Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: 8hxICvkdbd/2lhezy1ASGDinvHcsOnK/JQZgrWE2D3c=
Subject key identifier: 43:B2:D2:93:43:51:29:20:ED:C1:CC:F3:32:2E:F2:A6:E9:64:3D:23
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 019D99D02EE2BA22532371DB67FF49054F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 130D
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa (hash: cfY9W6Oc4CWCMHNddhZlxoGOHOxJVO+wjS65/vUgYTs=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: a+O51/krSr9ErLKuvjb+RrMr+EtjJsSZG9BKUEiCepc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2e:e2:ba:22:53:23:71:db:67:ff:49:05:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=43b2d29343512920edc1ccf3322ef2a6e9643d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:bf:3e:f1:05:9f:12:85:16:c7:0a:e9:42:
c2:a5:3e:16:c2:e4:7c:8f:ef:93:29:84:be:ac:5f:
ea:2c:1c:00:72:7b:af:fe:31:92:bc:bd:4f:a3:16:
7f:38:1f:65:59:dd:a2:46:9e:97:1b:de:6c:c9:3b:
31:e1:ce:6e:22:26:e5:4a:93:47:02:89:b9:2d:a3:
a7:5a:a5:5f:82:70:f3:25:d6:85:04:db:2d:a9:26:
e7:14:33:04:30:f3:6c:81:8e:96:24:e8:ec:2b:f7:
15:f0:4f:05:a2:08:a9:b0:93:a0:d0:dc:d2:43:74:
97:84:7a:58:74:aa:58:62:cb:4e:14:fd:ba:76:f9:
cd:75:ae:04:7f:4a:21:79:b2:46:89:3d:8a:bd:da:
54:f1:fc:8a:6c:c5:ed:6a:1e:4c:df:82:4b:ba:e9:
b5:a6:10:07:d4:9a:c0:df:0c:9c:9d:b6:11:65:75:
7f:b0:0f:ac:00:d9:23:6a:b2:9f:1a:11:e5:98:23:
95:3d:86:86:12:b4:1d:11:31:c9:0d:8d:52:51:47:
55:15:98:e7:1f:ce:dc:dd:4e:f1:8d:04:2f:cd:ec:
cc:fb:ef:8d:ed:c8:06:47:36:5a:1f:c1:8d:66:6c:
b4:38:62:25:40:b2:08:7d:68:53:df:5d:07:d3:80:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:D2:93:43:51:29:20:ED:C1:CC:F3:32:2E:F2:A6:E9:64:3D:23
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cd:da:dd:b2:78:9b:b7:1a:05:47:c7:d5:b6:cf:a1:db:fd:
5d:3a:1c:35:e6:cf:df:98:31:13:6c:80:63:95:b9:b8:fd:0e:
1c:84:52:a4:44:14:7b:f2:84:47:1f:de:5c:8e:32:c1:99:e5:
6e:72:fb:af:5e:73:71:15:98:b9:13:cb:26:32:ae:e1:5c:fb:
b6:dc:9c:e6:15:db:87:74:4e:0a:9d:9c:8e:01:56:db:64:a3:
25:0a:f0:f9:da:3e:07:ac:4d:1b:1b:13:d6:45:ba:d1:a1:9f:
2c:94:ff:e7:c9:e2:15:bc:ff:a0:1b:60:91:ee:23:59:8d:4b:
60:48:c3:c9:fe:ff:46:10:90:93:6c:7b:ce:ec:aa:52:b0:4f:
d7:f3:01:78:8d:15:84:72:f8:fc:48:b0:91:8b:94:d5:fb:c2:
b4:79:21:db:8c:a0:26:34:bf:9c:60:e7:05:6f:bc:68:39:81:
9f:d2:ac:3e:6b:2f:7e:0f:ec:63:85:3e:b5:4b:6a:4c:d3:53:
07:c9:52:a4:b7:fc:f2:a3:d0:ac:f5:33:26:5e:7c:0c:88:04:
08:64:7e:68:45:cd:88:5a:c7:e3:c2:2c:3b:68:45:2c:c2:7b:
2c:c6:e7:22:4d:97:e6:2a:9c:63:ab:09:1b:89:9a:aa:da:42:
54:2c:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:41 2026 by rpki-client