Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: DX/bw+Aql9OuzVx93efitbL56e0G60Hc47Ziad+Kzm0=
Subject key identifier: ED:00:C3:F2:DB:E0:56:1B:A2:2B:F5:CF:28:D8:43:35:34:D2:75:CE
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019D9961FF8E712BB37E1EBAEEB0AFD98E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: RnXyTGVpk2zvJAhM1KL2UiZ+OmG18WVwqPsWFUvdSnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ff:8e:71:2b:b3:7e:1e:ba:ee:b0:af:d9:8e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=ed00c3f2dbe0561ba22bf5cf28d8433534d275ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:a3:4f:15:51:73:e9:94:07:91:61:87:82:
8f:fa:11:d1:d1:b3:f9:64:19:5a:a5:e4:f1:d4:c1:
28:e2:a1:51:2f:2a:fa:96:4d:ea:dd:d1:17:f3:9e:
3c:26:15:b1:96:e2:71:94:4e:79:3e:2c:53:70:70:
2e:f2:ab:69:97:d9:e5:8e:5d:4e:88:bd:fd:3c:ed:
0e:a3:00:2c:02:30:f8:3d:83:09:5b:b1:9f:46:60:
59:b9:b0:18:1b:de:28:ef:04:6a:3d:21:8f:0a:54:
8d:1b:a3:6f:08:99:af:5b:62:06:28:a1:e2:ff:1b:
96:c1:fa:57:07:61:cd:75:e9:c2:c5:68:34:f7:80:
df:77:a7:5a:bf:0a:af:f7:43:65:39:cb:9c:67:ef:
3d:48:b0:f9:19:dc:0e:1f:dc:fd:ec:9a:f1:d8:90:
1d:f3:8f:1d:e1:54:fe:0e:87:cd:07:b3:24:5d:a0:
66:ec:50:67:18:5e:d1:9d:0b:ff:87:88:f7:e4:90:
36:77:40:1b:6e:1a:a9:ae:e4:84:ac:c3:a0:c2:9b:
a2:80:8d:e3:fa:04:0e:f9:55:f8:2e:99:11:84:80:
71:7e:35:d9:34:69:fa:d7:d7:7e:b7:15:3f:50:50:
1c:9a:4e:58:95:ec:c6:c1:5d:fe:5f:05:0f:15:a6:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:C3:F2:DB:E0:56:1B:A2:2B:F5:CF:28:D8:43:35:34:D2:75:CE
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:da:3e:ec:ed:55:6a:2b:2b:e6:b9:dd:8c:54:1c:e1:8c:
c0:ab:92:f2:49:14:e4:a7:20:9d:73:0a:da:ff:73:c6:ef:44:
4f:30:84:bd:c6:51:f6:bd:18:05:77:ea:1d:2c:43:8a:7f:6a:
8b:c7:a5:91:5f:ef:1d:fc:8f:81:d8:70:19:49:b8:cc:df:5a:
6f:b0:73:80:03:86:66:3e:73:b2:63:3e:d6:5f:2c:a7:d4:c3:
71:08:00:9d:92:e9:6c:43:01:f9:da:5d:11:69:36:65:2f:77:
cf:d9:26:34:c4:c9:2f:50:8f:75:f6:55:66:6d:b1:a0:10:e8:
e7:ee:18:c2:6b:cf:5d:a5:8f:0e:1c:36:17:e2:b9:0e:69:62:
6f:c9:16:bc:07:c0:5d:d0:d2:40:08:79:b1:4e:5f:4e:56:5c:
5c:74:fa:f7:7d:87:99:56:33:fe:e9:75:2a:0c:2e:c5:d3:f8:
18:22:12:e2:9f:32:a7:64:f3:7a:94:3c:26:8e:0b:5d:7f:9a:
85:f3:f4:3d:82:18:12:bc:3b:a5:c8:c5:40:4a:d6:ae:ef:5b:
c4:48:75:de:01:ea:37:2c:6e:fe:29:bb:c1:99:fd:6e:89:0e:
92:16:46:88:e4:6f:ba:75:b6:c0:c8:ac:f7:4c:5e:a0:7d:08:
99:34:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:13 2026 by rpki-client