Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: /tTzuKqx2YYqeg/p2Ikyc90Vgpi9s3Oj7ABYOD3IYBk=
Subject key identifier: C0:A9:B8:C3:49:53:71:45:8A:EE:6F:5D:73:13:52:B9:82:E0:93:DD
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 019D9A3F0ACC6E8C0BD994DF3F5A29CCDFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 06B7
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: R8eN-Gsc707Jf_OfiTtz9_9GAXw.roa (hash: nQU1BjOZCkDFTHZ5GWt9nYnHvXRxdvBnHniV1Cq7F7M=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: TImPPMTXWzwVW17qXwJDSmOk/uYGRZalU/XUe6TtcRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0a:cc:6e:8c:0b:d9:94:df:3f:5a:29:cc:df:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=c0a9b8c3495371458aee6f5d731352b982e093dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:4c:d4:88:75:c9:3b:94:6e:33:33:17:cc:
2c:0a:b5:77:ca:68:4d:9b:9b:d9:8a:e7:4e:29:0a:
c3:56:fd:9c:6f:b0:b9:88:56:a2:c2:ca:f6:d0:21:
a0:a2:a2:e2:92:24:6c:6d:31:c8:26:d8:e5:80:98:
5d:0d:30:53:8c:ef:84:a4:1f:36:8a:10:53:25:36:
61:dc:93:db:c7:65:08:ef:12:62:f0:2f:af:c2:08:
3f:18:d1:e4:08:70:95:d3:94:26:4c:62:a7:ab:9c:
34:37:f0:7f:26:77:78:80:f7:76:04:2f:7f:23:69:
e1:55:49:dc:84:70:2b:0e:79:77:16:88:d8:64:60:
34:19:07:d1:2a:38:8a:32:b4:df:b9:42:f0:a1:3d:
6c:cd:d9:d2:bb:4f:1f:fe:d0:ee:70:ab:1d:34:b4:
e1:f7:e2:cb:e2:e6:01:4f:bd:94:1f:56:3b:59:5f:
81:5c:d6:00:5f:ed:6e:90:cb:0a:20:a8:47:fc:a4:
a3:d9:fc:e9:72:fc:93:74:37:47:22:b7:1d:21:86:
c4:7c:14:21:35:2b:f3:0b:91:f4:c3:61:e1:06:32:
43:80:bd:59:33:a2:c2:16:ed:7a:cf:d9:34:35:dc:
95:48:ac:52:89:c3:c3:cf:79:91:9f:52:19:39:28:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:B8:C3:49:53:71:45:8A:EE:6F:5D:73:13:52:B9:82:E0:93:DD
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:fb:80:0c:3a:12:a4:04:31:56:1b:32:61:19:69:f1:b6:
e3:0c:00:38:19:ee:2b:a5:fd:18:61:5e:e2:57:97:d4:47:b2:
15:44:78:b2:2f:33:0d:38:65:5a:77:a9:76:2d:5e:d1:4b:c7:
33:74:14:6c:06:10:79:4a:71:f8:8b:20:09:b0:40:9d:98:5e:
49:9f:0e:2e:98:0f:1c:89:6c:fb:09:23:1a:8f:ad:75:df:c2:
ae:e8:8e:2a:f2:41:b6:4f:97:7b:be:ae:dd:39:cb:f7:a6:97:
f4:df:7b:96:df:2d:e6:a4:e1:76:92:37:45:ef:53:e7:2e:64:
12:54:23:b4:50:ed:56:71:f8:af:b9:2b:23:c0:92:92:99:e9:
d0:9e:20:a8:73:c4:ad:e1:53:c3:d1:f9:9d:31:6b:8b:66:c9:
50:22:91:09:e7:47:6b:b6:9b:9a:ad:a7:c2:8d:1a:57:78:b6:
17:2e:31:0f:45:41:a6:5e:1d:53:2b:e6:77:6d:a3:97:09:53:
e3:26:f2:82:20:3f:af:11:d1:00:2e:9c:5b:3c:39:83:9c:80:
78:a2:64:ba:d7:c4:7b:45:5c:a2:7c:46:87:57:a6:da:9b:19:
6f:d8:44:72:b8:d7:49:80:18:f9:39:6d:39:20:e6:42:d9:59:
4f:fc:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:01 2026 by rpki-client