Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: pYaitfSEC8i30XzcwTXMbnmCWndGjx1TbP4szWLkl6Q=
Subject key identifier: 92:7B:1D:77:83:16:8E:31:54:E6:7E:7F:F9:A6:B5:C5:6F:91:52:34
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019D9B87C2AABF0FD1D43DC73F8042F284AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: ROmUPOWcgKEkU8PpEeOLfJXv07yTt9bqwfkPhYFHvOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c2:aa:bf:0f:d1:d4:3d:c7:3f:80:42:f2:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=927b1d7783168e3154e67e7ff9a6b5c56f915234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:9b:33:12:f7:48:5d:b9:c6:46:e6:4c:6a:
18:53:20:2a:24:37:c6:14:23:f0:1f:6d:df:5f:e1:
72:50:09:9c:a2:15:96:e1:55:d3:01:86:7b:c7:f2:
de:41:e8:9f:ce:ca:64:a8:59:fe:e1:db:c7:2d:e3:
4f:52:00:4f:4a:a1:f8:aa:e2:0e:c6:77:54:97:a0:
7f:0c:1e:f4:e1:cd:98:04:7e:53:34:42:29:c8:89:
4d:cc:dd:26:d8:82:af:71:ba:5a:43:a1:a8:00:20:
41:bc:84:7d:f4:08:ba:90:fe:99:fe:0e:5f:c3:6e:
0b:de:d2:1a:08:dd:60:d4:32:c9:fc:88:2f:e8:89:
ed:6a:97:ab:59:4a:0b:c8:f3:39:e7:3e:e0:be:95:
80:70:cc:6a:9b:cd:f0:d3:15:d5:b9:ea:55:df:61:
77:bb:89:7f:66:c3:2e:f1:8e:5b:a7:ad:6e:db:b4:
9f:2a:92:d3:b5:2f:f8:85:57:02:5f:f0:2f:8f:fc:
7d:f9:0e:a8:63:ce:b8:f8:b7:ac:85:ee:5d:43:c5:
14:ef:2e:1b:14:b3:83:55:e2:f1:91:b2:b9:8b:64:
97:0d:9c:bf:74:fe:4c:51:d4:1a:28:44:94:34:45:
a9:60:a9:a3:58:2d:a8:ef:7f:c2:a9:36:5a:45:6c:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:1D:77:83:16:8E:31:54:E6:7E:7F:F9:A6:B5:C5:6F:91:52:34
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:8d:16:a5:8d:ab:6b:fc:b0:dc:e7:88:28:7c:da:5f:91:
50:a2:b5:f1:f7:14:63:9e:34:b3:d0:af:48:9d:d1:46:fc:a3:
ff:c4:1b:ff:2e:8e:7d:3b:0d:ad:1d:b2:f6:bd:3e:ad:e3:de:
17:56:fa:44:ff:f3:e8:1a:e6:ec:46:e9:45:df:52:fa:fc:32:
32:be:01:b6:e6:33:dc:d9:8f:70:b7:69:1e:16:a3:c0:5b:ce:
a3:6d:ee:25:a8:5b:9d:e2:d9:ed:4c:10:6c:4a:55:37:fc:4d:
d8:8d:3a:53:0b:8b:ee:8a:ea:60:68:4c:79:6f:a2:09:5d:cc:
a0:43:5e:a6:93:36:fd:ae:10:ba:bd:53:6d:28:28:cc:2c:4d:
4e:84:7f:14:5a:0f:24:0a:4b:06:a2:0e:ac:9a:1f:7a:1f:9b:
84:60:90:66:6c:8f:8e:ee:e6:47:b5:ef:fb:5f:16:62:e8:fc:
c0:ac:ca:32:17:c6:2f:cd:27:86:a5:13:83:57:74:33:81:cb:
2c:0b:a3:6c:7d:95:e5:90:9b:3d:e6:b7:80:3d:a0:54:26:13:
6e:2d:2e:f8:01:1a:04:e7:85:fe:5c:30:7c:b4:4a:87:8c:c3:
d5:2e:96:04:ee:2f:cc:f4:3d:25:cf:e8:31:6b:38:2f:30:6d:
e6:49:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:35 2026 by rpki-client