Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: 7eRRbSc+ZiBYJH+MPI4Xcaj8rAOTIwdf1caJr3Ench4=
Subject key identifier: 46:54:12:6C:EF:6F:EE:F5:18:BA:FD:4B:8D:B2:6A:18:EB:8B:C1:BA
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019D9B87B2585BE011B3ED85FDF52E13D2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0C1D
Signing time: Fri 17 Apr 2026 13:00:54 +0000
Manifest this update: Fri 17 Apr 2026 13:00:54 +0000
Manifest next update: Sat 18 Apr 2026 13:00:54 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: zudvbE/XUEWa02bzVE4QXdwN13XP/DZ11j9xz5vT8J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b2:58:5b:e0:11:b3:ed:85:fd:f5:2e:13:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Apr 17 13:00:54 2026 GMT
Not After : Apr 18 13:00:54 2026 GMT
Subject: CN=4654126cef6feef518bafd4b8db26a18eb8bc1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:f3:6f:b4:cb:64:c8:8f:e3:5d:35:04:bb:
89:00:74:63:61:1e:4e:06:9d:44:88:26:36:1c:79:
e3:3f:36:cb:db:cf:cd:c1:cb:a5:a9:d5:30:4d:25:
d3:f6:fd:98:45:3b:69:53:87:8b:01:4e:11:7f:4f:
3f:76:f6:4c:6f:e8:b4:3e:f7:f3:d6:33:f6:df:ec:
e0:6b:c8:f5:d2:a7:c0:3b:f7:00:e7:50:17:7c:76:
06:a5:2f:de:16:de:c8:d3:fc:44:72:69:24:d1:30:
46:2f:dc:d4:bf:93:90:e3:b1:17:fb:ed:11:eb:01:
f2:04:7e:85:bd:e4:d9:80:a5:b0:9e:9e:a0:ac:e9:
00:f4:40:7d:0c:e6:33:98:b1:2e:85:02:7e:3d:3c:
60:62:60:04:0d:72:19:26:0c:0a:b9:2f:d6:ea:5f:
97:37:02:6f:15:64:09:a8:5a:40:ab:63:76:7b:6c:
ba:0f:13:04:dd:24:5b:f6:5c:ae:ee:90:1b:90:0c:
90:d3:40:6d:c1:5d:99:05:f4:f6:25:f3:92:4f:55:
6e:d8:a8:f9:db:2a:c7:d6:39:e8:3e:e5:58:45:75:
be:45:5e:0d:ce:1a:ab:47:26:c0:91:39:40:cb:b1:
df:d9:e0:35:59:34:7a:f5:f9:c2:c4:01:d2:2a:77:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:12:6C:EF:6F:EE:F5:18:BA:FD:4B:8D:B2:6A:18:EB:8B:C1:BA
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:50:94:92:21:0a:e5:a3:26:12:09:78:ed:34:1f:e8:25:
50:19:84:87:a7:89:d0:6d:f0:3d:71:26:bc:d5:f6:08:be:35:
c1:ec:b4:5d:68:a3:a3:bf:f4:90:a8:cd:70:2c:c2:35:09:45:
ce:ca:8e:ce:9a:fb:f0:b6:d2:b8:9d:f3:3a:c3:13:b6:0c:5d:
92:6a:ea:e4:aa:23:6c:d9:17:17:c7:67:53:9a:49:f3:79:c7:
69:fd:d4:f5:ee:15:9e:f6:38:db:62:76:7b:46:85:6c:5c:73:
25:fc:93:1c:5e:65:c1:99:ad:b4:5c:82:d1:38:ee:20:41:cf:
65:13:50:0b:b0:bd:28:8b:6a:bd:94:44:58:7a:1e:e6:1f:ad:
40:c3:96:5f:37:f4:45:0b:59:1a:50:ce:02:50:86:9b:29:4d:
f3:cb:72:4e:10:7f:cd:10:c7:24:a0:9d:7b:e9:ed:14:77:b6:
df:12:cb:f5:65:b9:29:fa:fa:85:c1:fa:0c:ec:80:52:91:7f:
e6:47:96:f8:95:e5:42:85:ae:7a:35:7d:1b:87:77:17:fd:0d:
33:a1:f9:88:48:5f:df:59:ec:94:bc:ff:a1:ba:26:31:0d:10:
74:79:b5:29:10:55:a3:0a:74:bb:52:94:80:56:2d:17:fa:9b:
83:c5:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:58 2026 by rpki-client