Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: zsVUIzIlHLqEWJ/xirDh/sk5OUvyqiUu5V0wxND5RiA=
Subject key identifier: B6:B8:31:FC:A8:5F:D5:41:0C:82:67:58:3A:14:D6:C0:D1:BD:C4:61
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019D98500071D33E59F3FF96DF28C7266005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:12 +0000
Manifest this update: Thu 16 Apr 2026 22:01:12 +0000
Manifest next update: Fri 17 Apr 2026 22:01:12 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: Nv8imwiYMjdLit9APnELRp7v5GAPUv+8jk2lyPXPcpY=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:00:71:d3:3e:59:f3:ff:96:df:28:c7:26:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Apr 16 22:01:12 2026 GMT
Not After : Apr 17 22:01:12 2026 GMT
Subject: CN=b6b831fca85fd5410c8267583a14d6c0d1bdc461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:7a:29:ab:b2:8d:3b:1c:c1:31:43:f1:cb:
96:51:46:76:21:d8:09:4e:07:2a:a2:00:1f:40:20:
2e:4f:a2:35:82:c4:d6:69:de:84:f0:41:e3:3d:1a:
63:89:e0:72:e3:0f:13:84:0b:75:74:a8:39:68:30:
2f:45:a1:35:bd:e9:c1:00:00:73:9c:c9:ee:5d:9b:
c5:30:72:69:74:81:5f:cd:7f:bb:88:a1:aa:1d:bd:
30:71:f3:e2:34:0e:4d:5a:89:6d:f4:ea:20:21:c2:
10:aa:67:2b:44:9e:00:a8:34:16:df:32:21:ee:60:
12:55:a4:3b:ee:82:91:3d:21:66:c9:26:2e:3a:39:
ac:76:a3:01:b3:79:80:72:45:42:2b:33:98:72:42:
9b:7c:3f:91:f3:eb:a1:83:e8:12:86:18:f3:7c:32:
f9:dc:1a:8f:e3:c5:dd:4e:42:ac:a5:dd:40:7b:26:
6f:f9:5e:48:31:6b:5d:b1:40:05:7c:69:1f:82:7c:
70:d2:88:58:2f:e0:62:b0:d2:bc:ad:35:df:7a:42:
08:71:09:be:09:71:41:ca:58:61:1c:4d:03:8a:25:
9b:d9:54:b5:31:48:89:d3:3b:d2:69:78:34:50:d0:
0b:82:eb:f6:2a:f1:4d:59:33:33:1b:5c:6e:e7:75:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:31:FC:A8:5F:D5:41:0C:82:67:58:3A:14:D6:C0:D1:BD:C4:61
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:45:6a:cf:48:73:29:8f:ec:84:56:05:e8:dc:6a:42:94:
4c:33:c6:22:31:8c:8d:d0:b5:0e:20:fa:d0:20:48:bd:65:9c:
c7:30:44:71:16:dc:7a:4f:d2:72:c5:c4:84:03:72:f1:8d:3f:
e3:6c:bb:2d:ca:6b:74:f6:cb:f3:ba:58:ed:45:6a:01:c1:88:
13:40:58:be:eb:88:14:46:88:a4:c7:42:34:23:36:4a:8a:3b:
13:28:d3:88:e4:2c:48:47:f3:e4:35:27:22:e6:0a:af:ab:c0:
97:48:69:06:4a:8e:0d:ed:e3:b4:b6:90:d3:7f:23:82:c4:f9:
b2:c8:ef:70:7b:55:cc:77:71:df:00:c5:bf:a2:6f:f6:af:4e:
69:7c:a1:68:b5:39:7b:4b:e3:fe:d4:40:22:b8:b5:88:36:60:
f3:c8:c2:ac:9b:ae:91:78:5a:b3:74:94:41:0d:6f:62:c0:ad:
f8:95:e1:ee:8f:6a:f8:00:c0:09:4f:1c:d7:59:7d:e6:65:25:
1c:fb:25:ea:28:36:72:eb:2a:db:79:5f:41:82:33:e0:53:1a:
c7:2d:37:79:2a:ee:3a:f4:9b:bc:d7:23:f1:42:f1:b4:a8:cb:
b9:cf:a3:17:b0:a6:d8:a4:e7:78:5a:6e:f0:72:ee:7d:20:c4:
92:65:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:57 2026 by rpki-client