Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: BTxPx0ubhuYDHHAGUDoZ6dijGPUoZ4+dtMBU80V6+p0=
Subject key identifier: 8A:DB:A5:38:24:E1:19:18:C4:D6:F5:46:48:9D:4B:99:F3:BA:48:70
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019DA4C1F6814CAE306DDD32EBF6E63F4354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:01:08 +0000
Manifest this update: Sun 19 Apr 2026 08:01:08 +0000
Manifest next update: Mon 20 Apr 2026 08:01:08 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: UcPJE6ch2RncwSmvXn5OB4ZKIPtQXR2poX5SFjGy9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:f6:81:4c:ae:30:6d:dd:32:eb:f6:e6:3f:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Apr 19 08:01:08 2026 GMT
Not After : Apr 20 08:01:08 2026 GMT
Subject: CN=8adba53824e11918c4d6f546489d4b99f3ba4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:93:ce:bd:f1:56:82:20:3b:5e:2e:90:8f:
b6:a8:a5:56:7e:61:b0:64:f5:46:aa:fc:7b:f6:7a:
de:16:51:a9:19:52:6b:29:20:e0:0d:41:d8:ab:7a:
e9:24:ec:81:57:f1:b2:e8:3b:81:be:bd:9b:b7:55:
81:97:72:c6:5b:0c:fb:18:06:66:c6:33:f5:9d:b5:
4a:a3:5c:07:11:35:d0:db:dd:3f:36:1a:ec:1b:e6:
d8:1c:99:2b:cb:14:31:9d:6d:73:49:3e:ad:2e:11:
0a:38:23:e0:5a:6e:bc:10:5e:b3:32:3a:87:78:7f:
72:c3:a7:19:b7:d3:f3:b8:d7:22:d4:b1:96:af:ef:
df:81:13:a4:ca:ed:6e:64:1c:dd:25:fe:05:05:63:
3f:74:c0:56:4d:c3:04:a5:1d:32:ab:73:87:c5:6a:
54:97:5d:ab:85:6f:16:6d:fc:54:ba:9a:4c:c8:f2:
53:39:ac:2c:5b:01:13:e5:6f:25:5b:19:ae:ef:7f:
9a:f2:44:bf:c7:8c:c9:2d:07:0c:01:c5:a4:fc:48:
1c:3e:ba:10:91:84:c4:30:8c:a9:c0:4b:76:d8:c0:
80:55:12:f3:08:d9:2e:51:64:79:74:fa:35:3e:8e:
5f:82:03:7e:ef:1d:eb:88:6d:a9:d3:13:8d:da:79:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:A5:38:24:E1:19:18:C4:D6:F5:46:48:9D:4B:99:F3:BA:48:70
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:a6:5f:70:c5:73:b0:68:8b:e8:3d:03:46:08:a9:f9:ce:
ea:b5:91:34:39:3e:6b:6b:5f:10:26:e9:1e:88:e3:36:ed:c7:
fe:f1:7b:2e:4b:86:89:52:30:91:14:84:50:43:23:27:d3:ad:
96:19:09:13:25:2e:ba:a4:73:e3:f2:b4:16:d5:ce:e8:d6:fc:
8e:47:89:9d:81:d1:91:ae:de:aa:eb:75:5b:57:24:1d:71:d8:
ca:98:94:2a:76:1f:c8:5c:39:fa:aa:69:fd:7d:d8:38:5c:33:
75:f5:d1:22:5e:e6:65:c1:0b:d8:4c:7c:e6:1e:ed:f0:e7:be:
34:38:34:fe:25:f9:ff:fc:7b:80:1d:57:ef:92:b2:a2:70:70:
2a:d9:3d:d6:39:38:5c:5c:c0:de:78:0b:26:74:ce:0e:e6:f8:
55:ca:17:65:f5:af:8d:5e:b3:75:ba:68:0d:0a:69:75:2e:d7:
cd:43:1b:a7:6c:17:3f:bf:05:e2:3b:df:62:f9:a2:1c:43:47:
bc:ae:a8:a1:78:6a:15:54:14:70:a3:02:bb:98:ef:4e:1c:2d:
b9:88:34:a7:0f:52:aa:db:e3:96:8c:c0:3f:20:3f:1b:8d:9e:
0e:17:6d:62:05:93:70:83:ae:3a:f9:77:4d:ad:82:2e:cd:70:
34:87:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:40 2026 by rpki-client