Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: hUNWEp+8kxfvjpHv8T9+BE0Q3uh3T9lafSMwehhkuNY=
Subject key identifier: EF:C1:D8:A9:6E:00:98:C7:FA:59:D5:06:CD:E8:87:FB:25:BF:0D:50
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019D99D0A602844DA59744DC2120BE14785F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 05:01:21 +0000
Manifest this update: Fri 17 Apr 2026 05:01:21 +0000
Manifest next update: Sat 18 Apr 2026 05:01:21 +0000
Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: Rx8/oZSnlmGsYVHo+YqJfQOvVaFXGalHPqDZmfvp5fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a6:02:84:4d:a5:97:44:dc:21:20:be:14:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Apr 17 05:01:21 2026 GMT
Not After : Apr 18 05:01:21 2026 GMT
Subject: CN=efc1d8a96e0098c7fa59d506cde887fb25bf0d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:cb:d1:e6:8f:67:7e:3d:e5:62:a5:8b:a2:
77:37:de:6f:c5:71:8e:04:33:78:9c:ae:89:54:41:
ae:82:97:81:6f:2c:44:8f:cf:a5:57:48:3c:a4:24:
34:d7:f4:89:e4:15:43:dd:a1:d2:e2:84:54:ca:dd:
03:50:d7:4e:a8:d7:e7:0f:84:2d:fd:b0:67:b1:40:
63:99:73:e7:ba:a8:bd:28:14:99:60:f3:9d:e9:5b:
e2:be:a2:0b:27:b0:91:9c:37:05:6f:41:76:02:1e:
c1:da:2f:e2:86:79:73:dc:15:0a:4e:de:bb:3b:f1:
95:fb:40:39:e4:9a:b1:21:dd:e4:14:28:3d:38:d7:
f1:de:07:b1:a0:db:6c:3d:25:4d:7e:a3:10:26:cb:
00:d4:a9:b7:eb:6f:75:eb:e0:d2:b0:ba:96:f6:1c:
3f:4a:5b:81:7b:bf:5c:28:61:1a:14:3a:c0:aa:55:
55:6f:bd:09:18:ce:d0:e6:0a:09:df:34:3f:a3:99:
e7:84:8d:6f:a5:78:d6:08:0e:9e:59:c8:18:0b:11:
db:84:5d:5f:35:d2:73:3c:59:b5:d3:4f:57:0b:40:
3f:85:5a:94:c8:6c:44:6a:e2:52:53:45:b0:db:ae:
01:39:50:2d:ea:01:89:d9:6e:e2:38:3f:3e:6a:fb:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C1:D8:A9:6E:00:98:C7:FA:59:D5:06:CD:E8:87:FB:25:BF:0D:50
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:3f:a4:d5:f0:14:3b:de:72:c9:94:d8:c3:45:2c:36:f6:
6e:21:b6:99:6c:01:1b:d4:59:8a:51:9a:82:4f:93:b2:ad:85:
69:01:99:50:06:ab:3c:a6:8d:d5:71:41:86:5d:e3:3b:06:44:
ea:9a:5a:2f:4c:47:c0:87:db:3f:51:60:d3:cb:59:92:7d:91:
9e:20:af:87:88:50:46:8b:5d:3d:9f:20:c6:92:f5:46:a9:57:
94:53:64:69:60:08:e6:72:ee:25:67:c9:0e:11:0d:e8:4a:6c:
ec:49:89:06:f4:54:79:56:2e:31:dc:1b:aa:f0:01:1c:d5:61:
7e:86:6b:0d:5a:ae:83:ea:e1:cf:cf:ae:17:11:be:80:9c:a9:
43:21:be:51:67:fc:9a:ce:d0:ab:6f:39:e9:51:1d:a8:c7:93:
8e:51:ca:54:06:a2:89:66:4f:35:11:54:40:ea:a1:fd:7f:2d:
84:47:0e:3d:90:f5:48:fd:9a:30:2c:43:d4:f3:2e:92:b3:95:
0c:5d:b1:f5:32:07:30:a0:96:01:44:1b:8c:8e:9c:e1:39:cd:
a9:a3:8b:a3:e2:27:80:a0:ec:a5:fe:fa:10:d5:17:92:bf:c5:
ae:4f:c7:16:d5:18:76:cf:d6:70:31:c8:e2:ec:4f:46:9e:4d:
09:b3:f8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0KYChE2ll0TcISC+FHhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4
MDhmYjUwHhcNMjYwNDE3MDUwMTIxWhcNMjYwNDE4MDUwMTIxWjAzMTEwLwYDVQQD
EyhlZmMxZDhhOTZlMDA5OGM3ZmE1OWQ1MDZjZGU4ODdmYjI1YmYwZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfHL0eaPZ3495WKli6J3N95vxXGO
BDN4nK6JVEGugpeBbyxEj8+lV0g8pCQ01/SJ5BVD3aHS4oRUyt0DUNdOqNfnD4Qt
/bBnsUBjmXPnuqi9KBSZYPOd6VvivqILJ7CRnDcFb0F2Ah7B2i/ihnlz3BUKTt67
O/GV+0A55JqxId3kFCg9ONfx3gexoNtsPSVNfqMQJssA1Km362916+DSsLqW9hw/
SluBe79cKGEaFDrAqlVVb70JGM7Q5goJ3zQ/o5nnhI1vpXjWCA6eWcgYCxHbhF1f
NdJzPFm1009XC0A/hVqUyGxEauJSU0Ww264BOVAt6gGJ2W7iOD8+avts5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/B2KluAJjH+lnVBs3oh/slvw1QMB8GA1UdIwQY
MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFU/pNXw
FDvecsmU2MNFLDb2biG2mWwBG9RZilGagk+Tsq2FaQGZUAarPKaN1XFBhl3jOwZE
6ppaL0xHwIfbP1Fg08tZkn2RniCvh4hQRotdPZ8gxpL1RqlXlFNkaWAI5nLuJWfJ
DhEN6Eps7EmJBvRUeVYuMdwbqvABHNVhfoZrDVqug+rhz8+uFxG+gJypQyG+UWf8
ms7Qq2856VEdqMeTjlHKVAaiiWZPNRFUQOqh/X8thEcOPZD1SP2aMCxD1PMukrOV
DF2x9TIHMKCWAUQbjI6c4TnNqaOLo+IngKDspf76ENUXkr/Frk/HFtUYds/WcDHI
4uxPRp5NCbP4Mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:31 2026 by rpki-client