Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: hn/kyyBYVNzA7QskPrCaEwd2SxtFDFt/3xO1dDpR+Tc=
Subject key identifier: A8:0F:EC:22:16:BB:05:92:F7:5E:D8:BF:65:72:32:31:4D:26:49:DB
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019DA453E1C6C177C42A3BC0F50230565737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 06:00:53 +0000
Manifest this update: Sun 19 Apr 2026 06:00:53 +0000
Manifest next update: Mon 20 Apr 2026 06:00:53 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: v6umg9FOlTz4/pBxlXw1gCa9+vBUVmnOObzI2bWlPLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e1:c6:c1:77:c4:2a:3b:c0:f5:02:30:56:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Apr 19 06:00:53 2026 GMT
Not After : Apr 20 06:00:53 2026 GMT
Subject: CN=a80fec2216bb0592f75ed8bf657232314d2649db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:00:05:c6:d4:29:6c:13:e4:a6:0d:26:bb:
c2:82:56:a0:39:86:0d:1b:78:22:52:72:dd:e2:f5:
c4:b7:25:77:47:87:7e:a5:5c:6d:cb:35:31:05:00:
39:5b:f9:a7:25:5e:21:4e:d8:93:7f:46:d9:3c:a0:
a6:ba:a7:21:29:aa:e4:3c:6b:4f:91:de:a3:f3:63:
aa:7f:72:0b:24:a0:5c:4c:e7:97:5d:99:58:99:67:
5a:76:8f:3a:43:7f:28:c2:56:78:d4:b4:3d:65:2c:
59:00:a9:21:75:b6:bd:81:83:6d:ff:50:79:09:d8:
6b:64:fe:6e:18:ae:d3:b7:1e:49:93:14:38:11:48:
40:55:cb:e1:eb:da:5c:81:68:de:0f:1d:a8:7e:1c:
b5:b9:1f:f6:8a:06:69:52:31:8c:fb:a4:ce:12:33:
8c:93:a0:df:4a:93:68:90:fb:b0:db:38:45:dc:8d:
dc:e4:27:79:a2:b8:0e:9d:ad:f1:0e:14:1b:d2:ba:
6d:88:06:fd:c2:36:30:1c:7c:28:12:53:56:60:53:
d7:e9:9e:ab:5b:19:73:fe:96:65:11:06:40:5f:b2:
83:98:e4:70:f6:ec:9b:aa:80:0e:f3:e9:2f:3e:69:
ab:7a:2d:b7:df:3d:01:7a:92:7d:70:14:72:e3:a5:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:EC:22:16:BB:05:92:F7:5E:D8:BF:65:72:32:31:4D:26:49:DB
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cd:4f:3f:b0:da:67:9d:3d:13:88:19:eb:51:29:ac:0a:aa:
b4:c5:5a:70:07:30:30:c2:22:f5:a2:13:d0:65:28:1c:e8:2b:
07:34:7e:88:28:1a:45:d8:88:ea:76:a8:f4:88:de:d5:7b:7c:
36:fe:7c:20:e5:13:06:ca:53:82:8a:a6:2d:26:4b:28:94:f9:
5e:32:65:6c:ab:30:63:9b:86:46:1c:34:4e:a7:26:80:4b:2e:
70:ed:f7:cd:c1:b1:6f:07:f1:ae:01:2b:77:d1:62:00:9e:3a:
86:6e:43:90:95:76:fd:89:66:17:47:81:bf:b7:59:56:1a:81:
74:ac:e4:83:ee:1a:75:14:32:5d:23:f0:48:1f:68:fd:97:81:
d2:83:66:5d:be:5c:a9:6a:d5:63:5e:f2:39:e8:46:f2:7b:7f:
73:2b:2f:a0:a0:62:04:69:96:57:5b:e1:20:da:30:8b:33:5a:
1f:16:b9:24:71:64:6b:46:22:fd:cf:56:d7:b1:1c:42:f5:d7:
41:3e:f8:71:03:b3:f4:91:48:6a:67:b2:ec:66:b1:f9:73:d9:
5f:ba:ad:bf:38:a2:ae:55:2c:7b:96:5c:69:ed:81:dc:4d:ca:
97:cd:52:78:14:c0:5c:18:2e:cb:a4:90:df:54:f9:0d:34:66:
f3:06:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:06 2026 by rpki-client