzjmFaFCW3
+rGgyyCOb27fN/leOfssP1O1foxHRab1i7rjUWUlu0K9lD0iJh8ndwEFx5EgKbc+
Ez8BZI5CuWmoGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:54 2026 by rpki-client