Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: YVwBkyYpn2eH0Fa8WGySiEXG+y35UjwNb7HhBkcMP5s=
Subject key identifier: D0:A0:BA:1E:54:16:0B:37:0A:8D:7D:40:84:09:14:0D:64:9C:54:E5
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 019D9B87CADA176C001F41E719C505730034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:01:00 +0000
Manifest this update: Fri 17 Apr 2026 13:01:00 +0000
Manifest next update: Sat 18 Apr 2026 13:01:00 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: XI+ruHl2S4YE9UzZa2cAUnoc2jt9A5kkj03L1AI3mfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ca:da:17:6c:00:1f:41:e7:19:c5:05:73:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Apr 17 13:01:00 2026 GMT
Not After : Apr 18 13:01:00 2026 GMT
Subject: CN=d0a0ba1e54160b370a8d7d408409140d649c54e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:37:2e:cc:2b:a1:59:a7:c8:fe:00:2d:7d:
27:a3:b6:ff:a8:81:de:44:63:e7:d6:ea:de:fa:d4:
81:60:20:e7:c4:95:4c:d0:d2:ee:06:e5:9d:05:5d:
26:c8:89:c9:0b:7a:55:f8:cb:38:97:7a:ce:51:74:
93:e7:5f:cb:b1:74:9d:51:49:0a:26:27:98:f4:a8:
53:d1:d6:51:af:0e:c6:32:27:15:98:1d:24:64:32:
25:93:45:f4:4c:4a:8a:c6:dd:b9:75:0c:7f:dc:21:
92:9a:2a:08:08:0a:f6:04:66:78:87:44:f1:b6:2d:
f8:aa:d2:71:24:b8:37:11:25:2c:56:0a:76:e9:c1:
46:53:57:60:c2:bb:da:48:1a:73:c8:98:e4:87:b6:
31:6b:63:72:bd:1d:f9:b5:85:b0:e5:0d:e3:74:5b:
b1:7e:97:e4:de:9d:a6:d0:5b:e8:b8:f0:a1:94:24:
c9:bf:51:57:95:53:cb:d3:72:f0:7c:04:3d:45:57:
e7:1c:42:79:d9:9e:62:f1:4c:9b:8f:b8:72:2f:c4:
ef:65:61:95:bb:a6:a3:6b:11:83:76:a6:64:c6:ee:
8c:65:d0:e8:82:76:fb:3c:d1:69:af:4e:fc:da:96:
03:cf:6a:71:b6:e8:82:d7:8c:66:f6:74:76:eb:04:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A0:BA:1E:54:16:0B:37:0A:8D:7D:40:84:09:14:0D:64:9C:54:E5
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:e7:ec:51:6d:93:10:d5:04:9f:3e:06:0c:b6:31:2d:ba:
69:8b:38:da:a1:76:28:ce:f3:db:a8:b2:40:b7:1f:bf:81:f7:
84:9b:d6:95:89:d9:c3:cb:2b:e8:89:a5:a4:13:cc:9c:57:17:
6e:53:ea:26:10:c8:93:1f:c5:43:87:98:41:aa:0b:d7:6e:29:
ab:9c:d4:01:0a:11:e6:47:6a:24:93:a2:23:12:5e:74:73:5d:
51:1e:cc:52:93:68:a1:7e:2a:1e:79:37:45:21:d2:e2:0c:71:
33:a5:71:f6:99:a6:5d:06:5d:60:9c:07:7d:24:81:86:b2:32:
d2:55:ab:98:1f:a7:79:f2:6f:d0:b3:ee:c9:72:ce:58:7a:e1:
3a:ed:2f:03:bf:96:72:9a:d4:4e:45:00:6c:52:4f:81:b7:ee:
85:b4:ca:60:e1:ab:ca:2d:19:5e:3d:5a:f7:35:46:66:1d:80:
01:ce:5e:f2:b8:b2:63:53:03:6c:0e:07:49:28:8e:ba:75:5e:
51:99:de:c6:46:d3:31:7b:a9:33:02:2b:67:8d:d5:fc:60:e0:
33:63:1d:63:e5:47:f7:85:e2:c9:a2:fd:a8:68:7d:95:88:97:
5a:ad:a7:5d:08:24:e3:ee:42:08:8f:a7:e6:45:70:a6:76:1b:
db:d0:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:27 2026 by rpki-client