Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: 9hpksWbGEOxgHYD7NI7rC5eJyTL7RGSpT4ZmkpnOEDk=
Subject key identifier: CD:6F:74:EC:1D:5B:19:4D:8A:91:E4:57:0A:5F:45:49:56:C7:D5:99
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019DA453865594511F29BC650B877B338DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0595
Signing time: Sun 19 Apr 2026 06:00:30 +0000
Manifest this update: Sun 19 Apr 2026 06:00:30 +0000
Manifest next update: Mon 20 Apr 2026 06:00:30 +0000
Files and hashes: 1: In4EzW4PifpkipDj7qZT5AtFRqI.roa (hash: 7ol6yCYPKNd+spUojNfO6UXZVpdbeZk6ckVx301HrIA=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 9+1Tj+cVbOazXTbgM0vpzVhWVEwYPB9BFg/NBvCDd6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:86:55:94:51:1f:29:bc:65:0b:87:7b:33:8d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Apr 19 06:00:30 2026 GMT
Not After : Apr 20 06:00:30 2026 GMT
Subject: CN=cd6f74ec1d5b194d8a91e4570a5f454956c7d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:e8:36:4e:a8:93:9a:22:ba:c2:26:96:67:
c3:55:4c:d6:43:3a:d2:ae:88:25:6c:f5:e8:1f:b8:
6a:ba:dd:19:6b:d9:1c:1a:08:c0:04:fc:62:45:c2:
24:1b:e2:d1:da:7b:38:00:77:c6:f4:ea:9f:54:d1:
e0:d4:87:3b:72:b5:94:10:d2:9c:fa:c3:c2:2a:8e:
a8:5d:02:77:fa:86:e1:8a:67:31:dd:00:09:77:27:
b2:a7:56:d6:77:3f:f5:5a:18:bb:11:2a:73:90:f6:
24:36:ee:96:68:18:20:7e:3f:8f:e5:ab:33:e8:c8:
28:60:32:da:fc:74:dd:3f:bf:5d:41:d3:45:63:d9:
9f:3e:cf:85:f2:e3:0c:24:d2:a6:fd:07:a4:2f:b6:
66:78:d7:d4:7e:31:a0:e4:b9:f8:db:dc:ab:61:83:
df:15:a7:35:a0:14:0a:98:fe:8b:17:f7:83:75:d0:
99:c2:59:9d:d0:1f:f6:40:cd:e6:f8:6e:12:ca:ef:
1a:56:34:2e:ed:71:2e:32:6f:fd:54:a5:fd:cc:65:
6e:0d:b6:1b:07:3e:fd:a7:29:3c:b1:f9:e6:56:07:
14:29:8f:8d:f8:9c:94:99:e6:e4:02:2a:a7:98:fa:
ea:7f:95:f1:0b:12:32:39:68:71:34:03:2f:35:be:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:74:EC:1D:5B:19:4D:8A:91:E4:57:0A:5F:45:49:56:C7:D5:99
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c8:75:6a:a4:24:6d:93:9b:00:25:37:01:63:37:bc:02:ff:
26:50:91:1b:a5:00:44:87:8e:3d:0e:46:7b:f5:d6:79:16:c3:
d6:aa:c0:ab:28:d1:d7:f5:13:f4:0f:a8:0b:b5:b7:88:9e:2e:
dc:b4:ff:7e:4b:16:45:c4:52:f3:42:f7:b1:e9:16:0b:8c:4a:
a9:9d:e5:4c:89:23:99:8a:ec:47:d6:1d:a9:5b:93:cb:d3:88:
30:e5:32:7f:3d:28:65:79:f3:70:d3:3c:71:9e:f1:a9:85:89:
da:96:2d:02:52:a3:37:4c:b8:3d:1f:9d:96:76:dc:0f:d8:f4:
e1:06:b4:71:23:8f:20:c3:19:cc:b7:02:8e:83:7f:93:6c:d3:
dc:43:c6:c7:15:27:f5:b6:a2:59:59:4c:12:0f:02:6f:28:6f:
e9:f5:d4:a8:f9:f0:fb:a3:5f:cc:0b:97:58:b2:c1:23:17:0c:
4d:e9:94:84:9c:9f:88:9c:32:a3:ce:e8:51:45:51:b0:f0:ff:
48:b7:cb:11:65:5a:b5:6f:eb:a6:13:8d:be:e1:33:69:5c:e6:
ad:f6:42:3b:04:5b:b1:36:dc:7b:75:cc:2c:e1:93:c9:93:8f:
9c:90:cb:67:28:79:d1:29:12:cb:e3:2b:3e:6b:b2:f3:ad:92:
eb:91:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:50:29 2026 by rpki-client