Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: RRKsAlfQM42S1+ezul5E3z2sQ9mZmkUTcPnGbMcYreY=
Subject key identifier: DC:8B:B8:BE:4C:FE:06:C7:60:12:E6:B3:CB:59:16:6B:BE:6B:9D:BF
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019D9D3EB5286422CD6C44C7037D8032D631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 21:00:25 +0000
Manifest this update: Fri 17 Apr 2026 21:00:25 +0000
Manifest next update: Sat 18 Apr 2026 21:00:25 +0000
Files and hashes: 1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
2: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (hash: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: FkUtzhMujkllKC1HE9JnZ0yXzZ/0a/j1fD1SAzFjeDM=)
4: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:b5:28:64:22:cd:6c:44:c7:03:7d:80:32:d6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Apr 17 21:00:25 2026 GMT
Not After : Apr 18 21:00:25 2026 GMT
Subject: CN=dc8bb8be4cfe06c76012e6b3cb59166bbe6b9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:9b:15:1e:c7:25:9f:b9:ee:aa:2d:1f:35:
07:f4:66:76:2f:7a:60:ff:fd:eb:ee:74:09:09:90:
f5:6a:c9:51:fb:ac:61:cb:e9:a7:54:ef:dc:45:13:
2c:1d:6e:ed:73:36:ef:60:f6:ce:c6:d7:a6:25:f8:
6b:b7:71:46:ae:45:6a:fb:20:41:03:13:aa:5c:63:
48:82:a6:79:49:f8:c5:b1:de:32:27:64:06:ce:74:
ec:6d:47:34:85:2c:3c:31:bd:1d:0d:a3:fe:31:a2:
87:1c:bf:c5:e3:f9:da:34:2c:e2:92:84:5b:5c:b2:
e9:36:33:61:a9:cb:8a:3e:4d:28:46:93:95:6b:95:
f2:56:10:1c:d8:9d:e3:87:25:31:d2:84:ae:23:41:
2b:12:30:71:bd:c5:28:cc:cb:bf:9b:e7:8b:76:2a:
ea:fe:d0:ec:08:59:0d:2f:88:fb:3c:62:23:41:a6:
3b:39:f5:59:e8:d5:58:bb:3d:17:ab:05:57:8e:2b:
35:1b:d9:af:d7:b5:dc:7b:c8:46:d5:46:4d:67:ce:
1d:9d:4b:ff:5f:bc:d3:0c:19:22:3c:f5:5a:ca:71:
eb:0b:62:14:e6:6d:ca:18:fc:a8:c9:1b:99:f9:f4:
9c:24:05:f6:cc:77:8c:06:ed:d9:f6:c3:fd:58:97:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:B8:BE:4C:FE:06:C7:60:12:E6:B3:CB:59:16:6B:BE:6B:9D:BF
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:41:af:0d:c3:85:93:8d:d6:e7:e6:58:48:a3:5f:b6:da:
33:b2:b3:09:3a:2a:e7:80:b3:30:0d:7a:95:b2:5e:51:f5:0f:
f7:0d:78:05:38:a9:19:07:fd:27:f5:36:fa:8c:1c:67:a0:d6:
ee:f7:a8:65:f6:f9:0e:f9:d5:c2:09:01:87:06:aa:1f:89:f0:
2b:9b:59:a1:eb:1e:c7:f2:74:4a:82:d8:eb:7f:86:82:f6:5f:
65:41:67:73:34:a3:80:77:ab:05:07:6b:24:8e:5c:59:59:5d:
13:ea:ca:42:f3:96:03:44:cb:62:d7:85:49:37:b9:27:35:9b:
24:47:1f:23:2c:7a:21:4b:fb:74:9e:1d:01:38:e9:bf:6b:e8:
74:46:03:24:94:23:c0:b7:5b:20:2d:a1:11:cc:68:3d:68:99:
d0:86:56:de:a7:04:65:68:03:18:7a:df:ff:41:9f:97:6c:06:
9c:f8:94:07:08:b2:b7:f6:d7:d7:c1:d3:e4:12:1c:33:9b:01:
1d:83:f6:04:6d:ef:16:d2:88:4e:25:b4:76:44:90:0d:43:9a:
b5:a6:98:8e:96:73:40:4f:1f:e5:e8:69:32:81:7f:c5:2e:2c:
e1:27:7a:e8:aa:7e:fc:87:b5:79:08:5e:7f:8e:6c:ce:9d:98:
ee:b0:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:37 2026 by rpki-client