Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: 5tz7w14FSz2YyrETrEtx3nJ0xEmlHeJaz+yMxDic52k=
Subject key identifier: B1:4B:07:FD:D2:6C:9F:C7:71:C8:73:A2:E4:57:8B:86:37:63:BF:7E
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019D98F4FF48D6E73C32B508D6D59EB234AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0D69
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: ZoQ+fNqfOi5RjfgujjXf7c2/ATrSb2qLpMHkz6gwhlM=)
2: uglZN3e0ur2TkFYxywC2Q5oDa8c.roa (hash: W5cX7fhh2nzjYIuvg0tzN9PC2FGwU2Yio9kqI45+MPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ff:48:d6:e7:3c:32:b5:08:d6:d5:9e:b2:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=b14b07fdd26c9fc771c873a2e4578b863763bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:e6:17:2c:90:df:f4:67:0c:b3:f1:a8:65:
df:6a:7c:60:9d:2b:f1:3c:5d:99:d3:9e:17:4a:b3:
ae:db:de:a3:65:74:ed:aa:c6:46:33:dc:b0:5e:2b:
a1:c6:be:08:f4:88:ad:c4:47:93:fb:27:bd:35:73:
57:07:02:5b:3c:81:dc:9a:8c:74:27:e9:96:0f:b4:
52:5c:51:9c:00:ec:05:b3:ff:87:6f:3d:c4:2c:9a:
9d:89:a2:0e:3c:22:c8:db:4e:5d:dc:c0:ec:48:f3:
a1:c4:ad:6a:dc:0d:fc:37:b6:c1:0e:14:0a:fd:4a:
db:f1:e7:b9:12:c8:2b:eb:1a:bd:47:45:88:0d:64:
32:ec:1d:b0:9d:1e:ab:ec:1e:d7:ea:ec:01:e5:03:
c3:d0:55:f1:5b:0b:28:0d:57:5c:5e:50:51:9e:0a:
10:9e:a9:92:18:83:0f:65:61:41:e4:0e:8a:95:29:
cd:13:b1:20:73:49:8a:3b:0e:4a:e2:fc:c9:51:56:
bf:36:86:fa:c6:1a:58:72:e8:a5:71:e7:8d:bc:7e:
aa:a1:26:69:5f:a7:8b:b1:59:55:22:fc:fd:2f:e7:
44:98:64:90:f7:fc:25:fd:e8:fb:8a:b5:05:69:4a:
d0:9d:77:91:93:8d:b7:7c:1e:2f:1d:23:f1:f0:cf:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:07:FD:D2:6C:9F:C7:71:C8:73:A2:E4:57:8B:86:37:63:BF:7E
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:bb:36:bf:28:84:e6:bf:a1:51:dd:0c:1e:2f:1d:4e:05:
04:ab:ff:56:f4:b7:f3:68:5f:00:a6:8b:5b:29:4d:3a:e1:41:
36:b4:ba:7b:09:b3:cb:de:d8:ae:87:86:f6:70:b6:46:6f:39:
f4:38:ea:b7:d5:16:b9:79:90:76:f8:2d:bf:cd:a7:0a:52:16:
2b:7c:70:e4:d4:fb:d2:43:e0:18:1f:53:45:56:d3:ea:db:c5:
b6:0f:51:aa:6d:fb:66:46:36:9b:f9:a9:0f:0c:5f:74:8c:e6:
bf:c0:2d:bb:7e:2a:f1:bc:a7:5c:88:aa:99:fb:a8:e2:18:f6:
a6:47:b8:23:9d:64:fa:b0:c7:7d:2d:bf:7c:c8:08:70:42:9f:
46:82:2c:f7:a6:4d:cf:17:29:eb:1f:90:08:c0:3b:67:84:4d:
14:22:25:39:bd:d9:e8:ae:71:f5:28:d9:39:d5:2a:f2:0e:a6:
70:6c:08:f6:4e:34:7d:3b:56:65:cc:6b:da:a3:ad:83:68:2f:
e4:2e:1f:c0:96:bb:22:df:e2:0f:7f:56:79:11:cd:ee:d3:c1:
46:84:34:74:d5:b0:12:79:b4:cd:11:bd:b8:b3:c0:a0:40:2c:
98:3f:52:75:f6:17:70:d9:75:49:fc:14:4c:d4:82:78:2d:9b:
77:36:79:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9P9I1uc8MrUI1tWesjStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlM2ZlOTBmMGZhZDZhMjVkNDZiZDdjMzM1YjkyMmRhMDMx
YjJjNzgwHhcNMjYwNDE3MDEwMTI2WhcNMjYwNDE4MDEwMTI2WjAzMTEwLwYDVQQD
EyhiMTRiMDdmZGQyNmM5ZmM3NzFjODczYTJlNDU3OGI4NjM3NjNiZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc/mFyyQ3/RnDLPxqGXfanxgnSvx
PF2Z054XSrOu296jZXTtqsZGM9ywXiuhxr4I9IitxEeT+ye9NXNXBwJbPIHcmox0
J+mWD7RSXFGcAOwFs/+Hbz3ELJqdiaIOPCLI205d3MDsSPOhxK1q3A38N7bBDhQK
/Urb8ee5Esgr6xq9R0WIDWQy7B2wnR6r7B7X6uwB5QPD0FXxWwsoDVdcXlBRngoQ
nqmSGIMPZWFB5A6KlSnNE7Egc0mKOw5K4vzJUVa/Nob6xhpYcuilceeNvH6qoSZp
X6eLsVlVIvz9L+dEmGSQ9/wl/ej7irUFaUrQnXeRk423fB4vHSPx8M/uVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFLB/3SbJ/HcchzouRXi4Y3Y79+MB8GA1UdIwQY
MBaAFE4/6Q8PrWol1GvXwzW5ItoDGyx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2Et
MTQ4N2M2MDIwYzQ2LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2EtMTQ4N2M2MDIwYzQ2
LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUa7Nr8o
hOa/oVHdDB4vHU4FBKv/VvS382hfAKaLWylNOuFBNrS6ewmzy97YroeG9nC2Rm85
9Djqt9UWuXmQdvgtv82nClIWK3xw5NT70kPgGB9TRVbT6tvFtg9Rqm37ZkY2m/mp
DwxfdIzmv8Atu34q8bynXIiqmfuo4hj2pke4I51k+rDHfS2/fMgIcEKfRoIs96ZN
zxcp6x+QCMA7Z4RNFCIlOb3Z6K5x9SjZOdUq8g6mcGwI9k40fTtWZcxr2qOtg2gv
5C4fwJa7It/iD39WeRHN7tPBRoQ0dNWwEnm0zRG9uLPAoEAsmD9SdfYXcNl1SfwU
TNSCeC2bdzZ5Ow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:32 2026 by rpki-client