Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: c1TtmaIaWfxBlDSC3UZgiHwVVhHdYY6t+72E5SDr5Mc=
Subject key identifier: 2C:CB:27:67:2C:1B:48:B5:8E:69:2E:1B:9C:92:DD:65:66:22:B0:2E
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019D98863F6CF4B251AC954723D21E4C8AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 18AF
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: G81wImt5yds8FuG5Ox1RGZ0+szvKB/vVMHmXa5bPZbU=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3f:6c:f4:b2:51:ac:95:47:23:d2:1e:4c:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=2ccb27672c1b48b58e692e1b9c92dd656622b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:20:06:ec:7a:e1:a8:f1:02:a3:bd:63:1f:9c:
68:ad:de:f0:03:9f:3a:19:96:93:27:79:58:32:61:
88:76:dc:6a:fb:e0:4b:31:c1:77:09:e2:55:d5:0f:
5f:8f:fa:0b:49:38:58:37:f3:48:c7:4d:7c:78:43:
a0:17:dd:d9:09:b3:70:a3:e2:04:1f:27:0d:47:e0:
02:80:7b:04:61:dd:ff:3e:d2:dc:58:bc:7e:ce:21:
48:ed:e4:c8:7a:77:86:a5:82:2f:fe:e8:09:d4:25:
44:f4:8f:e3:2a:38:ef:27:3a:42:75:3e:4c:04:5c:
24:d6:b8:8e:33:c9:ea:9c:81:41:f1:83:9c:f2:8f:
46:28:fd:d0:55:7d:e0:76:74:14:0a:49:c7:ab:77:
05:7b:cf:25:16:7a:93:b2:18:8d:80:89:f3:63:88:
e2:8b:e7:fc:33:10:52:3a:e1:e1:66:68:f0:6e:d2:
cf:82:0e:3c:9f:6b:92:eb:8b:db:a0:b1:74:fd:3e:
7f:0d:a9:ff:b3:ef:f3:56:4b:b6:42:22:6a:d1:d6:
71:e8:82:26:3e:60:6b:0a:c5:e9:cc:de:65:3d:5a:
b8:66:dc:ae:58:1d:72:14:9e:92:71:42:bd:8f:a1:
68:c5:3e:78:6a:79:bf:cc:f5:f9:26:2c:19:13:0e:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:27:67:2C:1B:48:B5:8E:69:2E:1B:9C:92:DD:65:66:22:B0:2E
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c6:27:a9:e0:a5:74:51:d5:c9:09:b2:4a:e6:1f:f5:c8:53:
7e:a8:c3:6a:03:4c:2d:a1:d4:d3:ef:78:51:98:c1:5c:fa:99:
18:4e:2d:23:44:67:f3:d5:59:17:26:9b:44:8c:96:6a:56:70:
58:88:91:53:36:1f:cb:49:d9:f1:d7:c2:b0:03:0d:14:7f:b7:
dc:65:9b:e8:5b:8a:89:fa:e4:71:08:55:f8:8c:6f:78:52:49:
9d:35:2a:32:21:68:81:63:ba:7a:52:69:0f:53:79:e3:1e:df:
05:81:84:f8:b9:ed:53:5c:a2:d2:84:1f:ff:04:f0:17:19:9e:
4c:51:b2:73:c2:4e:1f:50:4b:a0:2b:6a:a8:57:47:d7:6d:c3:
ea:87:d0:fd:c2:40:14:46:a8:70:e4:66:cf:2a:3d:e7:a1:34:
c8:38:c4:cb:47:af:52:a6:65:f2:f6:7d:30:e5:d8:89:b9:68:
8e:e0:89:ad:d3:4a:01:53:55:d0:a4:8c:10:10:17:9a:ae:cc:
8c:86:e2:2f:97:d1:f1:77:ed:0d:26:62:18:bc:55:ba:b0:3e:
47:7f:79:0a:04:de:d5:ec:70:71:05:e8:99:9f:d3:10:62:be:
7b:74:22:2f:52:63:b9:bd:72:b0:59:61:5e:75:66:ba:b5:de:
05:75:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:26 2026 by rpki-client