Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json)
Hash identifier: /orDfv+wmbwU0IWcl8bZqwUneR9+EhLqxn9lhrCiy58=
Subject key identifier: C0:29:3C:5A:08:37:4C:1B:71:7A:58:95:B3:7E:D0:BE:BC:B3:FF:BB
Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982
Certificate serial: 019DA453C8DFC3A7DAEAF853D368500195B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
Manifest number: 015F
Signing time: Sun 19 Apr 2026 06:00:47 +0000
Manifest this update: Sun 19 Apr 2026 06:00:47 +0000
Manifest next update: Mon 20 Apr 2026 06:00:47 +0000
Files and hashes: 1: mTKfXNqZr-ethdBjOn6lFjS-PNs.roa (hash: HOGNlGeAoZ/b5RPWvVv+b+yxDspoiWHKwc8eGW2VV4w=)
2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: mtlCbVt8X9af68LdCg7eUNnkgY4/o+0GGanRO6uXLT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c8:df:c3:a7:da:ea:f8:53:d3:68:50:01:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982
Validity
Not Before: Apr 19 06:00:47 2026 GMT
Not After : Apr 20 06:00:47 2026 GMT
Subject: CN=c0293c5a08374c1b717a5895b37ed0bebcb3ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:83:00:a7:77:9f:97:ff:9e:37:b0:47:5d:
b7:61:23:98:f3:d4:66:71:45:15:59:7a:2e:37:27:
90:59:a9:04:be:e8:65:9c:c6:c7:5c:aa:f9:62:72:
2c:fe:4e:da:13:fe:f9:a9:67:73:2a:a3:3b:e6:b5:
90:c5:57:ef:28:84:ae:e6:4d:25:de:e4:f9:06:d1:
6e:2a:33:99:2c:dc:29:f0:f9:cf:f6:a3:03:23:28:
06:ec:a7:d1:b1:4d:14:25:fd:c6:4c:69:88:f1:25:
16:0e:91:a3:7a:6b:ee:78:9e:4f:05:67:15:d2:d1:
d6:a2:16:f2:73:91:97:dc:25:b7:70:38:d8:ea:3a:
05:04:2e:02:8e:2c:0b:f9:79:02:20:f1:5f:b6:dd:
d6:67:e9:39:38:e4:9e:c7:02:63:dd:4a:d9:ed:bc:
03:61:5f:ee:67:b9:6c:f9:66:50:ce:12:8a:f0:8d:
bd:75:57:98:a9:e7:f6:69:e0:f8:08:e7:63:9d:6c:
c6:78:e0:4e:db:79:6d:37:a1:9f:1a:e2:21:2a:fa:
9d:58:cd:33:4c:87:6c:0d:c1:d6:7a:03:93:37:18:
49:e4:a2:57:e8:a0:09:bf:83:95:9e:d8:c1:46:f1:
37:d0:47:00:99:10:55:3f:5d:a8:4d:53:a9:10:2c:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:29:3C:5A:08:37:4C:1B:71:7A:58:95:B3:7E:D0:BE:BC:B3:FF:BB
X509v3 Authority Key Identifier:
keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:2b:48:3b:d4:cb:51:3e:f3:52:e2:c8:37:a7:4b:f2:cb:
2f:76:a9:6a:14:ba:44:70:4b:eb:09:a0:73:b5:62:3b:5d:29:
0f:e6:e7:43:14:5e:71:00:c4:04:2e:1b:a3:ee:00:14:b3:22:
87:e5:76:ea:28:6e:f0:e9:99:f0:b9:d1:39:a5:91:58:dd:93:
40:fd:4b:d1:92:34:7b:d1:09:b0:df:22:90:af:ff:fe:1a:35:
da:27:6e:de:bc:b2:03:95:36:e2:4a:0a:f4:9c:19:87:a5:1c:
bf:80:45:9e:44:1c:be:e0:99:a4:3f:34:61:97:a1:ca:7d:84:
15:46:9a:8e:b2:f7:5d:fa:43:60:fe:b9:70:e5:1c:bf:03:4c:
b9:79:55:91:68:31:57:a5:8f:fa:ce:ba:b2:66:dd:b2:6f:d2:
8e:c4:06:56:de:10:34:3c:3f:0b:6e:e5:7c:1e:19:27:6c:2b:
64:db:18:0c:ea:63:de:48:aa:c5:02:cd:1e:ac:76:39:40:56:
9f:0f:d0:67:9b:f8:54:ad:93:4e:01:e8:24:b3:b5:cb:41:5f:
ad:db:83:00:0e:3f:8f:82:ad:73:03:50:98:9f:92:26:d1:c9:
9f:10:51:86:63:79:09:ca:ee:5a:49:e9:ad:7e:73:71:5f:bb:
61:26:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:09 2026 by rpki-client