Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: /PtOFv/ydMGQiP09kec3i8PMDike6UqdeJjCquiZoB0=
Subject key identifier: 6A:A2:58:7C:6C:57:B7:98:0E:59:FA:9D:15:30:D9:D2:72:C9:72:B1
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 019D9AABF60609808FB662AD4F8AC26CD84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:53 +0000
Manifest this update: Fri 17 Apr 2026 09:00:53 +0000
Manifest next update: Sat 18 Apr 2026 09:00:53 +0000
Files and hashes: 1: 8-98EtSeBCLzHuY9teqeWzuL_OU.roa (hash: 8fiLqkX0Hfw0qEIsopfMgXlsC7twNkxV8E46FfFtRcU=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: cNhJH0DNmk2dGDJ8bnvyhhHqkOcTlHsxxbOuD20i/9s=)
3: tgE8jzInH6PxL3alL4l8_zSBewY.roa (hash: COcQ1Fg1VxBHECABZQ1rgFDAfEXNKxzy+WFSvFCA68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f6:06:09:80:8f:b6:62:ad:4f:8a:c2:6c:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Apr 17 09:00:53 2026 GMT
Not After : Apr 18 09:00:53 2026 GMT
Subject: CN=6aa2587c6c57b7980e59fa9d1530d9d272c972b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:9d:2f:db:6d:6f:eb:b4:9f:1d:eb:e5:01:
f9:65:1e:eb:bb:74:10:e3:da:c3:dd:09:0f:8b:5f:
e6:1d:92:76:90:f3:8c:af:9c:43:d5:61:6a:c9:92:
71:a3:eb:b0:03:5b:4e:9a:0f:2f:fa:2a:04:ef:ed:
2e:84:ff:95:bf:42:0d:ca:d9:1e:fd:b1:ed:f3:b0:
67:32:75:f3:dd:ba:f4:cc:8c:1d:f3:59:10:5b:3d:
92:cb:5b:39:7b:25:ea:5f:ea:cd:47:3e:39:a3:93:
6d:30:71:e1:ba:77:b2:f4:51:79:dc:f7:0f:26:2d:
60:62:f0:51:86:0c:db:e8:04:fb:db:a0:c0:c1:d4:
3f:63:6d:87:0e:55:f7:92:6e:27:0c:51:ec:ab:f9:
5a:af:38:9a:19:7f:0b:33:60:1c:d4:0e:19:04:95:
a5:cb:a3:07:86:be:45:40:48:5e:2c:32:12:e3:d3:
25:ed:45:4e:a2:7c:b4:df:de:75:3b:61:b6:bd:24:
cd:bf:47:1d:ba:f3:4e:0d:71:3a:e8:f7:44:c9:6f:
f7:4b:77:37:0f:99:17:02:35:ca:0d:ca:69:06:1c:
ba:30:cf:b8:cb:6b:36:10:eb:0b:72:cc:5b:77:7e:
ca:da:eb:2d:32:ef:d5:72:fb:90:da:87:78:6a:5c:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:58:7C:6C:57:B7:98:0E:59:FA:9D:15:30:D9:D2:72:C9:72:B1
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:b6:2e:15:85:2f:69:44:e1:ef:0b:37:62:bc:2f:a5:32:
6c:1d:34:04:2c:64:f3:57:3c:74:45:c8:82:d7:a7:e8:06:bc:
c7:ce:38:a6:7c:2a:98:8a:b2:3e:2f:76:a2:7c:29:fa:82:0a:
72:a8:6b:3b:68:fa:4a:1d:19:2f:70:1a:94:da:26:19:33:39:
06:61:6a:fb:46:35:33:02:b9:07:17:a2:86:21:45:d6:24:65:
06:ab:17:e0:44:01:11:8b:85:74:18:3d:2a:78:2d:30:bd:83:
e0:b3:a3:d5:1c:4f:87:ac:cb:dc:95:5a:95:58:a7:e7:43:6b:
da:48:a5:13:09:a6:16:de:07:75:45:b2:bf:41:d2:bc:9c:73:
e9:29:4c:5c:a5:6e:d9:b5:31:dc:cc:7d:a1:e0:db:72:ee:63:
42:cf:a9:4a:90:33:3d:9b:22:87:b4:fe:80:f0:dd:44:bf:ff:
24:f0:58:42:96:ea:58:8d:68:c8:12:d5:4a:44:e3:7b:9f:89:
fe:61:3e:0c:99:65:35:0d:f2:b7:cb:99:8e:54:c5:88:3c:a2:
75:c5:d7:83:e3:15:53:f6:31:c8:7f:e0:1a:6e:5f:30:11:5e:
a8:97:36:b1:d3:9f:33:76:14:36:e6:15:8a:ee:77:ad:61:0f:
10:fc:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:43 2026 by rpki-client