Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: /fljv/cL8/jAIIbWf+788NboxDVsL3oJZglqX5V7TOM=
Subject key identifier: DA:4C:CE:DB:67:4D:6A:45:F0:AB:CC:8D:52:F7:63:DA:B5:47:C2:20
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 019D9A753522B2C54F46C50CD75F220A6351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 08:01:05 +0000
Manifest this update: Fri 17 Apr 2026 08:01:05 +0000
Manifest next update: Sat 18 Apr 2026 08:01:05 +0000
Files and hashes: 1: bxb4jsQXnflWYRNxaHtGts6L3fo.roa (hash: hSfRMw5uEppXFydIGGQoR0g6l6WPyrzH4kiqrfSt7O4=)
2: iMImZ1JXlWfmPfxyuu455VKKHUc.roa (hash: 038Ca8EqNUCh1s0mKXCCjtHKnbOn58ESpskQQmfAtRQ=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: eoCfzw32QJvz2tN49kyhKqcceMLpDKvkciW+gZB6rJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:35:22:b2:c5:4f:46:c5:0c:d7:5f:22:0a:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Apr 17 08:01:05 2026 GMT
Not After : Apr 18 08:01:05 2026 GMT
Subject: CN=da4ccedb674d6a45f0abcc8d52f763dab547c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:3f:e7:d5:2b:c9:94:95:30:d0:e0:ba:85:
6c:d1:92:03:3e:17:7c:61:d7:72:b3:87:d1:75:9a:
2c:2f:f3:44:20:ca:e4:63:31:fe:48:87:31:c2:76:
38:eb:93:82:f8:6b:9b:9b:77:2d:1e:0d:7b:bf:8a:
d2:2f:5c:17:c2:d6:d6:07:b5:e1:50:1d:9b:ff:3e:
30:21:d9:a4:d7:9c:1d:41:5f:07:e2:bd:6c:b2:33:
19:29:03:89:50:54:84:d8:6a:f0:85:3e:56:4f:83:
58:89:fa:00:71:39:ee:db:d4:af:af:e9:65:3b:24:
5e:ef:a7:dc:d8:31:46:bd:98:11:3e:d8:fb:29:ca:
9c:94:fd:47:11:3d:8a:a8:ab:fb:0e:45:10:a6:f1:
76:31:07:11:f1:8e:2e:21:f1:96:a9:23:5a:f0:a4:
2d:fa:78:10:0a:61:69:e6:b9:a5:e9:c2:a2:47:e5:
47:b2:58:d3:68:0d:37:a2:25:45:34:66:c1:76:2a:
bf:7e:fb:83:1e:50:48:a8:7e:92:a4:04:86:dc:c9:
da:b0:c2:0e:a9:bb:00:db:99:03:ea:3a:06:74:d4:
df:85:23:54:11:a8:40:d0:61:f9:bd:a7:20:14:6c:
81:03:88:69:b6:87:ed:99:1b:4d:e2:dc:43:43:17:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:CE:DB:67:4D:6A:45:F0:AB:CC:8D:52:F7:63:DA:B5:47:C2:20
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:40:dd:16:2c:d6:6b:d5:e0:fe:9a:7d:a0:cf:3d:02:cd:
d2:f3:63:15:89:01:60:7f:32:f2:f0:d7:99:91:85:ba:58:72:
3f:93:42:01:32:d7:55:63:80:7e:15:a6:26:e9:7c:f1:8b:4f:
81:14:71:e4:37:ae:49:cf:56:da:e0:94:63:22:1b:6a:66:7d:
7c:1c:31:77:78:1b:5c:0d:4a:f1:70:7b:ca:32:42:a2:af:7d:
b9:67:ac:63:12:ac:d0:4a:c3:97:20:7e:f5:ba:2f:90:66:3f:
ef:cb:9c:fa:6c:d0:e8:a5:ae:fe:f8:8e:31:09:5b:6a:20:79:
fc:51:89:8a:36:8f:35:26:90:25:63:a5:50:b1:73:3a:ae:27:
5f:6f:9e:db:13:d2:4a:1d:d5:72:46:28:9c:ac:4a:c5:d8:5e:
95:c0:2a:83:5a:ce:cb:14:36:20:7c:6c:82:29:c1:f8:cf:f7:
aa:95:75:72:16:79:0e:2a:8f:68:79:f7:b6:2b:31:d6:a1:83:
d9:6d:8f:d7:c3:19:05:5f:99:db:cb:1a:87:73:ba:86:3f:6a:
bf:93:86:f2:30:17:1c:f1:8b:bf:e6:da:8d:6c:dd:7f:70:73:
f0:ca:0f:9e:05:d1:f0:eb:97:6e:da:71:c5:2a:b9:06:19:f4:
44:53:45:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTUissVPRsUM118iCmNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj
Njg3YjkwHhcNMjYwNDE3MDgwMTA1WhcNMjYwNDE4MDgwMTA1WjAzMTEwLwYDVQQD
EyhkYTRjY2VkYjY3NGQ2YTQ1ZjBhYmNjOGQ1MmY3NjNkYWI1NDdjMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Y/59UryZSVMNDguoVs0ZIDPhd8
Yddys4fRdZosL/NEIMrkYzH+SIcxwnY465OC+Gubm3ctHg17v4rSL1wXwtbWB7Xh
UB2b/z4wIdmk15wdQV8H4r1ssjMZKQOJUFSE2GrwhT5WT4NYifoAcTnu29Svr+ll
OyRe76fc2DFGvZgRPtj7KcqclP1HET2KqKv7DkUQpvF2MQcR8Y4uIfGWqSNa8KQt
+ngQCmFp5rml6cKiR+VHsljTaA03oiVFNGbBdiq/fvuDHlBIqH6SpASG3MnasMIO
qbsA25kD6joGdNTfhSNUEahA0GH5vacgFGyBA4hptoftmRtN4txDQxeh3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpMzttnTWpF8KvMjVL3Y9q1R8IgMB8GA1UdIwQY
MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt
MDgxYTFhZTZlYmQ2LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2
LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrJA3RYs
1mvV4P6afaDPPQLN0vNjFYkBYH8y8vDXmZGFulhyP5NCATLXVWOAfhWmJul88YtP
gRRx5DeuSc9W2uCUYyIbamZ9fBwxd3gbXA1K8XB7yjJCoq99uWesYxKs0ErDlyB+
9bovkGY/78uc+mzQ6KWu/viOMQlbaiB5/FGJijaPNSaQJWOlULFzOq4nX2+e2xPS
Sh3VckYonKxKxdhelcAqg1rOyxQ2IHxsginB+M/3qpV1chZ5DiqPaHn3tisx1qGD
2W2P18MZBV+Z28sah3O6hj9qv5OG8jAXHPGLv+bajWzdf3Bz8MoPngXR8OuXbtpx
xSq5Bhn0RFNF9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:54 2026 by rpki-client