Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: g30oV5lYu8mfro0+5f/WPa0JRtZWmPsAdyHw4BLAOt0=
Subject key identifier: 25:AC:A2:B5:88:DC:AA:84:36:AC:F5:7F:73:DC:0B:B1:3D:AB:26:C1
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019D99D078F089F8A81AD69B3B8484B11B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 06E7
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: NKL4+tIU7p2xEfMUqsyiZKAt9Fe3i6Y5qMRnmzG5J0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:78:f0:89:f8:a8:1a:d6:9b:3b:84:84:b1:1b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=25aca2b588dcaa8436acf57f73dc0bb13dab26c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:a0:85:17:9a:e9:bd:62:91:81:ac:d4:75:
94:3b:c6:12:3c:1a:04:25:f3:75:78:2d:64:97:2d:
73:2f:86:ed:1d:e0:1d:c8:8e:d0:91:c3:55:30:da:
fb:3c:4e:e9:dd:29:fb:b8:5a:5e:1e:5b:6b:8f:fe:
01:e7:e5:59:dc:29:d9:64:f3:5c:0e:81:6e:e4:68:
83:a1:f0:d0:44:2d:df:42:aa:0e:6e:b8:62:bb:64:
12:1b:b4:e9:17:93:99:00:10:09:c6:98:07:b1:71:
c3:bd:f2:08:4b:76:27:34:67:e5:96:9c:19:bd:87:
0d:ba:cb:72:c6:d6:e9:85:7d:fe:e6:2f:29:1c:15:
cd:cb:85:67:a4:b3:8f:27:c7:82:bd:c1:41:e3:6f:
3a:96:ee:1b:ed:33:d0:e7:97:bc:66:6a:32:d7:86:
87:43:19:d7:9a:92:dc:81:48:13:99:fb:41:36:b3:
d1:85:56:48:6c:b5:91:1e:f5:22:4b:be:7a:d9:d9:
19:97:5d:45:ff:ee:c5:d5:75:8f:b3:dd:c4:77:50:
36:ce:f3:67:90:b3:3d:a2:5f:6c:39:8b:70:c4:99:
c8:14:40:82:60:2d:11:0d:89:0d:e0:14:5a:37:26:
3b:52:9a:14:6c:ff:40:68:5d:48:a8:af:c4:10:ca:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:A2:B5:88:DC:AA:84:36:AC:F5:7F:73:DC:0B:B1:3D:AB:26:C1
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9f:32:44:c0:47:d6:a4:8e:ce:98:6e:88:a7:b6:29:ba:49:
ee:4b:c5:9b:eb:e7:bd:22:c1:7c:49:2b:78:91:1f:6c:da:20:
4f:f0:1f:a1:09:0a:79:7a:05:07:09:9b:d7:fa:8e:15:83:a5:
2b:fa:84:58:fd:99:90:88:a1:9f:50:11:d6:94:60:e8:ad:e8:
9a:d0:e3:20:97:c3:c9:ef:3a:63:2e:12:76:4f:a6:88:ef:73:
7d:c9:00:c6:96:b8:df:d2:aa:db:97:15:9b:08:57:19:6c:83:
d5:6b:a6:3f:1f:2a:b2:bc:4f:68:0e:a0:2c:34:6f:67:40:3a:
c3:c4:81:28:ba:67:f9:59:8d:98:17:7e:7b:5a:dc:86:c5:45:
e4:bd:9c:d3:7d:8c:f5:6d:43:33:da:f9:90:f8:c0:55:b3:2e:
b7:9b:93:9a:5c:11:4c:d8:71:1c:0e:7f:06:f5:f5:0f:4f:a4:
ee:eb:4d:2a:16:cc:6b:9b:d2:ad:9c:e7:98:d8:e5:a1:af:f8:
68:42:1e:96:63:f1:0e:cc:07:6b:17:69:af:86:d3:8e:16:d8:
02:f3:47:f4:57:08:41:f5:57:44:79:c2:e6:cd:5c:31:d0:5a:
9f:4f:16:1a:31:88:13:b5:ed:af:94:e1:38:d6:3f:67:5c:20:
7c:6b:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:43 2026 by rpki-client