Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: 8OHnNjD5aFF62hGTj9O2KfEyrGLXbUt+mBZv/2VuXek=
Subject key identifier: C4:BE:99:AB:98:BC:48:7D:54:94:B7:62:76:25:3D:2B:CC:9E:A3:59
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019D9D0828685B67B9F4B913DE3AC886DA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 071F
Signing time: Fri 17 Apr 2026 20:00:50 +0000
Manifest this update: Fri 17 Apr 2026 20:00:50 +0000
Manifest next update: Sat 18 Apr 2026 20:00:50 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: Ye+/0wYOsEx5CoWEeP3i9HAM8nFIKhmwz5GCIYkxK9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:28:68:5b:67:b9:f4:b9:13:de:3a:c8:86:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Apr 17 20:00:50 2026 GMT
Not After : Apr 18 20:00:50 2026 GMT
Subject: CN=c4be99ab98bc487d5494b76276253d2bcc9ea359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:df:23:8c:fa:35:49:90:ee:64:e8:d9:9a:
d3:6c:1c:b7:37:e0:b3:59:ae:23:72:19:66:1c:08:
ac:98:e1:e1:bd:fa:ec:54:9f:75:63:3f:9d:86:27:
d3:3f:09:b0:68:2e:0a:57:98:b6:27:2e:0c:6e:64:
d4:09:5c:8e:21:bb:88:4b:c6:e8:52:18:16:37:2f:
31:16:40:ce:2e:b4:4f:89:86:0f:1e:39:c7:38:2f:
6b:db:32:4e:09:3a:ba:01:fc:6f:d6:78:33:b7:2a:
4e:6c:f2:bf:91:50:71:f5:ec:29:91:bd:9b:bf:d3:
4e:9b:f2:37:b7:a5:43:77:8e:77:60:c6:ff:ee:dd:
15:0a:8d:6d:42:8d:b6:11:26:d5:22:35:f3:b6:43:
13:e6:a1:f3:ec:64:96:88:05:6e:53:ea:44:28:14:
ae:9f:ab:77:c7:93:6c:aa:8c:5e:99:f2:ec:8f:cf:
eb:17:2e:87:ef:39:ff:83:8d:aa:b8:6c:82:58:1f:
4f:bf:cf:9c:63:28:d1:d4:d8:a9:e5:a8:2f:e1:df:
c9:73:be:f7:78:8b:1c:ae:03:30:01:3b:e2:eb:da:
eb:ed:66:01:45:4f:e2:fd:cb:34:a8:1b:f4:07:ac:
72:ec:34:58:50:b7:a5:5f:38:63:fc:d6:d8:04:58:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:99:AB:98:BC:48:7D:54:94:B7:62:76:25:3D:2B:CC:9E:A3:59
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:0f:c0:37:9d:45:81:5c:24:ab:d9:b8:bc:1e:19:71:65:
25:0f:05:73:57:20:e3:43:5f:e0:5e:ed:4b:77:d0:e4:43:48:
a1:0f:60:f3:43:d8:45:f2:5f:47:c0:b0:0f:95:ba:1c:ea:43:
e7:9c:9d:18:15:ca:b4:34:3d:85:1f:52:d5:aa:ea:88:03:40:
cd:eb:3c:08:2f:04:69:d7:61:5b:4d:22:24:7d:25:e7:8c:6a:
f7:fb:5f:d6:a3:57:80:ba:76:8b:41:ab:84:fa:3a:39:c0:dc:
8c:9f:f6:04:88:b9:07:66:30:9b:a4:e8:ad:2f:ef:5f:1e:c4:
78:cb:cc:e6:06:c6:c9:e5:d6:a2:ff:d8:a1:d3:93:04:ea:a0:
cc:c2:fa:d3:00:e8:43:02:04:8e:7e:4a:fb:d5:c8:b5:78:e8:
54:0b:35:f6:48:2c:19:a6:69:6b:fc:b8:75:82:ff:33:bc:0b:
b6:85:46:ae:db:17:7e:01:e4:f3:a1:e2:8e:6b:53:38:ab:67:
e2:7b:2c:08:dd:b7:8e:40:19:0b:1b:63:13:c0:8f:e2:d8:1b:
c0:14:09:f5:d2:75:9b:44:9c:9f:08:b0:c0:c3:4b:a1:18:68:
9d:ea:cd:74:dd:ec:66:5e:f9:65:c9:50:f1:7f:36:55:d5:36:
29:b7:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:37:09 2026 by rpki-client