Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: Cf/1CSehmZocpP6UG0GIMf/ikCCEI2D9dAqnXMltTwk=
Subject key identifier: 50:A1:4D:40:42:09:6D:CB:44:A3:BF:4D:8C:E2:A5:EA:8C:AA:21:22
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 019D992B44B112F00C6F88F2B69675BF171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: IcDMRcqXDP30XWDO3csmueY-Szc.roa (hash: 3XHIRXI5pK3H1pv/yXC4BH8QqmFJjl3YSDQsc89ULII=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: zmvL4lYGC7TdNxMdckvMgPrA3OGWDoZQwqH1X1moIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:44:b1:12:f0:0c:6f:88:f2:b6:96:75:bf:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=50a14d4042096dcb44a3bf4d8ce2a5ea8caa2122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:90:c0:e3:a2:63:7c:7d:66:d9:69:ba:65:
c9:18:e3:fd:3d:1a:63:36:76:8e:ad:27:f2:c9:16:
43:7c:38:b2:f4:96:57:5f:bf:a4:d4:63:9b:ab:da:
e3:8f:18:40:0f:a9:89:d4:13:9c:f3:ce:dd:da:91:
ed:d3:d7:01:f7:b6:f2:48:24:ba:0d:f9:2f:77:bc:
31:49:88:a8:82:a3:df:34:3e:b8:02:5c:af:10:8f:
36:4a:04:67:df:9a:8b:e3:96:36:90:82:9e:09:49:
e7:f4:8d:15:25:d3:19:b9:a9:ec:39:fc:7a:68:87:
29:c0:ab:b7:03:22:a8:10:cb:9c:b2:13:36:5c:1e:
f9:85:35:8f:3d:ad:56:ce:1b:61:19:2f:03:42:e3:
96:8e:d1:56:25:e4:c5:ca:3c:aa:36:67:ac:11:d6:
eb:a9:d4:56:94:48:e7:54:75:40:09:c4:23:16:a8:
67:e0:5e:0b:cd:fa:5a:5d:06:20:8d:8e:a6:a5:96:
41:39:e7:1b:d1:43:9f:61:16:10:cd:21:fb:31:ee:
eb:c4:f3:14:14:a2:c6:3a:78:17:37:f9:ce:3a:e5:
d6:aa:ba:22:26:75:00:bd:c2:e3:18:bb:0b:dd:c6:
a8:b4:0d:5a:dd:de:7a:d7:de:10:4b:9f:d1:e1:57:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:4D:40:42:09:6D:CB:44:A3:BF:4D:8C:E2:A5:EA:8C:AA:21:22
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:0e:a0:0f:4e:70:27:a0:ba:e5:6b:68:dd:e4:94:58:4e:
08:8e:d5:c0:e1:e0:ab:5b:b1:af:d6:7f:92:b4:f2:9d:49:15:
78:5f:e7:96:24:10:c7:89:4c:49:51:09:7d:c1:dc:ad:ce:6f:
22:5b:e4:53:ed:80:2a:ec:0d:e0:18:81:0f:04:fa:0d:3c:a7:
d0:ff:ac:0e:f2:aa:ae:1c:f6:43:b9:8f:e9:8f:ba:49:df:8f:
12:5a:6e:14:8d:a4:dd:48:08:50:a7:ca:0e:c5:33:4d:a9:0d:
84:c8:a7:65:c3:3d:ec:76:03:1d:74:2b:09:9c:70:35:55:50:
17:aa:72:12:ac:06:5f:56:cc:c1:f6:1f:12:46:7a:de:f7:50:
e7:85:5f:03:ff:66:5b:9b:71:08:10:5d:73:eb:2b:dc:5d:56:
03:ad:b2:7e:77:2b:6c:74:72:fc:2f:3f:5e:9d:bb:d3:e2:49:
a6:6f:09:ad:0e:2e:fb:38:41:63:9c:85:fd:b5:5c:32:76:2a:
b9:bf:aa:e0:d6:25:ca:68:b1:6e:a8:8c:2a:2e:d3:b0:08:48:
99:f2:2a:9e:b1:7e:bb:28:8b:02:a0:a7:65:af:93:98:be:f7:
e7:c2:a8:28:3c:5d:d2:ed:d5:48:e3:7d:7c:20:bb:c1:6a:1b:
2a:5e:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:48 2026 by rpki-client