Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: iQw7H9OUEvU6TG9NqnzisePbGeKA7cNk32NZ47E4Evo=
Subject key identifier: C3:BB:0F:E4:B9:6F:DC:01:86:7C:77:79:18:CD:A8:E1:88:CE:6A:F4
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019D99CFD888D0222A199CE7EF30A817358B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1645
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: Op9q83l1bHAYDeW0MB8ki2sSv2C+CN+YUJpNcsELZSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d8:88:d0:22:2a:19:9c:e7:ef:30:a8:17:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=c3bb0fe4b96fdc01867c777918cda8e188ce6af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:23:5f:1f:45:2e:28:b0:57:fc:f8:cc:ff:
df:4f:a6:3d:d3:3c:10:7d:43:b4:5d:21:2d:e4:4e:
64:79:b7:cf:9d:85:34:a9:fa:dd:1a:ad:5b:f1:ce:
3d:6d:29:f9:c8:41:ea:f9:c9:40:51:52:62:f6:66:
0d:0b:06:58:32:9f:76:3e:04:75:a5:21:a6:7e:f9:
47:d9:cc:13:dd:89:14:67:d3:1a:27:e0:63:23:8a:
1a:87:55:e1:f2:63:30:da:bd:da:ad:b8:11:3c:3c:
5a:e2:f9:38:10:cc:b7:15:fb:77:18:9d:db:ad:6b:
87:33:cc:13:41:c6:60:62:35:d1:1b:53:0d:a8:05:
92:1c:2c:66:c2:73:98:01:05:43:ea:4d:7f:b8:89:
59:13:a4:5b:0d:d2:da:f5:b1:00:0b:c8:ab:c6:f0:
02:cc:17:8f:77:ae:e0:1a:1a:2b:75:c3:bf:74:df:
af:8a:3f:40:52:88:88:f5:27:b4:34:67:5f:b9:06:
70:72:9a:3d:4b:f5:49:67:1c:21:94:e3:4c:71:6d:
09:42:05:e3:95:c7:d0:ea:73:01:d7:3a:35:3e:8e:
c2:23:84:ea:bd:35:03:13:4f:14:d8:de:05:f4:da:
42:bf:66:26:52:6e:85:4c:1d:1c:f3:9b:1a:41:19:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:0F:E4:B9:6F:DC:01:86:7C:77:79:18:CD:A8:E1:88:CE:6A:F4
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:86:59:c5:67:ec:8d:93:bb:71:8a:29:e8:13:36:03:fb:
d4:12:11:1d:2b:ce:2f:fb:34:28:1d:77:68:15:b7:e6:a6:70:
56:9a:96:00:c9:7e:64:be:73:a9:fd:a6:34:c5:08:93:a2:66:
8f:2f:45:58:4a:82:d2:47:0f:94:f5:8f:cf:fc:c4:a3:5c:43:
f1:55:2b:d5:8d:a9:53:89:79:f6:4b:45:d1:03:09:cc:ef:43:
83:df:82:02:f3:ed:24:69:ca:a0:64:25:c5:ab:3e:97:58:25:
5f:4f:53:52:77:d7:a8:88:2d:80:30:9c:35:ce:e8:59:1d:fd:
95:7c:a8:a5:1f:29:cd:94:f1:13:09:1a:57:50:f2:cf:15:70:
c9:d0:f8:63:1b:c2:89:ad:54:7f:41:17:3e:63:ac:47:c1:65:
b8:25:11:7a:7a:a3:d3:38:c1:4e:ec:0a:65:34:4c:87:5d:1b:
8e:a6:d7:d3:2c:18:4f:58:cf:29:e2:34:7a:c5:07:8b:33:b1:
4d:9c:a5:45:c6:59:98:c7:14:50:1d:a2:5e:b6:06:1a:8d:9d:
e2:ae:ad:8c:6c:37:21:d4:67:dc:d9:e4:67:56:89:e0:2a:be:
8b:97:12:33:0c:b6:0c:19:e6:4b:6c:3d:e4:e9:4f:c3:86:06:
38:2b:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:55 2026 by rpki-client