Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: pjgEahrslzoEGGXxFOcCTX8v6xcjILaCjVUaAp0xLXg=
Subject key identifier: 82:A2:CD:1E:00:CC:77:5F:33:11:A5:F3:CF:D1:E8:05:54:9C:38:56
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 019D9B504B2315200F878DB7D2D67D69296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: B4V6AN2ipQ0o5J7n48ok6betOgqDhknxVXbv8pQUfOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4b:23:15:20:0f:87:8d:b7:d2:d6:7d:69:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=82a2cd1e00cc775f3311a5f3cfd1e805549c3856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:46:b8:37:b2:a1:34:70:0e:ae:1b:74:c3:
23:6f:07:33:7c:a8:e8:92:60:ef:17:86:2a:73:ae:
d7:88:8c:13:86:75:68:b3:b3:39:89:63:27:c8:b3:
d2:cb:11:22:32:78:22:58:11:7e:d4:11:ab:eb:2f:
bf:e1:a3:91:01:77:ec:1c:cd:ef:73:77:d2:b6:f7:
03:b9:f8:63:c8:a9:60:51:b2:40:c9:ab:bc:d4:a3:
45:49:46:14:60:09:f3:a6:71:1f:51:e6:75:49:0e:
a8:7c:10:cb:58:e4:8b:f1:fe:48:65:de:d6:46:6d:
a4:10:44:45:79:d3:e1:d2:bd:b2:b1:45:a6:09:36:
3e:c2:c9:41:c8:50:90:ea:28:97:dc:69:68:fd:14:
84:80:b0:eb:52:d1:e1:4e:b6:72:3a:b2:29:22:4e:
92:51:20:84:a4:11:9d:41:97:96:a6:06:89:f1:d1:
8d:49:02:a2:71:50:1f:72:3b:07:4c:8a:de:e5:b2:
57:da:eb:46:04:b0:f9:d5:f4:a8:70:2f:e3:4d:9e:
31:d4:e3:77:f5:bc:55:85:87:56:f1:0e:a5:0b:2d:
ee:ab:f8:dc:0f:c7:a4:d5:40:6f:f4:61:f8:91:3d:
74:64:a6:b4:2b:d0:d8:4f:9e:26:d3:e0:8b:ef:33:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:CD:1E:00:CC:77:5F:33:11:A5:F3:CF:D1:E8:05:54:9C:38:56
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:3f:20:e0:df:65:e0:bd:29:39:f0:d5:88:e8:8e:ad:30:
f4:7c:13:35:91:32:8e:a7:ab:78:53:5c:c2:69:a3:72:2a:79:
86:91:68:6c:dc:b4:9a:5e:9b:80:0a:26:c7:97:b3:d0:0f:46:
6b:c1:2c:31:da:e7:cb:58:83:ff:75:05:6b:af:a8:9d:c4:0f:
20:c2:75:43:90:78:ee:01:89:da:d2:46:01:db:87:b0:63:47:
8c:39:62:e8:30:f6:2e:27:14:72:b8:6e:16:00:67:f6:25:e9:
0b:28:14:35:c4:49:b6:b8:8a:2b:3b:c1:e1:4e:da:90:0c:d3:
35:c0:f3:e1:02:fb:e7:b9:47:e6:0b:6f:61:ec:46:9a:11:5a:
bc:0b:7b:66:dd:b0:6a:ed:75:c1:b3:73:74:e0:64:54:e9:f3:
67:e2:ff:37:34:be:d5:45:4c:21:8f:2f:58:bc:bc:d2:b5:b5:
2c:03:19:1a:58:ba:6e:8b:2c:c7:2f:6a:25:db:5a:90:b1:16:
a8:0e:e6:b5:a5:7d:4e:17:c8:49:7a:61:be:a7:d7:d4:4e:68:
b3:2a:fc:24:0f:7c:41:8d:9f:c3:a2:98:de:d4:19:42:14:72:
2d:3e:34:4a:c8:e7:af:e3:85:7b:da:bb:d9:ef:03:c4:75:16:
62:be:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:28 2026 by rpki-client