Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: AcCqIRQjOQeA/TaEIM6ogbbenMC1+nzojNpHDApf5Qg=
Subject key identifier: 4F:6F:37:15:AA:4E:34:3B:80:60:9B:64:42:97:B7:26:62:D6:E2:04
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 019D99994A265C30D75E1CB975C21E614416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: X3SG_E7dKLkySN2NXBNircknUi0.roa (hash: H3iDQ4ve/GqzLagGcVLrgcEFBGMPC2p/bJLU2T5Fnqk=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: qec2cC73K5/nXZ+ii/h3B310vbb2nZt95ciwYHGddJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4a:26:5c:30:d7:5e:1c:b9:75:c2:1e:61:44:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=4f6f3715aa4e343b80609b644297b72662d6e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:3a:08:f9:fa:45:9e:1b:40:45:d6:2f:4b:
42:f9:58:ce:08:39:51:63:c3:b2:e6:9b:08:76:09:
2a:23:d2:28:de:bf:ce:15:a9:b3:96:97:c7:41:ad:
db:62:77:bd:8d:82:fc:15:ad:68:9e:2f:e3:c0:84:
67:ad:14:4c:9b:96:20:13:78:f2:0a:48:7b:2c:c6:
d1:99:00:d2:c6:de:b4:c1:df:3b:e5:6e:ee:12:7a:
1d:db:78:ab:93:85:d2:8e:a6:65:a2:db:d6:b3:80:
b7:7e:8f:54:ac:bf:7b:7a:76:71:4c:d4:e7:8b:00:
81:7c:d6:5d:ff:47:91:60:27:25:b2:10:f9:88:68:
1a:a7:46:cb:79:19:99:e9:52:d4:f2:fa:b0:69:72:
07:28:4b:47:57:bc:e7:32:cf:b2:91:08:28:c8:8e:
e6:93:2a:23:91:5a:5f:1b:48:b1:32:15:c1:f0:56:
7f:25:f7:45:e5:e9:08:06:3c:3c:21:ab:27:85:c1:
c8:af:21:51:57:01:6e:62:40:bf:ab:78:0c:5f:3e:
43:38:80:97:14:c4:f8:48:c5:0e:e6:45:2f:92:51:
b5:a3:d4:aa:6c:14:dc:52:5f:60:30:ad:6a:e8:93:
7a:78:3a:ab:79:8d:c8:70:c3:b0:07:7d:8d:05:60:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:37:15:AA:4E:34:3B:80:60:9B:64:42:97:B7:26:62:D6:E2:04
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9f:17:bf:b9:5a:18:eb:03:4e:c0:4b:3e:81:7e:4d:15:b5:
41:1c:9e:e7:4c:dd:9d:be:b3:ca:3c:bf:df:b0:ed:a4:20:57:
d7:f4:a0:4f:2e:1a:f5:01:43:13:e0:68:bd:a1:8c:4b:a4:2c:
b9:e8:0b:8f:f2:a4:5e:2b:5b:5b:30:20:c4:85:b6:b0:03:76:
2b:13:97:4c:d1:db:23:07:44:e7:48:ff:e4:34:3c:54:15:57:
d8:51:4a:a0:cf:b1:1f:a1:69:d8:fd:79:78:56:11:92:d7:65:
d8:7d:90:ed:d7:f8:a3:02:b1:5d:45:37:4b:0e:ae:91:f0:96:
33:5d:22:e9:96:b7:4e:0c:0f:28:a0:36:69:4a:6d:2f:92:9b:
d3:b2:20:cf:a9:fc:fb:cd:f4:9f:3a:e3:34:6b:06:4a:9c:5d:
1c:ec:1d:8c:71:59:84:ff:f4:61:ec:fe:cd:65:6c:25:ee:f4:
d2:14:98:c2:ec:c3:d6:b0:b6:60:b8:da:33:7e:f5:25:d6:8e:
31:24:15:ff:9f:79:a5:f0:7f:34:bb:43:e6:d2:5d:a4:83:b5:
e5:c2:0b:c8:b2:e8:33:92:c3:45:66:23:fd:8d:8b:bc:dc:f3:
66:91:ea:11:fa:38:72:17:27:ea:95:0f:f7:23:c6:80:99:6a:
f6:25:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:26 2026 by rpki-client