
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: 1lZY4BsJIHeMtxHBPm5DZKpUy9fxeQhcEmUuJOo3If8=
Subject key identifier: B7:DD:3B:D4:40:96:1E:E2:35:30:BC:67:D9:E6:49:0A:95:2C:A0:E0
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 019DA4F861BD5FD170674F73BF7F5EDC7DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 13E3
Signing time: Sun 19 Apr 2026 09:00:34 +0000
Manifest this update: Sun 19 Apr 2026 09:00:34 +0000
Manifest next update: Mon 20 Apr 2026 09:00:34 +0000
Files and hashes: 1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: K9PCRprpH9pyF3A4fhmJFYX77Yyc+FIu7PojKFR8QSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:61:bd:5f:d1:70:67:4f:73:bf:7f:5e:dc:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Apr 19 09:00:34 2026 GMT
Not After : Apr 20 09:00:34 2026 GMT
Subject: CN=b7dd3bd440961ee23530bc67d9e6490a952ca0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:ff:dd:c8:69:c8:ae:ee:da:3e:fa:ec:e0:
79:4a:07:1f:cf:06:d4:d4:96:84:98:81:7c:dd:eb:
79:64:99:39:36:3a:a0:eb:0d:b5:4a:4b:bb:77:0a:
41:da:ae:21:25:08:7d:b2:4e:e2:2f:cc:e7:19:20:
62:30:cf:fc:5f:93:03:e5:73:d2:3a:ae:2c:7c:61:
00:1a:1e:61:14:ae:9a:b4:4b:06:38:79:39:b4:af:
bf:21:b2:c4:69:34:7b:2b:68:cb:80:ba:87:62:af:
a1:27:c4:33:53:96:e6:4f:71:bf:93:64:34:ae:65:
f8:ff:c8:b8:f4:6d:04:9b:3c:a7:33:c2:1b:f9:8c:
e0:3f:5e:ce:64:70:eb:e4:03:2a:6d:eb:32:4d:dc:
42:61:d2:64:98:f9:fa:48:e8:49:33:7f:40:b9:93:
cf:06:11:19:74:1d:ae:ae:e9:25:f7:09:89:d6:6d:
78:4d:05:4f:53:0d:b4:95:be:96:53:8b:7e:f5:21:
c0:52:21:37:a5:e0:c8:e2:e5:72:0b:9f:a9:39:b2:
7a:25:94:6b:f7:c2:57:9d:df:55:ea:75:61:94:41:
37:19:f7:9f:c3:00:d8:c3:31:ec:c2:3b:d7:d8:d8:
d2:51:da:58:a4:33:06:bf:6c:96:ea:6d:72:17:2e:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:3B:D4:40:96:1E:E2:35:30:BC:67:D9:E6:49:0A:95:2C:A0:E0
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:ad:02:40:f6:09:4a:14:57:64:33:7b:26:5d:df:41:e5:
66:9e:b2:6a:a9:35:74:65:02:c3:fa:68:45:e3:b5:41:4d:1b:
a4:af:13:1b:b9:18:f3:af:d3:73:7e:56:8e:f9:0a:8b:79:62:
f2:48:74:e6:77:9b:e5:f0:83:de:89:76:67:06:b7:53:a5:12:
2c:df:61:2c:50:40:6e:a0:79:06:df:ef:db:70:58:6c:53:8b:
84:c4:fb:fc:23:7c:ab:a2:c0:5e:a0:e9:06:ee:4b:b8:77:35:
09:46:5d:1a:96:71:65:2f:07:07:68:bb:cb:2e:3b:85:14:8d:
24:76:87:1c:9e:f1:12:6a:3c:f9:75:f2:87:67:7b:8a:be:59:
9c:a0:a8:33:26:4a:5e:7c:57:cc:86:b3:80:a6:d9:70:ae:be:
73:d1:2d:00:bd:d1:b8:72:d5:48:42:42:e9:9a:32:19:57:32:
a2:41:60:ad:4f:66:dd:3c:16:56:ee:8c:60:89:6f:5f:02:6a:
cd:fb:69:a9:fa:7b:14:5a:ea:e4:74:04:a6:bd:32:10:ca:40:
2f:4e:a3:71:51:0e:0c:50:87:10:a1:d1:4d:bb:de:12:bf:5b:
40:9f:61:ed:ea:9d:e3:e6:fb:b2:e8:cb:35:60:a7:61:d6:2b:
d4:86:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:04 2026 by rpki-client