Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
File: TRYkCJewEwVoHJQl_lI_WPqydBU.mft (raw, json)
Hash identifier: Qoqh0ZdBrqKLfdBeldpuD8ISLh4t4U0jgv0EpKT0Too=
Subject key identifier: 27:8F:7E:1D:12:AC:12:B2:4F:8C:FA:98:7B:E7:9F:4E:3F:DB:7C:ED
Authority key identifier: 4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
Certificate issuer: /CN=4d16240897b01305681c9425fe523f58fab27415
Certificate serial: 019D985019FA2C20DF5810F6C2C5B86A2C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:19 +0000
Manifest this update: Thu 16 Apr 2026 22:01:19 +0000
Manifest next update: Fri 17 Apr 2026 22:01:19 +0000
Files and hashes: 1: NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa (hash: gXt+Eq5uxoOgBwvqy+Kxf+ntZAhbrgykVlmEcwvKBeA=)
2: TRYkCJewEwVoHJQl_lI_WPqydBU.crl (hash: GJehWdTLclLUawWv/bGTa7peHIaFkpW0S5lNTogimz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:19:fa:2c:20:df:58:10:f6:c2:c5:b8:6a:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d16240897b01305681c9425fe523f58fab27415
Validity
Not Before: Apr 16 22:01:19 2026 GMT
Not After : Apr 17 22:01:19 2026 GMT
Subject: CN=278f7e1d12ac12b24f8cfa987be79f4e3fdb7ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:ab:37:35:5d:d1:47:cf:c8:be:f9:c2:ac:
e2:43:7e:1e:3d:d5:ad:13:12:1b:95:4c:6c:7d:13:
9e:b1:78:35:27:04:e7:c7:43:7a:d8:29:2e:c6:4f:
c7:17:17:b3:d4:8e:bd:eb:59:43:07:e8:77:c1:f0:
51:9b:02:46:6e:3f:54:31:e0:5b:64:84:b4:a4:ed:
01:a0:9c:63:6f:c3:27:58:4a:00:6e:41:15:b0:24:
17:10:4c:64:d2:d1:08:bd:f4:82:22:a7:bf:20:0f:
2a:9f:48:89:24:a6:a3:27:e7:29:bd:a5:f6:08:e9:
d6:82:c2:a0:22:1a:0b:21:8c:8c:18:a2:fa:54:26:
eb:6b:7e:7e:1a:b2:18:c6:93:a0:a9:50:f1:fb:11:
68:cc:b3:a9:cc:ad:6a:a7:17:96:75:9d:e8:4d:bc:
f1:32:b4:44:f0:9a:c1:53:29:33:58:e5:82:22:c2:
2e:6a:b5:e4:92:35:be:c2:0b:f5:f3:a7:7c:7a:0f:
00:6f:81:61:e3:16:56:7f:35:64:99:24:c9:17:1d:
aa:d9:f8:eb:8b:49:0e:6b:fb:ab:f7:76:fe:4c:90:
0d:cc:6c:66:53:e1:f1:ff:bc:61:05:8a:80:a0:7a:
5f:8c:c4:9c:7e:86:eb:0a:8a:a0:9b:69:16:a2:39:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:7E:1D:12:AC:12:B2:4F:8C:FA:98:7B:E7:9F:4E:3F:DB:7C:ED
X509v3 Authority Key Identifier:
keyid:4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:cf:37:9e:a9:96:7c:80:80:3c:49:92:a1:11:1d:f7:54:
56:28:29:7f:06:c7:49:a0:33:de:a5:12:9f:07:9f:54:c9:e4:
e6:72:54:91:db:56:82:62:13:4c:bf:92:b0:21:2e:f6:ef:e4:
33:76:16:6f:c6:40:64:28:a6:5e:7a:88:e9:57:ed:81:f0:3d:
c1:7b:33:bd:f7:1e:93:3c:56:62:a8:22:93:dc:47:0c:ed:de:
46:5d:fb:e6:a7:fb:f1:22:18:2c:e4:9c:bf:f0:f4:49:be:10:
82:3b:c7:5e:17:76:9c:90:89:66:88:c1:6b:1a:3a:cb:ad:c3:
49:c9:76:2f:fc:1f:45:ab:bc:c3:d5:7a:6f:ff:7a:2c:56:68:
38:92:d1:94:e7:0d:a0:73:bc:e5:54:42:d8:28:04:f0:58:82:
ea:19:21:cd:7b:d9:f9:e3:45:d4:46:52:ff:01:64:cc:59:a9:
58:88:64:db:9c:80:a9:a6:14:5e:9b:db:b3:2e:61:9a:f8:8b:
86:c9:8a:3c:f6:3a:f7:05:da:5c:60:bd:af:6e:3e:75:e0:c1:
02:c3:54:3e:52:17:82:0d:91:6e:bd:62:04:34:3d:4d:d6:90:
a1:9e:db:21:dd:27:0a:d7:85:7b:e3:b8:c7:c4:35:fd:73:eb:
c8:29:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:14 2026 by rpki-client