Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: x78Bi4RX4HW44WLeoSntLeEBkSGDBgfBTAHP0NpWgeE=
Subject key identifier: 3C:7C:C2:E3:C3:14:57:BC:F1:75:47:9D:6D:9A:69:C7:0F:A6:2F:CB
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 019D98F490D0166776738F2612D59B46C42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:00:57 +0000
Manifest this update: Fri 17 Apr 2026 01:00:57 +0000
Manifest next update: Sat 18 Apr 2026 01:00:57 +0000
Files and hashes: 1: N79dGcqXOAWTraGm-dUGr_n7g5o.roa (hash: izRmr4QFMP3HYYiVhDYKTcRuMtp1aQuZsgseKcKqny4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: BW3D6ZBncHZQr3Fz/c/tiLhfAA2Lz4/GS4ioAx5JPUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:90:d0:16:67:76:73:8f:26:12:d5:9b:46:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Apr 17 01:00:57 2026 GMT
Not After : Apr 18 01:00:57 2026 GMT
Subject: CN=3c7cc2e3c31457bcf175479d6d9a69c70fa62fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:30:a0:b7:73:2b:33:e7:35:46:18:15:f8:
dd:eb:3f:c9:1a:b0:c9:94:98:a8:bf:e7:9a:43:b9:
29:38:b6:46:2d:12:f9:28:b1:a2:dc:58:eb:0d:b1:
1b:8f:4f:76:14:4d:e4:41:36:86:ee:34:a5:0c:1a:
d3:39:48:4d:67:81:23:ac:92:27:86:ae:04:7b:27:
06:1d:b3:8a:76:a2:f7:a9:7d:58:8e:1d:7f:39:4a:
df:e3:71:fb:11:48:2e:63:b3:f1:fb:bd:c4:a9:43:
c2:7c:f0:25:07:cd:09:88:73:3e:54:69:e9:75:e5:
f9:2f:2f:5d:02:79:0a:4f:c1:1a:bc:1f:63:97:d9:
6a:4c:1e:33:e7:3f:e4:cd:d0:18:0c:0e:50:d9:83:
53:ff:e9:9e:ad:a5:b5:c7:85:e1:25:d5:0f:d6:ca:
0f:ba:a2:e7:04:1c:be:63:75:60:c7:9e:c1:42:f5:
c3:c4:5e:41:1d:24:da:59:27:d1:8e:29:18:01:0a:
79:5c:d0:88:75:97:db:a3:7b:7a:77:a7:81:2a:47:
d6:b1:e4:c9:94:ea:80:ea:0b:24:54:6a:f6:84:26:
5e:f0:38:7e:5a:fd:fd:9d:ed:30:dc:bf:37:9f:5c:
33:24:f0:8f:65:57:fa:fd:4a:45:c6:8a:53:96:3e:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:C2:E3:C3:14:57:BC:F1:75:47:9D:6D:9A:69:C7:0F:A6:2F:CB
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:31:ba:bd:38:f7:5e:37:9d:58:45:69:f3:fa:51:e1:7e:
ba:d4:97:4c:f9:23:32:de:08:07:69:3d:a7:23:96:f5:21:fd:
60:78:b4:60:70:58:d2:cb:29:0d:6f:43:e8:27:6e:6b:34:26:
43:30:d5:b3:d4:cb:b4:39:54:3f:cf:43:66:cf:8b:35:b8:d8:
60:b6:51:58:5e:1e:ae:ee:ce:8c:3c:f8:6c:fd:81:9e:e0:ef:
79:9a:d5:eb:5a:53:03:03:a7:92:f0:31:27:bb:95:06:fa:ae:
78:0c:04:a0:bb:8d:3a:30:67:f5:4e:80:cd:1d:d8:1c:69:c8:
27:72:1f:38:5d:3f:b8:1e:9d:59:d7:e4:fd:bb:06:48:04:69:
f4:2f:96:1e:06:58:22:5c:a9:56:4f:7f:6c:ce:67:93:3f:48:
f7:07:74:b8:8e:1a:98:16:f1:1e:74:2a:41:1d:a4:d0:01:39:
ba:eb:6e:4f:6c:d5:9f:f4:16:02:20:12:23:13:1f:b3:82:d3:
86:7f:41:65:1f:82:4b:03:b0:dc:94:37:62:9b:4a:45:c0:78:
09:86:8a:1e:43:5f:60:27:70:9d:8f:c8:2f:11:b1:b7:5d:17:
d2:13:e3:34:b1:62:5c:12:c5:3d:03:09:25:82:0a:8d:d3:5b:
62:60:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:24 2026 by rpki-client