Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: az4NqgzQg4W2PrT63TnpziG+c//rESo5+kkAYjc38CU=
Subject key identifier: D8:81:4C:58:AF:12:60:2C:70:9D:19:7A:75:BA:7B:62:F0:2F:B4:C1
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019D97E1B1AD2656E89D2383AD741FDA2B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 20:00:43 +0000
Manifest this update: Thu 16 Apr 2026 20:00:43 +0000
Manifest next update: Fri 17 Apr 2026 20:00:43 +0000
Files and hashes: 1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: jkvqzh44VIaq1hn7S2nnHiw709KKZ57S4g0lizA74sQ=)
3: hG7korJHdX3J-VQRQpsautEAs5k.roa (hash: Iemgb9cSM4wP9xZ65kMEtq49P3Moq93S8ieRnN38Nu4=)
4: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
5: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b1:ad:26:56:e8:9d:23:83:ad:74:1f:da:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Apr 16 20:00:43 2026 GMT
Not After : Apr 17 20:00:43 2026 GMT
Subject: CN=d8814c58af12602c709d197a75ba7b62f02fb4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:23:9d:da:a6:c1:02:6a:78:bd:51:64:e1:
cf:a0:b6:82:bc:7c:b1:98:25:50:c2:2a:02:dd:a4:
fe:f3:16:b0:09:c7:b6:1e:ca:6f:f3:b9:08:81:02:
24:81:b1:90:52:75:e5:93:f7:79:7a:8b:db:8c:b7:
9b:9b:84:88:eb:0a:69:17:27:21:7f:94:9d:e6:cb:
69:76:be:6a:d4:0e:fa:da:6e:24:89:45:ab:ab:90:
26:a5:3d:c3:86:f7:e5:bd:d9:52:81:5b:79:6d:25:
b5:37:f4:03:ed:90:27:2e:7d:17:79:83:be:00:0b:
05:a4:75:c8:97:f2:34:df:55:d3:c0:ca:4f:65:50:
cb:aa:52:35:84:15:f1:92:7a:1f:05:d1:df:9e:f4:
5a:77:28:7d:16:52:f7:98:b7:8a:df:a0:ec:3f:48:
a7:b2:5b:67:c9:d4:0b:e8:29:13:42:09:a0:30:59:
43:85:cc:45:d2:74:2f:d8:1d:29:07:c1:99:39:3e:
5e:d1:12:43:8c:a1:b9:9d:9b:7c:52:a7:c7:fc:c4:
44:8b:c5:e5:ad:d3:58:00:42:2a:20:de:49:09:a4:
f5:d8:b4:07:54:45:f5:6d:a4:2e:8b:f0:af:fc:bb:
af:b9:94:de:c5:fc:65:30:7e:39:67:e8:a5:14:ec:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:4C:58:AF:12:60:2C:70:9D:19:7A:75:BA:7B:62:F0:2F:B4:C1
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:ea:06:83:d0:c5:a0:26:4f:61:09:06:ce:34:0a:e3:5b:
1a:2f:01:43:67:e4:db:11:98:65:0e:13:da:55:86:0a:e7:71:
ab:d2:78:6c:8c:d9:c1:1c:99:11:38:90:e3:17:89:0b:6d:b6:
b9:84:b4:ec:04:79:28:57:4c:c4:e7:9d:f4:a7:03:0e:1b:4e:
da:04:56:3b:02:5b:51:6a:5d:8b:7f:29:53:c8:5c:73:4d:a9:
4d:ed:97:be:d4:6c:ab:a7:38:64:f8:98:11:55:78:cb:29:be:
3b:4c:8d:14:a9:80:fa:1a:66:fc:ea:e7:da:da:bb:94:52:a3:
17:43:be:ca:aa:22:48:05:02:c6:46:f8:61:80:ae:76:d8:ad:
aa:97:79:71:92:4c:31:54:06:30:90:cb:04:e4:21:70:8f:0b:
01:e4:88:e2:10:20:8c:7e:b9:fe:f8:fe:fa:81:3b:75:2d:e4:
4b:2f:13:49:6c:e7:aa:02:67:80:2f:71:9b:79:f5:62:54:72:
19:f3:ad:5d:d1:2b:78:0c:43:ca:7d:65:1c:f6:11:4e:f9:31:
7d:f0:4f:b5:a7:ca:56:74:e7:f8:e5:1f:9e:bb:56:81:81:d1:
ba:5a:66:44:29:fd:fe:9f:41:d0:34:15:0a:92:c7:0f:f9:66:
6b:e6:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:39 2026 by rpki-client