Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: Nvm4jPlHYNgawiTGEGGpIGgoazOvOO4duEuhEqNWxtk=
Subject key identifier: B3:53:F5:42:DA:AA:2D:06:DA:69:E1:26:6B:AA:E9:CB:41:E9:87:D6
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 019D9B8767A326AA78B314E172A06355DA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 13:00:35 +0000
Manifest this update: Fri 17 Apr 2026 13:00:35 +0000
Manifest next update: Sat 18 Apr 2026 13:00:35 +0000
Files and hashes: 1: cD_uFT-kTapfuxpK7AHJ-T-GM5U.roa (hash: xnN2+r5sXxZBGsxlc2VxrhNLd6wrjJggfMUTLHByC7E=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: RSlQ2Twrm77gCdBUlWHe1PiVZDy4lUxlchPNabBo4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:67:a3:26:aa:78:b3:14:e1:72:a0:63:55:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Apr 17 13:00:35 2026 GMT
Not After : Apr 18 13:00:35 2026 GMT
Subject: CN=b353f542daaa2d06da69e1266baae9cb41e987d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:bc:b6:fa:68:22:a4:e2:e0:e9:71:76:d1:
7a:ca:3f:0d:bb:13:d1:f3:93:45:58:db:ba:8d:29:
e7:e1:cc:5f:36:cc:37:60:40:76:1e:f1:ad:eb:b9:
60:25:a2:7a:4a:8d:7b:08:cd:5e:fd:ec:2b:ee:16:
69:10:97:03:d1:c0:08:f2:c6:1d:42:56:06:74:e5:
84:53:29:50:90:fe:08:7b:8b:d9:93:74:29:05:81:
89:b3:71:77:71:22:eb:12:ae:d5:a8:f0:6f:da:97:
51:8d:66:08:0f:1b:b4:26:b2:26:82:29:09:6a:19:
ec:08:8c:44:00:74:34:76:95:d0:0e:fc:2a:d4:39:
59:fe:f1:7f:36:42:e0:f5:c3:a2:ef:2f:db:a0:d8:
da:de:43:af:e8:21:d3:30:71:4d:3d:1c:de:ae:67:
d0:ed:a1:3b:02:dc:bd:1c:0f:62:b9:c7:97:aa:cc:
fc:2e:bf:2d:c5:61:db:c7:96:6f:11:21:4d:0a:55:
5f:59:8d:8a:e3:a5:47:31:90:1f:cc:35:cb:bb:60:
6c:26:a0:65:1b:eb:9f:33:71:dd:a4:43:86:f0:d0:
ef:47:ba:4d:0f:84:68:6a:7c:66:17:99:ec:d1:ca:
be:eb:5a:f2:ea:91:56:81:c9:05:1b:0b:b0:b5:bb:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:F5:42:DA:AA:2D:06:DA:69:E1:26:6B:AA:E9:CB:41:E9:87:D6
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:e2:0f:4a:59:7f:7c:aa:26:61:57:85:5b:ca:91:8d:94:
0c:23:9f:d9:43:bd:3e:00:08:74:0c:3d:fb:5b:92:aa:1c:2a:
88:ae:57:04:6f:ac:c2:ae:4f:25:9a:2f:35:0f:b6:e5:f6:02:
84:da:d4:aa:06:17:22:80:9f:7d:11:ff:06:bb:06:a2:60:32:
47:1d:7d:98:16:95:4f:0d:4e:53:67:ec:c9:9d:c2:bd:52:9f:
d6:b7:56:6c:e4:29:f5:68:c5:d3:9d:82:b2:a2:cb:ad:51:bc:
b9:a5:7c:3f:71:3a:01:33:e2:b0:61:71:47:00:4d:7e:f1:b3:
5b:47:39:75:12:e3:ce:8f:ce:c1:77:09:a7:5a:d7:41:36:13:
e4:da:08:fa:00:94:15:e5:c0:ef:36:db:e3:64:ed:ee:64:ac:
de:61:0d:fe:f9:7b:88:43:38:44:0a:f9:2c:f4:14:05:11:91:
26:fa:07:3f:f8:2c:22:73:a5:00:8b:96:7f:68:df:1a:04:85:
7d:2e:c7:49:7f:c9:b8:71:bb:ee:31:25:96:20:11:3f:77:3c:
5f:e7:3d:d0:ec:d0:a5:ea:c9:4a:78:25:96:a0:ba:a4:8e:ce:
11:e2:30:65:01:98:12:5d:b4:3d:0a:35:ee:ab:77:28:28:ea:
64:43:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:58 2026 by rpki-client