Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: rf8DS+8muL+1wO2ArAVQ4/QmMdhjRNfWv96Bv+9DgDI=
Subject key identifier: 7D:B1:9C:00:BE:FC:C0:3E:68:73:64:A5:8C:31:B6:B5:D0:0B:60:87
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019D9B507737F0EB6C56DD21FCF37E5813EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:00:34 +0000
Manifest this update: Fri 17 Apr 2026 12:00:34 +0000
Manifest next update: Sat 18 Apr 2026 12:00:34 +0000
Files and hashes: 1: 5f-UuDoTp5gYMURYo2jt2lK0wo0.roa (hash: Xs27w1pjtbaPiwS7XxbIK5JOznQzGRl8strYBgv7AYc=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: 6byy9NlBbxq8X+xiyCrl+hCKwSoyywv6b233le/qw/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:77:37:f0:eb:6c:56:dd:21:fc:f3:7e:58:13:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Apr 17 12:00:34 2026 GMT
Not After : Apr 18 12:00:34 2026 GMT
Subject: CN=7db19c00befcc03e687364a58c31b6b5d00b6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:ca:93:5a:b5:b8:c6:45:d2:d4:88:0a:87:
0e:4a:1a:1c:84:8e:8d:e1:d4:52:ec:e5:96:4d:ef:
de:13:43:8e:09:e2:48:c0:c9:b0:fd:7d:d6:68:82:
55:bb:4e:6b:5b:e9:ab:a8:6f:eb:a4:a7:d8:8a:ff:
2f:47:ab:af:1d:7e:e5:ee:d6:38:9c:aa:74:57:cc:
20:c2:b7:83:89:3e:6b:8e:d6:c8:70:c9:10:09:3f:
0a:54:56:4c:cf:72:8f:56:e6:7c:8b:b1:39:73:d4:
58:e3:23:71:0a:39:d8:c1:10:43:a0:6a:d7:d6:68:
87:28:0d:13:92:70:4b:53:25:c7:2d:ee:be:4e:71:
22:70:26:94:f3:f2:6e:83:e3:d8:a8:af:2b:11:70:
f1:01:7c:8e:94:72:80:5c:85:40:14:e8:c5:4c:60:
28:82:b0:74:24:d2:6e:b3:20:de:c6:48:83:04:62:
15:bc:d1:5a:c8:a7:6e:a6:ae:1f:8c:92:f8:db:78:
0c:2b:7a:c1:c5:6d:96:72:8e:86:7f:57:44:c9:96:
19:c9:23:9b:17:8d:43:3a:e7:84:24:a0:a1:8a:0d:
86:ef:c5:6a:30:19:4e:3a:4a:fa:cb:6c:1b:9a:e9:
af:41:06:b2:42:76:2c:79:1b:77:2a:90:b3:19:f5:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:9C:00:BE:FC:C0:3E:68:73:64:A5:8C:31:B6:B5:D0:0B:60:87
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:bb:d9:1d:2f:cb:d2:da:3f:80:d5:26:30:b4:cd:3b:9a:
9d:fe:d8:62:f4:63:aa:88:f2:51:d3:c4:aa:41:61:94:0d:7b:
14:15:aa:0b:15:9d:ee:98:38:e4:be:0e:82:f0:36:7d:2f:0d:
4f:c4:01:4c:a9:12:4d:d4:66:fe:9d:98:28:62:ea:22:ca:2d:
08:e5:8a:02:8c:67:fe:d9:ae:29:9f:ec:b6:96:40:7a:d3:39:
c9:f1:34:09:23:09:ca:d2:fd:2b:a8:18:4f:88:7f:56:6e:6c:
db:54:55:19:35:4d:00:1a:c1:9f:68:e4:13:43:8b:c1:26:28:
dc:9a:b7:05:b8:6c:5b:2c:26:48:ab:03:d7:64:4b:e5:0f:ef:
ca:de:ca:74:63:25:3b:82:c6:c5:5d:d5:73:9a:d8:1c:45:91:
a1:6f:22:37:1d:bb:b0:ff:25:52:ec:ac:75:c4:38:ab:3a:9d:
bd:36:bf:de:d8:1a:d4:75:6d:54:eb:5f:96:58:1e:48:d5:01:
11:0a:d7:b7:75:ac:19:6d:28:10:9e:62:0a:de:2d:b3:91:af:
e2:88:6c:31:79:34:e1:88:01:be:c0:f5:2e:db:6c:b0:e8:77:
0a:ba:b3:51:55:42:93:27:9b:7a:38:23:58:b0:5a:2b:32:4b:
73:08:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:09 2026 by rpki-client