Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier: wptaZ2z0fxJ8tW9LkX/N5HMUH1vGGkSrLZrO+NL1uPk=
Subject key identifier: 41:B4:0E:F5:6E:CB:31:35:93:1F:4D:92:D0:B4:25:B3:7F:0E:A9:A7
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 019D9A7496583D511F94843513FBEE73D7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number: 1221
Signing time: Fri 17 Apr 2026 08:00:24 +0000
Manifest this update: Fri 17 Apr 2026 08:00:24 +0000
Manifest next update: Sat 18 Apr 2026 08:00:24 +0000
Files and hashes: 1: FvKj3Djs8TT6ypv05g8sMqJXOlA.roa (hash: tfDMARTocl58JXc9IeJSQaWJFyjzzrUR3p+6fLmC9V4=)
2: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: 0WflBU/+/Ssyn4yzPKPtgSkZyyNEmvC3Id4fVMkHQgQ=)
3: h07ZqTc0uqELKn3DOxOskKYqbI4.roa (hash: FJf5zVyfQ2yme32gVPw1Ih+VvDivHZUWDg5Nah7gYOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:96:58:3d:51:1f:94:84:35:13:fb:ee:73:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Apr 17 08:00:24 2026 GMT
Not After : Apr 18 08:00:24 2026 GMT
Subject: CN=41b40ef56ecb3135931f4d92d0b425b37f0ea9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:cc:94:50:68:c8:5d:92:85:7a:54:44:7e:
2e:17:59:0b:0e:df:68:2a:25:ee:3e:fe:b5:39:1f:
90:3e:88:83:d7:c3:d1:27:01:01:53:f2:ff:ce:d7:
48:40:b2:e3:27:63:bd:03:b7:8d:97:2b:17:2a:3c:
1d:aa:42:40:a6:0a:f5:48:7b:d2:cd:23:f0:be:24:
fa:f2:1a:b5:13:ee:da:00:84:f6:63:58:fb:1d:55:
1c:aa:6f:21:53:7e:18:3e:96:4c:8f:07:dd:84:77:
63:10:fa:09:a1:29:d5:49:66:3c:ea:ba:11:f7:4d:
b2:8e:bc:74:9d:12:03:6a:07:82:59:49:e5:66:30:
78:16:fe:61:e6:dc:e1:9a:1d:35:3f:11:52:82:85:
a0:13:1f:a8:98:18:2c:87:e4:77:1e:57:8c:bd:7e:
f8:8f:70:b8:8a:b7:7f:31:96:57:8a:e3:fb:11:0c:
d6:a0:61:1b:42:ad:e0:a9:28:a3:cc:f9:87:a2:bc:
e0:af:1b:a6:ac:1c:cb:88:f6:dc:5c:e6:e9:b1:7c:
1c:8c:18:77:47:ff:3a:3c:1a:b5:42:ff:32:07:31:
75:63:54:5c:66:8a:ba:59:29:53:fd:a4:f2:68:e9:
2a:a2:ce:b5:96:1c:54:cc:40:71:5e:f5:19:1e:9f:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:0E:F5:6E:CB:31:35:93:1F:4D:92:D0:B4:25:B3:7F:0E:A9:A7
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:53:55:c6:d0:2b:13:06:7f:e6:8d:98:9a:6a:5d:b7:82:ef:
9a:24:b9:6d:84:80:fe:c1:29:04:2d:b8:52:82:c5:5a:8a:eb:
53:d6:9f:be:e4:96:6c:a6:9b:c4:0a:22:6d:c9:fb:7c:2a:3c:
bd:83:22:79:ad:90:23:2c:65:9f:97:05:b4:76:dc:00:51:29:
5b:3d:bb:2e:e8:03:27:8d:f0:ca:a2:f0:72:01:eb:6d:c1:97:
a3:b0:a9:4b:00:b8:6f:8a:6c:9e:ab:13:e2:77:b0:a1:3c:1d:
8e:61:8f:db:ce:79:57:ea:db:1f:40:99:54:67:25:54:eb:df:
8c:2f:0a:b7:82:9a:c1:5f:46:dd:f8:a4:d0:9a:43:e7:c9:f0:
4e:c1:c5:e7:1b:64:ea:61:ea:dd:bb:3b:22:93:98:e0:15:a9:
7c:76:6d:71:c4:34:30:5c:da:7f:5f:6e:1a:cb:d1:2f:93:5a:
90:62:36:0d:af:01:58:a4:90:2b:da:de:01:e6:10:17:38:bb:
95:6e:e6:88:fd:83:bb:7a:19:82:f4:aa:c8:c0:7f:08:b9:e3:
a9:d0:3e:2c:26:7c:67:f9:04:b1:31:df:af:c9:0c:f6:04:a6:
a8:20:14:4e:14:3a:e6:45:8d:60:3a:29:c7:1e:4c:ac:37:8e:
75:c5:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:05 2026 by rpki-client