Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: ddvsQrabduHbGWPF1JDrN/s+PeBFAjFLdU3TLV8HiKg=
Subject key identifier: 01:57:6D:53:C1:95:CF:AC:9F:A3:F0:A9:87:10:60:DF:3E:09:91:A1
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019D996228443DDAD3415AFBCA8E105684A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0B22
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: dwbefBpKDkD4PxvBGOW8116mEy/y7PEqsuBq6f89urk=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:28:44:3d:da:d3:41:5a:fb:ca:8e:10:56:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=01576d53c195cfac9fa3f0a9871060df3e0991a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f0:3a:a6:3b:0c:03:df:7b:d9:52:8d:f1:25:
78:1a:7a:9a:60:a2:cd:e3:eb:7b:61:39:e8:2d:04:
e0:ec:90:be:23:c2:f5:e8:6a:e1:6d:64:c3:5c:92:
91:16:bb:a6:c6:d9:94:95:fd:5c:4e:b3:ee:cc:9c:
f5:1e:3a:f9:b8:14:c2:38:46:57:d4:b2:53:9f:ec:
3a:0f:d1:5e:4a:ee:79:a1:c7:58:81:83:3d:d5:b6:
46:76:e5:40:47:95:3c:cd:22:83:a5:cb:a9:5a:b6:
a2:14:28:d9:d5:83:63:e8:e1:dc:2a:3f:db:7c:22:
a2:3d:54:65:a1:b5:dc:c4:cb:6f:0f:22:46:9a:e6:
f2:9a:2f:d9:b0:51:e1:55:d8:ed:af:7c:c7:80:7c:
b1:0f:1b:93:cc:f7:29:0b:1c:0b:3c:bc:2e:ce:08:
46:1e:d7:81:c5:19:6e:74:7e:f9:03:15:13:09:ac:
10:03:7e:c7:6d:c5:b1:47:17:a4:8e:bf:ab:0d:eb:
8c:08:f3:02:63:21:5d:70:3d:a9:dd:b7:f3:b3:7a:
7a:3b:64:e3:b0:20:1a:db:70:e9:2f:de:83:0e:f7:
a1:eb:27:13:28:8d:9d:33:81:aa:af:53:4b:f9:e6:
03:b2:f8:3c:33:d3:6b:ae:af:cf:73:ca:1e:24:c3:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:57:6D:53:C1:95:CF:AC:9F:A3:F0:A9:87:10:60:DF:3E:09:91:A1
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:f5:32:02:d7:cc:15:f5:b5:f4:e3:48:34:07:2d:a6:25:
56:01:23:3c:c8:98:12:4f:60:1a:34:4f:ac:0f:d4:80:91:93:
2c:d3:67:fc:70:37:2b:86:b7:5c:56:46:dd:4a:2c:d5:21:96:
c6:f8:e5:3c:7d:09:2a:ec:95:75:f4:5b:2a:01:eb:2c:73:0c:
4c:0b:01:82:54:62:11:b8:b0:b3:05:3a:ca:b0:2b:e1:6e:b0:
05:ad:e4:eb:6e:9d:db:a6:7a:a4:28:a9:02:22:3e:1a:f9:d9:
a7:01:75:67:bd:b8:26:f5:71:0a:76:d0:39:41:c2:66:5b:d0:
14:c1:4c:09:a4:25:3d:0a:c0:37:20:8c:04:66:41:82:9d:68:
99:1c:df:b9:ca:09:0e:cc:e3:c6:4e:11:5e:74:3c:f3:43:ac:
99:e1:a4:c9:ad:26:76:ff:cf:b9:99:32:05:d9:5b:86:6b:ac:
b9:ba:f7:64:cd:2a:0d:99:85:5c:b8:9a:6f:71:dd:af:9d:e2:
f9:a9:4b:d6:8c:c0:40:87:22:6a:85:cb:99:2d:cf:0a:9f:b3:
b8:44:d4:43:8b:4e:3f:b7:3f:73:a2:ad:3e:8b:79:f7:b6:f9:
2a:0d:dd:1b:74:d8:a0:69:02:4a:e4:51:ee:14:ee:e1:ec:ca:
f0:78:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:47 2026 by rpki-client