Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: sbfWmT4o48rDIDMzg1Y9Fjb9zKJZLvr+REJSborF6KI=
Subject key identifier: 57:D9:0A:27:E4:7D:6D:18:70:73:8A:1F:49:62:80:01:7A:00:64:F4
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019D992B424B4D7682B211BB2FE22DC2A8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 15AD
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: LZMolzKxfRWSugyLYNAA0rDux+iwkPhUwmx0RtbRaLc=)
2: qhbgvCCuTYLs-T9K9IfIIvF38MQ.roa (hash: WdrjO4xvUh7bWyfHcWR8FrUXBHsQMBxvR3LgVLProrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:42:4b:4d:76:82:b2:11:bb:2f:e2:2d:c2:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=57d90a27e47d6d1870738a1f496280017a0064f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:1d:72:c8:6e:04:90:19:ce:88:d5:96:c2:
a1:01:dd:80:e6:58:5d:27:d7:53:5b:46:8a:0a:26:
36:15:25:a8:38:15:79:66:1c:c4:ac:2d:d5:1f:f8:
6a:22:a7:53:b0:6b:24:12:68:f4:7d:37:1f:4a:22:
78:c9:70:0e:05:d6:86:2f:06:4c:13:52:1e:04:57:
d6:02:47:02:67:c1:db:20:51:49:46:36:cb:08:b0:
1c:be:95:c6:af:22:bd:8c:60:90:8f:d5:00:e4:c6:
48:ab:5c:1e:c2:42:3f:e0:46:02:dc:fe:d4:4b:c0:
df:3a:a8:00:e3:cb:40:e5:f3:f2:cc:f7:03:2a:28:
c4:8d:5f:cc:05:41:3a:66:1b:80:29:16:a1:90:ad:
ea:9f:49:35:81:cf:fa:87:57:6f:b4:a8:00:40:44:
52:51:8b:92:d7:42:ae:42:a3:9b:67:89:82:e2:f3:
31:7b:3c:75:85:6e:46:5f:0b:9e:2b:ff:39:5c:39:
e0:99:16:57:ff:62:dc:9d:80:9b:00:26:fc:aa:fa:
ce:f0:39:93:c8:89:1f:af:14:ec:6a:82:c9:31:61:
13:a3:98:d6:04:90:02:4a:1e:5a:6e:63:d9:bb:43:
7b:80:d8:5a:a6:22:5c:5d:a2:1a:42:08:2a:69:c3:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D9:0A:27:E4:7D:6D:18:70:73:8A:1F:49:62:80:01:7A:00:64:F4
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:18:61:2d:d4:c6:6f:fd:76:8d:d1:84:eb:df:9c:90:5b:51:
9c:1b:b8:20:77:7f:c6:72:11:b9:91:aa:4e:ca:68:b9:d1:48:
65:bb:14:53:49:79:df:98:01:65:01:8d:32:cf:08:a5:59:d9:
89:7a:3b:cc:1b:5e:1e:1a:37:00:c9:64:f6:01:a9:bd:c1:c3:
2e:63:8e:38:5b:3b:ee:a5:52:71:ef:01:4d:0a:bb:72:1d:cd:
56:14:c6:5c:01:3a:88:8e:e8:ea:69:41:a5:1f:c2:03:e2:68:
d8:eb:60:cb:14:eb:38:cf:d3:31:5b:da:61:9a:11:4a:d8:20:
d8:f7:32:7f:51:3f:6c:e2:35:eb:e8:25:70:20:cd:b4:a1:6a:
41:07:af:7a:1a:77:94:66:d6:60:23:41:e2:08:1a:b2:aa:27:
64:ad:7e:93:3f:bf:37:44:aa:94:dc:66:ba:df:62:38:fd:56:
db:d5:af:25:91:10:0e:b2:cd:20:06:5e:fc:5d:37:1c:10:af:
14:0f:60:b5:28:1c:8c:df:5b:8e:2f:b2:40:c6:b6:42:c7:32:
b2:1a:e4:91:3c:6d:99:1c:fb:96:b3:1e:c4:52:78:41:08:06:
ca:32:29:1c:8a:36:4f:1a:14:db:c7:06:83:a3:87:1e:6e:ff:
cf:8d:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:09 2026 by rpki-client