Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: YnMauU2T52FOYYMWpqQKw8aIIyRwYz1omFYn1LKphRg=
Subject key identifier: E4:50:A7:10:3D:DF:F0:D6:00:2E:7B:57:BA:06:D3:DF:1B:E9:D2:7B
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019D98187823733463EB3C6689166AE5C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 21:00:33 +0000
Manifest this update: Thu 16 Apr 2026 21:00:33 +0000
Manifest next update: Fri 17 Apr 2026 21:00:33 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: yaMEhzMeDsKfnxaFXmdiQxgLH96Ri+6p37LG1m0bNLA=)
2: o-popO9auROaiIHZBs-GFli-ZBg.roa (hash: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:78:23:73:34:63:eb:3c:66:89:16:6a:e5:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Apr 16 21:00:33 2026 GMT
Not After : Apr 17 21:00:33 2026 GMT
Subject: CN=e450a7103ddff0d6002e7b57ba06d3df1be9d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:b4:78:66:c8:9a:b7:0e:24:69:78:7b:42:
8c:99:f5:93:95:d8:f8:d6:b5:4a:5c:2a:37:0d:29:
2e:00:09:13:16:70:ec:19:74:6c:72:3d:5d:f7:bd:
59:e6:44:a5:10:4b:80:c7:d3:62:84:29:25:5c:bf:
95:45:f1:87:0e:73:b5:00:b6:f9:ae:80:76:7b:3b:
0f:bc:47:d7:e2:99:34:75:d3:06:14:07:77:bb:86:
21:63:83:44:0b:0c:12:fb:97:d1:3b:7b:6a:6c:92:
da:d5:b8:fe:fd:e4:b7:62:0c:ec:a2:d8:c3:cf:49:
42:b9:85:08:a8:83:75:3b:80:ff:3e:fc:0f:4a:61:
6f:a3:8d:09:c4:39:24:91:8b:57:35:c0:81:e2:4e:
46:93:69:f5:41:08:6d:ca:f9:69:61:6e:a9:39:7d:
c1:d6:39:73:90:9c:af:ba:a5:dd:38:5f:f4:1f:d9:
da:36:1e:28:f5:6a:a1:ac:07:23:c1:85:92:49:e6:
44:d7:b8:be:d1:a9:4c:00:24:ec:e6:62:54:53:86:
eb:db:5d:7f:74:c4:8f:6a:83:04:76:40:30:58:53:
8a:0b:7d:34:d6:4d:ec:73:82:e8:8e:21:8e:9b:86:
31:8e:cf:8b:5e:be:3d:16:76:8e:32:51:59:9c:c2:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:50:A7:10:3D:DF:F0:D6:00:2E:7B:57:BA:06:D3:DF:1B:E9:D2:7B
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:87:91:a9:c8:14:d0:1c:0b:53:7f:47:a0:46:83:8d:53:dc:
a3:d5:c4:a2:20:3b:35:df:92:06:5e:fd:46:6b:74:33:f2:9a:
39:5e:87:ad:0e:1f:a1:dd:1b:65:74:d0:2f:73:84:e6:ee:50:
cd:99:ca:61:6c:95:a2:e2:4f:a8:c3:97:58:ee:8b:8c:b7:60:
d1:3f:66:2f:b1:db:0e:c8:df:91:a5:ed:c1:89:e2:f3:39:37:
54:eb:8e:f5:65:06:e4:9d:c7:3a:f4:ac:2c:2e:de:91:ee:72:
5c:70:eb:07:0b:e5:90:bf:5d:66:56:ad:4e:54:38:75:4f:27:
b5:ff:71:0e:44:36:f2:4f:ca:f9:a7:cf:dd:b8:14:18:21:4b:
d3:dd:cc:76:17:b1:29:24:8e:d6:e2:3c:f5:88:f8:db:06:02:
b4:05:9b:88:29:02:51:cf:36:31:ba:b1:6b:6e:6f:c3:98:41:
d6:12:be:28:52:fa:92:bb:e6:8d:3d:38:3a:b1:d5:55:b9:66:
44:18:73:b5:0f:1c:e1:bb:41:d1:cf:7a:62:fa:a4:2b:46:3b:
41:60:4d:09:8f:a6:3b:7a:9d:8e:b7:0b:e4:26:a1:b6:92:e2:
05:e8:f7:ba:36:66:84:12:08:58:72:dc:01:db:4f:47:bb:19:
ea:a7:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:58 2026 by rpki-client