Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: n3++nr9NKmt9ARydaoJbcMENfSY4hTdGDm9U4TkfIB4=
Subject key identifier: 7D:D7:6A:0E:1E:B7:C0:00:FE:A5:AA:BB:D6:E0:B9:30:A9:36:DD:E4
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019D992AFB0F0195C3D0F82BE6C61AD8E242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1332
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: wUsqqIydqxQ/y2UWFHEtu4rljDR4L/IkmgpjVx2Shp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fb:0f:01:95:c3:d0:f8:2b:e6:c6:1a:d8:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=7dd76a0e1eb7c000fea5aabbd6e0b930a936dde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:bc:1c:ae:b0:56:80:a8:d0:0c:ea:c2:cd:
6a:5f:66:28:d5:be:38:26:e5:a0:4d:73:a8:04:ea:
80:32:e4:27:26:9b:96:ce:3b:56:17:31:78:f7:8a:
ba:e6:3a:16:70:68:6a:10:ed:ac:cf:22:88:b2:cf:
d9:f0:1f:2c:2a:55:2f:4e:04:ed:10:da:32:e6:02:
7a:a8:dd:39:00:32:08:92:f0:46:26:ab:a4:c8:e6:
0e:07:f9:7d:f8:1d:6e:0e:c1:40:34:ae:27:55:39:
86:10:3e:54:e3:64:d7:83:cf:6b:f7:97:9e:ac:19:
4e:9a:75:48:f7:fa:74:ca:6f:29:2e:16:c6:58:65:
42:9a:ee:c5:c2:46:c7:0b:86:0b:c7:36:70:04:a8:
ae:93:39:e8:ca:ac:26:a4:ba:3b:48:e6:66:0d:a5:
dd:2c:c6:a7:68:00:b4:e6:a4:1e:5c:63:dd:22:e0:
69:81:ab:71:cc:20:ee:ac:74:14:a4:b1:63:80:87:
56:c5:51:5f:c9:38:e3:98:67:12:88:5c:27:dc:f4:
b5:96:11:3c:98:0e:a8:46:bd:bb:ed:5b:67:9d:0c:
45:b5:d5:f6:05:ce:50:4e:54:b0:ad:21:b0:af:3a:
d9:62:4e:be:16:5f:d4:94:34:30:8e:5b:af:dd:c9:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:6A:0E:1E:B7:C0:00:FE:A5:AA:BB:D6:E0:B9:30:A9:36:DD:E4
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:42:12:65:d1:6c:77:ce:26:b2:3a:41:c9:3f:e4:f8:ce:
b9:3f:a4:fe:87:c2:eb:2e:ab:59:2b:e8:e2:90:0f:45:f1:2e:
9d:f0:ff:ca:65:8e:b6:fa:89:58:d2:39:23:8a:ef:58:f0:60:
29:32:67:5a:c3:29:32:a5:7e:e3:11:85:40:cf:ab:12:e7:ff:
fd:93:63:f2:cb:43:ff:21:6d:22:41:74:bc:58:04:0c:e5:4b:
4d:63:c8:d8:9f:cf:2d:ce:da:be:23:92:68:10:64:2f:cf:e0:
bd:6f:ca:77:1e:7d:98:b5:60:76:55:86:b7:59:bb:69:eb:81:
50:29:49:60:f7:e1:1a:e1:a8:a1:08:cf:58:c3:3a:2c:66:b7:
cb:8d:a4:16:8f:1e:20:a2:5e:88:e7:42:07:95:03:13:87:d1:
1d:38:12:07:0d:70:00:d8:80:c8:33:8b:2a:bb:d3:cb:7a:29:
40:39:f9:c8:06:78:63:b6:74:90:85:59:3c:04:31:eb:ac:03:
45:c8:a8:13:b3:25:d5:f6:dc:29:8a:80:33:20:29:1f:4f:6c:
6d:47:5e:ff:11:89:39:68:10:98:61:3b:1e:5e:b6:5f:3f:ce:
fb:c9:8e:f4:15:30:c1:88:0f:70:5b:cf:91:01:74:df:47:e2:
e9:25:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:49 2026 by rpki-client