Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: m9Zu1BX+Ri10JMv/HXrXkOt55WD3zVxWdHZ7Isx76Sc=
Subject key identifier: 49:82:FF:DA:1E:D5:CC:30:F3:83:63:1E:B3:58:C0:37:1B:7E:EE:EC
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019DA52F3241FD21342690C8F24A6FABCC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 10:00:26 +0000
Manifest this update: Sun 19 Apr 2026 10:00:26 +0000
Manifest next update: Mon 20 Apr 2026 10:00:26 +0000
Files and hashes: 1: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: pVoMLusSowX5hjbRlj+23BUzz+wQXNL4Pbhr1dgmg6Q=)
2: wlxifpAvi3KnZGmbDR-ny66_Gks.roa (hash: T7gVPusKxBgkDKZBte1yrg8sQCBMVaEOfioHHj0VULo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:32:41:fd:21:34:26:90:c8:f2:4a:6f:ab:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Apr 19 10:00:26 2026 GMT
Not After : Apr 20 10:00:26 2026 GMT
Subject: CN=4982ffda1ed5cc30f383631eb358c0371b7eeeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:20:58:d3:64:e3:11:03:c1:05:1e:30:ef:
35:89:cf:a4:f8:a3:99:d7:be:72:36:8e:05:91:42:
17:51:a2:de:11:f6:4c:fe:68:3f:5a:37:a2:93:7a:
52:8b:d6:ca:f5:9f:9a:ad:2d:28:95:c0:1a:46:6e:
18:62:a9:a2:b9:d8:65:09:2c:fd:8e:c2:46:88:2a:
db:51:2d:74:1f:87:e0:74:8a:b0:d0:21:88:0f:e1:
84:6d:2d:4b:50:77:6a:74:f3:46:de:7f:79:5c:4d:
8a:53:63:a4:9f:78:a4:99:94:1c:bd:ed:8e:ba:4b:
fe:a9:4d:40:5d:b5:77:5a:99:74:af:b6:9f:d2:a0:
49:c4:8b:12:f0:26:7b:2b:51:0e:af:66:29:56:c2:
41:71:a4:27:61:e8:b9:cd:d0:ac:8a:99:d3:34:93:
36:41:a4:95:92:35:58:0e:dd:14:b1:13:79:53:48:
87:f1:4e:4e:7f:2e:91:69:4b:a4:e6:ff:71:f9:83:
6b:5c:28:e1:35:a2:27:42:37:34:12:7b:64:31:cb:
43:c4:71:64:fe:2a:19:30:88:6a:e9:14:ac:59:e7:
0c:57:2b:f9:96:f8:2c:b8:d0:90:2e:85:4f:24:8e:
42:31:74:a5:62:ce:75:cd:b8:48:b4:1d:38:7b:a5:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:FF:DA:1E:D5:CC:30:F3:83:63:1E:B3:58:C0:37:1B:7E:EE:EC
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:17:cc:e5:9d:66:c0:a7:27:7c:93:fb:05:cd:97:c9:4c:f9:
7c:ab:3e:fc:19:68:70:97:fc:03:8b:c4:16:32:46:26:89:6e:
3b:df:61:cd:74:91:dd:05:e4:da:68:1c:6d:0d:54:6d:85:2e:
4f:c5:54:ea:11:10:b4:86:49:14:1a:47:c5:66:33:5f:ec:95:
c7:2e:98:af:ff:4d:f5:90:4b:d8:5c:82:1c:db:96:09:bd:61:
29:f0:a3:1a:aa:c2:80:de:6e:f6:3d:29:c2:d8:0d:ef:bc:f9:
ab:c6:90:f7:0a:75:41:1e:8b:8a:74:cc:6b:4d:f8:52:d6:3a:
ea:9d:54:66:ad:77:80:0b:f2:43:b4:a7:8c:54:fc:8f:b5:0b:
db:08:f4:6c:b5:a5:50:01:e1:6d:f0:e5:a1:71:ad:bf:ac:17:
45:77:85:f9:18:88:9b:35:c0:83:a5:a3:f9:37:75:9a:ed:d6:
06:ed:9c:cc:04:59:22:43:1c:e4:17:4e:94:bd:35:ba:88:07:
7b:1a:8f:60:85:d8:9d:e0:5d:c0:ce:97:6c:4d:ad:5a:44:70:
64:d0:67:84:3b:6b:42:db:c5:5c:52:12:78:36:2d:7f:69:53:
bf:e0:18:60:db:1c:31:17:4e:45:73:47:16:20:28:4b:82:50:
94:9f:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:25 2026 by rpki-client