
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: x+JnNFtvCXeXkh91Ii76W7LoBYYPZisTXraPiakAXxs=
Subject key identifier: 17:05:66:BB:CA:49:A2:39:ED:98:5F:B7:A9:EF:E4:B5:39:4E:95:EA
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 019D9A06D0C4ECC05BFC12E24E975457151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: 5JEWEsGoxi/BrcGwTFb+0L32Aa78Z6rgyeHSHBcxnz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d0:c4:ec:c0:5b:fc:12:e2:4e:97:54:57:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=170566bbca49a239ed985fb7a9efe4b5394e95ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:75:7f:12:58:b2:12:82:d5:5c:82:b3:a1:9a:
6c:3e:51:e3:43:69:ee:6a:86:c8:e0:d5:d1:b7:2d:
c6:76:54:1f:b6:8c:37:2c:25:0b:cf:98:5e:2d:1d:
2f:5e:11:a6:06:64:81:b4:1c:59:fc:7c:ef:15:d6:
99:8d:c7:69:52:29:81:51:0a:ab:79:48:45:2a:8b:
4c:a0:d5:3e:be:5d:bf:a5:5a:fe:01:76:58:91:9e:
f1:72:b5:b9:68:a7:c8:c0:f6:48:ba:a6:40:89:b6:
36:84:56:3b:be:12:7b:87:07:d7:e5:e6:e7:9b:c1:
03:28:02:7a:9e:7e:da:f8:ea:69:33:70:b1:8c:d1:
73:44:17:c4:0d:58:59:1d:8b:d1:d6:ac:6c:8d:45:
ed:2c:4f:66:18:65:6a:c7:1f:b7:5e:6f:ad:00:83:
3b:20:aa:9f:9e:22:0f:47:58:73:45:b3:dd:7a:e5:
d4:b8:9c:d9:74:03:50:50:38:22:9b:ee:e8:3a:f5:
5d:2f:77:41:63:89:9e:fb:02:47:2c:56:32:44:18:
27:37:a4:f6:b6:a6:f1:11:6c:9e:81:34:0f:02:8f:
d1:47:da:a5:3f:ea:ba:86:5c:bc:ea:a6:ea:49:b3:
12:6b:93:77:a3:4d:ba:7b:b8:3f:e2:c2:cc:60:1d:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:66:BB:CA:49:A2:39:ED:98:5F:B7:A9:EF:E4:B5:39:4E:95:EA
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:63:c1:53:1a:83:71:6a:8f:15:3a:8e:dd:4e:46:31:c4:
2b:6f:ff:fd:6c:34:f3:b6:49:fc:32:a6:b4:8b:a1:87:e4:68:
57:3b:8d:f3:a5:30:de:58:96:7d:da:da:9b:e9:ed:a7:1a:75:
5d:80:42:b3:43:c8:d3:88:56:b4:d1:45:9c:d3:cc:39:be:fe:
14:dd:bd:1a:6b:2e:ea:b4:e1:48:af:da:88:b5:b7:e2:64:a9:
87:05:93:a8:1c:8a:d7:1a:31:d0:77:41:70:f4:e8:68:5e:23:
2c:19:fb:57:f3:ee:09:7a:80:36:f1:3c:5e:33:7b:0f:a8:8e:
35:e1:7b:e9:26:9c:fc:4e:94:8a:5b:ee:6f:b2:f5:b5:7b:44:
bf:fc:36:39:4e:13:99:d1:b8:f0:91:ca:f5:a8:f7:3e:94:7d:
38:98:4f:a4:29:33:9e:e5:86:fa:3f:94:f9:f7:51:c9:b1:6c:
1c:c0:eb:6a:09:17:26:8e:f9:b1:28:20:1b:c2:b3:50:cb:82:
44:8a:55:81:65:f8:f3:3e:7a:73:c6:46:ab:2a:f8:55:69:ae:
30:12:fd:b9:41:5b:19:9f:e9:79:ef:b1:82:d3:ce:c2:58:cb:
99:ed:1f:5a:13:8c:33:24:3c:41:ae:48:97:44:63:43:3a:17:
5c:1e:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:57 2026 by rpki-client