Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: gzWNd0/YUrv/1PG41q6pLmfSwR+m05G2XzCgf/IN7Fs=
Subject key identifier: D2:39:2B:0C:ED:01:5F:1A:19:5A:D6:98:29:85:2E:29:56:65:6A:81
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 019D99CFF07FB7DF19DA986B78C51E799D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 189D
Signing time: Fri 17 Apr 2026 05:00:34 +0000
Manifest this update: Fri 17 Apr 2026 05:00:34 +0000
Manifest next update: Sat 18 Apr 2026 05:00:34 +0000
Files and hashes: 1: DZHKsoKn60cOpPXOTjhxEjCZpns.roa (hash: I2eVheSuMQHjrqYiNeoQc5mmnUzluaRJ/Ixu6RKHy+k=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: LgvYJr1TVex8FDY53/YCkoyTywr56A8HeJmo61MuT9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f0:7f:b7:df:19:da:98:6b:78:c5:1e:79:9d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Apr 17 05:00:34 2026 GMT
Not After : Apr 18 05:00:34 2026 GMT
Subject: CN=d2392b0ced015f1a195ad69829852e2956656a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:d9:8a:ba:cc:21:47:fb:0e:6a:9c:5f:43:
eb:d5:81:ef:25:9f:c2:8d:f9:f8:18:f8:1b:ce:eb:
99:21:08:32:17:cf:60:f9:ca:b9:3a:fb:36:07:4e:
c7:05:2f:16:00:97:9f:40:70:00:1a:68:ea:bd:8e:
93:61:aa:de:8a:ac:f8:4b:3f:88:72:57:a7:9a:98:
5f:c0:ef:a1:43:35:bf:58:59:2a:18:fd:80:a6:c7:
e1:37:e9:7e:9d:56:cb:1b:4c:16:9e:25:aa:84:bc:
13:68:79:1c:b4:ae:a5:e1:fd:99:55:e3:db:22:24:
90:dc:5a:bb:e5:b4:6f:32:21:c3:93:8b:85:ef:08:
c2:86:a1:25:dc:11:65:d5:c1:6e:21:81:22:2d:0c:
12:69:99:52:ea:fe:aa:54:5a:79:e2:a8:5c:a7:f8:
d3:38:39:5e:fb:e0:bc:4b:c9:a2:f8:0a:4e:81:b2:
88:ae:20:0d:e8:e0:de:2c:43:67:58:ca:99:bf:2b:
23:5e:e7:93:9f:2c:51:93:d9:de:5c:d6:ce:99:8d:
c6:00:48:e3:62:38:f7:0a:22:30:da:86:65:c9:60:
e8:1a:e4:70:e0:e2:86:04:41:79:0a:99:00:21:46:
ba:b2:5d:8f:0d:3a:c8:1e:4d:ab:fa:a0:be:65:90:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:2B:0C:ED:01:5F:1A:19:5A:D6:98:29:85:2E:29:56:65:6A:81
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:2d:f2:24:dc:95:ba:bd:26:77:de:0b:c0:49:85:28:68:
c9:04:23:68:90:be:99:ce:62:d5:f1:84:8d:17:58:e8:e4:88:
60:40:d2:ee:34:27:34:d6:f5:a1:5e:f8:68:8a:2a:df:0f:1c:
88:9d:03:b0:32:8d:8c:dc:3c:7e:29:c0:8f:9d:bd:c6:66:b6:
a9:b0:a6:30:69:46:36:ec:37:bd:d7:7e:4a:7c:f1:4f:94:07:
2a:06:af:23:1e:b2:d7:68:1a:ea:c8:e0:51:80:ef:34:7e:a6:
41:df:42:7d:92:6d:ee:12:85:3b:58:ba:18:20:e1:b8:e0:06:
70:09:22:fb:01:48:df:ad:4e:c8:3c:0e:c0:da:d1:1b:25:3b:
d0:e7:1b:bf:d0:c7:b9:aa:bc:03:c8:13:e1:7b:dc:c6:b3:56:
b2:9f:c9:6c:f6:1c:10:84:1a:1d:da:fb:6f:08:15:f9:76:4a:
36:69:9b:14:6a:21:f2:95:d9:09:5c:06:fa:5f:7f:4f:f2:ea:
56:f8:ef:46:be:ed:73:f2:0c:72:d5:ff:06:a4:7a:69:19:f5:
3c:9b:67:b9:37:86:e0:b3:25:c7:74:25:1c:e7:6f:bb:29:72:
71:66:27:84:d9:be:d4:60:b7:fa:85:63:2c:d4:cb:7a:63:32:
ae:7b:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:39 2026 by rpki-client