Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: z7bkKUdupVUiFNY2DpT5yTmJ+rgDifvfZ3q21Icd4jo=
Subject key identifier: 71:5D:98:2A:41:80:1A:5F:3C:4F:6B:93:AE:8E:EF:DD:E9:D9:49:59
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 019D9B19F2ED88CA5A49FD4AB1EEC2635D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 1042
Signing time: Fri 17 Apr 2026 11:01:02 +0000
Manifest this update: Fri 17 Apr 2026 11:01:02 +0000
Manifest next update: Sat 18 Apr 2026 11:01:02 +0000
Files and hashes: 1: OaFZLyzit9aeE8Q-rZBaTKGo_VE.roa (hash: Z2wq4t88shsGbAykTeNAzXxxEV7hDGsKc3AYjBfbT+k=)
2: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: eypXPxmHNh0pEyK7mIi3bblDhYWtCRw3X1NcGZiktKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f2:ed:88:ca:5a:49:fd:4a:b1:ee:c2:63:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Apr 17 11:01:02 2026 GMT
Not After : Apr 18 11:01:02 2026 GMT
Subject: CN=715d982a41801a5f3c4f6b93ae8eefdde9d94959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:b6:9f:ee:f8:bf:59:4e:af:c3:1c:12:f4:
ab:43:ad:78:95:68:1f:fa:e3:a0:30:48:86:d9:1b:
82:ed:ef:67:33:87:dc:45:6d:b0:66:d3:9b:53:33:
0a:17:59:77:49:99:1e:29:95:44:27:70:62:90:49:
4c:71:d8:92:57:4b:38:b0:1b:f7:22:88:dd:c3:14:
1d:40:6d:40:b5:a4:ac:15:24:bf:8f:c5:2d:9a:a9:
9f:75:a6:1f:48:87:02:b1:c5:47:a8:fc:a8:aa:2b:
7f:ed:5e:71:bc:8f:03:36:41:07:35:a7:4f:87:64:
b7:8d:79:c8:ff:dd:3d:f1:0e:96:60:6e:94:2a:e0:
29:41:65:3b:af:a7:a8:07:b0:41:65:15:4e:be:43:
99:5a:ea:02:f4:f2:04:ae:d8:f0:c5:72:f2:a4:47:
30:10:2b:84:61:09:ff:b6:4e:12:4b:d7:a8:fa:de:
f0:ab:f8:8e:73:b8:52:f8:91:57:4d:06:88:5f:c4:
0e:28:e3:cb:4c:df:43:41:7c:1c:71:c5:93:b4:47:
1c:c1:13:4e:f0:91:59:ba:f5:ff:93:fa:c8:43:1b:
c2:74:48:57:e6:dd:cc:b4:48:25:d1:d4:c5:ee:56:
1a:34:29:0b:ee:f4:61:90:dd:9e:8d:4a:71:13:8d:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:98:2A:41:80:1A:5F:3C:4F:6B:93:AE:8E:EF:DD:E9:D9:49:59
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d2:89:dd:83:32:c8:55:8d:7d:58:b5:9d:1d:4a:32:7c:be:
e8:a4:a6:21:b6:65:3a:4e:ab:9c:63:88:9f:5d:64:62:74:d0:
af:87:b2:3f:05:53:12:21:82:8a:9a:70:eb:82:59:eb:32:b6:
44:68:1c:af:c9:55:da:97:06:4a:1b:1b:be:60:76:ef:1d:e5:
b2:47:98:3e:b5:9a:92:78:34:5c:10:17:3b:3d:b6:a9:00:7f:
cd:27:59:b0:94:63:22:2b:c5:fa:98:5c:60:bb:6b:1c:e5:c7:
4a:27:66:a2:71:43:6c:f7:78:b7:ff:8e:ec:bf:e4:40:96:97:
03:35:ca:34:7e:69:a5:48:ee:8a:59:da:58:3b:88:f3:9a:a8:
8b:1c:8c:d4:45:38:fa:20:26:13:a7:0e:70:b2:7e:62:41:d1:
6f:47:36:54:85:09:de:9a:12:97:e3:d0:bf:f6:23:88:79:54:
20:00:e4:66:61:d3:9a:b8:35:e0:06:83:fa:4d:1e:d5:9d:b0:
28:0d:f4:fc:b3:17:ad:fe:d5:1c:1d:db:b6:ba:c9:d8:a9:70:
6b:5f:bf:1e:8e:a6:e8:ff:b2:6d:b9:59:98:6c:27:5a:21:3a:
ad:ba:35:d3:da:34:b7:c7:46:28:83:b7:f9:f3:ed:4c:ff:1f:
71:20:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:02 2026 by rpki-client