Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: hL9lkfeyOcOIlqiXyolBzlb7T9W7124IR0Z1dU3fkak=
Subject key identifier: 04:02:97:65:A0:AF:51:13:B3:51:19:16:FE:7E:84:36:A5:6B:76:46
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019D9B5172E8F82A8026DEB56A31ACD71AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 1818
Signing time: Fri 17 Apr 2026 12:01:39 +0000
Manifest this update: Fri 17 Apr 2026 12:01:39 +0000
Manifest next update: Sat 18 Apr 2026 12:01:39 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: Nz/ydkxgmwNhvPW8vcvLGTJdM41a55Y8wrlwh8497mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:72:e8:f8:2a:80:26:de:b5:6a:31:ac:d7:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Apr 17 12:01:39 2026 GMT
Not After : Apr 18 12:01:39 2026 GMT
Subject: CN=04029765a0af5113b3511916fe7e8436a56b7646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:f7:a0:0a:ac:42:c9:63:21:7e:16:72:8b:
46:a5:92:29:37:ff:9e:82:0d:ce:e7:51:d3:83:d1:
6c:b4:8d:89:2f:da:17:03:ab:e2:eb:73:0a:89:17:
94:b3:39:ce:f7:13:4d:ee:91:15:f5:b1:49:12:a3:
7c:23:21:28:2b:d1:9b:76:a7:1a:5f:0d:64:14:c8:
0d:08:26:54:23:f7:1d:13:01:39:9c:01:1b:a6:38:
bb:99:d5:2e:b9:ac:dd:5e:ec:98:af:77:69:f7:91:
b6:75:d7:79:55:ee:a6:7a:35:c8:c1:eb:7f:b5:61:
a3:0c:90:02:b3:84:4a:9c:0d:d0:78:30:d6:7c:b2:
15:78:b2:f9:47:c2:ae:37:80:ef:ac:24:2c:90:3f:
58:a3:bd:25:dd:ad:4a:bd:dc:5e:b7:eb:2e:67:9a:
b9:c0:8d:fb:c9:6c:4f:0a:2d:a4:88:09:e2:fa:1e:
e1:02:6c:cd:8c:a0:51:f4:6b:b5:61:7d:9a:42:fd:
46:ae:f7:17:a5:8a:5d:bb:87:ba:0f:69:03:1f:4c:
a9:c7:8e:03:ae:a2:86:a5:06:fa:64:db:13:b4:37:
77:16:e3:b4:49:e2:57:5f:77:4a:77:1c:a3:a2:0a:
a8:9b:96:3f:27:c7:f6:69:dd:16:12:66:86:9c:3a:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:97:65:A0:AF:51:13:B3:51:19:16:FE:7E:84:36:A5:6B:76:46
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:33:de:82:43:76:99:50:2f:51:21:0a:56:59:8b:73:e2:a5:
eb:c8:c0:b3:eb:8b:2f:8a:15:75:9c:d5:2b:07:62:90:4b:64:
f7:40:46:8c:31:bf:58:b8:96:84:37:af:39:37:43:3e:98:21:
b3:93:3d:e9:ed:56:a8:a5:41:45:26:6d:4b:e4:b9:73:3a:6a:
39:b8:42:a3:c8:76:0d:cc:66:28:0a:92:b2:70:17:fa:94:bb:
a0:f0:6d:30:bd:7e:3f:e2:06:41:b6:22:5e:48:be:aa:18:3b:
45:f1:df:e1:e8:7d:ec:4f:c2:e3:3c:60:b1:fc:53:07:5b:eb:
1e:f0:22:9a:2b:88:52:18:44:f6:92:8f:80:86:fc:04:38:d6:
ee:23:8a:b6:b8:03:44:ac:27:97:48:d0:a4:dc:21:0a:88:ba:
99:0e:c9:6c:fb:de:ef:d2:f3:08:3d:e9:31:6f:6f:b0:d5:1a:
d2:1b:46:3b:39:67:d2:b6:a5:09:1f:e3:a6:0b:09:71:96:b0:
1b:b5:11:f9:7e:ef:19:3c:58:9c:1e:b0:0f:32:7b:1c:7f:bb:
9f:3e:9b:7f:af:e6:0e:25:3d:74:f6:95:99:22:2a:d8:cc:04:
62:3d:7e:43:31:89:da:78:59:6a:37:1c:48:28:d3:b1:be:0b:
02:8a:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:48 2026 by rpki-client