Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: yJn8IeBaqj06zqJnD1wKvCzPa3legmnw+J0QJLkyKyU=
Subject key identifier: 6D:54:2D:B5:3C:61:27:D0:E5:F4:D3:34:02:A1:83:6D:C8:0E:36:81
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 019DA41CF803BB6FA78CB220F4BC5DEBA7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 05:00:55 +0000
Manifest this update: Sun 19 Apr 2026 05:00:55 +0000
Manifest next update: Mon 20 Apr 2026 05:00:55 +0000
Files and hashes: 1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: HGvw5kP6zQv355zFDBG8rjwdtNOLWR5fMc77N1Re/2E=)
2: q0EJWTGDwVco__jebUVu3D5kU9c.roa (hash: tb42uJpdP5nMQK249exHWZcGEWgXf/qYgSBE+LChXnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:f8:03:bb:6f:a7:8c:b2:20:f4:bc:5d:eb:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Apr 19 05:00:55 2026 GMT
Not After : Apr 20 05:00:55 2026 GMT
Subject: CN=6d542db53c6127d0e5f4d33402a1836dc80e3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:f6:8c:d6:77:6b:fc:eb:29:98:52:70:82:
cc:44:50:cc:ff:bd:d8:65:71:d1:9c:07:c9:2f:c3:
8f:c2:98:b8:6b:6a:c9:3d:1e:0f:22:74:d2:a3:b0:
37:f5:f4:48:b5:3c:9e:90:1f:97:5c:5c:03:29:1c:
fb:38:af:85:df:c8:55:78:d8:69:78:08:73:d1:58:
d1:eb:d4:b5:c2:40:2a:c4:12:03:ee:11:95:d6:69:
7e:2d:b0:38:f0:9f:42:46:ea:2b:7a:63:c7:99:1b:
c8:ac:fb:31:9b:0c:78:cc:7d:93:cb:bd:d5:47:3a:
e7:9b:f0:61:12:60:23:8c:50:d2:c0:88:72:10:c8:
f4:4f:77:b4:8f:dd:14:26:2d:f9:42:9b:c8:80:a1:
17:33:b6:aa:4f:80:58:73:8c:75:01:14:e0:00:4f:
17:5b:7e:c3:24:16:18:1b:df:23:18:40:14:51:45:
74:79:84:8b:58:f7:de:c0:d8:00:22:7a:a7:5a:23:
54:f0:fb:6a:58:ff:84:88:40:0d:9a:31:52:0c:c6:
7f:75:ee:0f:48:86:ca:76:3f:91:14:49:b4:0a:73:
c2:bd:23:62:03:ba:12:a8:75:24:af:72:ca:37:17:
54:70:0f:7e:dc:65:4e:a4:6e:d0:f8:a2:da:8b:73:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:2D:B5:3C:61:27:D0:E5:F4:D3:34:02:A1:83:6D:C8:0E:36:81
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:20:b7:dd:c7:ed:82:c4:e6:74:ea:84:e0:81:24:a2:a8:
dd:f9:68:e0:1b:ae:ac:be:94:5a:63:5c:38:5d:91:1a:bb:ed:
01:42:72:e4:7e:62:8a:b5:94:8e:41:90:92:48:23:d6:3b:1d:
bd:3b:d8:dc:31:50:fb:26:d2:5d:f8:c1:b0:86:1d:bb:b0:4a:
c3:2e:64:81:f2:61:6b:cf:9d:f9:93:59:cf:f3:72:45:c9:71:
4e:a2:9a:8b:74:97:cd:58:6d:6f:f5:64:cf:ce:c0:e8:b2:9c:
38:6f:62:1c:0e:ce:3e:52:ce:12:4b:e9:97:d9:8d:a9:79:65:
f4:32:3a:aa:d8:76:7a:23:65:58:3c:ac:96:33:4a:a9:2d:42:
36:33:f2:f3:4f:65:29:24:0b:7d:60:73:6f:af:00:8c:b8:0d:
b6:46:ef:4d:25:85:fd:94:30:1a:9f:25:9f:72:6a:0a:ca:e5:
77:a7:eb:c4:b7:b1:81:1a:86:91:b5:44:db:34:98:7f:4e:3b:
9c:52:6d:5d:75:c8:c9:ea:7b:1e:8f:6a:56:b0:79:ad:93:91:
5e:92:62:1a:4e:7c:ea:32:b1:43:e2:6d:22:7d:c1:38:32:90:
d9:e4:37:30:bf:d6:6c:36:0f:30:30:4c:77:2f:eb:aa:b9:95:
ae:a5:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:13 2026 by rpki-client