Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: HHsbbul7Z2iNBMrT1pislWfYkj3rhKKyU9wfeYm3aBA=
Subject key identifier: C4:DD:81:52:9B:F9:F3:69:45:66:00:8C:C4:1F:B0:CC:B4:BE:E1:23
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019D99628D15EEA830FD2A9BFCF0C7B6AF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 14CE
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: FX4SeiAfVk1oJ3ZX0t___kVvznw.roa (hash: sXBIiV4q77E68XFfHYdEfXRYe3LlOJvfM3L5/gohbgE=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 5fLxBgLcYdyb5ygY+mBfLSfv4m/yfK7vDVH32KBxTrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8d:15:ee:a8:30:fd:2a:9b:fc:f0:c7:b6:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=c4dd81529bf9f3694566008cc41fb0ccb4bee123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:dd:42:f5:5a:97:eb:36:2d:96:57:b9:ed:
dc:41:8a:89:50:8e:ce:5c:63:be:80:2c:ad:29:69:
e3:61:50:a5:e7:b7:78:33:29:d3:87:04:3a:18:27:
82:a3:35:97:1c:09:a0:d9:65:6e:4e:e3:05:d9:ea:
11:94:06:a7:c2:73:bd:d7:61:2f:b9:80:bb:2c:a1:
65:f0:fb:3c:90:a1:5f:db:b8:e5:b3:d4:97:4f:d8:
4f:6a:76:ed:a9:39:66:5f:77:43:17:d0:3c:28:91:
92:fb:e7:c5:98:55:0e:75:c2:72:ee:48:df:9d:fb:
55:f6:42:d4:e8:55:6c:7d:17:ec:05:d1:e2:be:47:
4a:14:00:fe:50:08:14:d3:f7:6b:7f:66:07:ad:1d:
83:98:af:89:56:3d:2f:00:29:f2:77:3f:13:e4:05:
8d:c6:93:cd:d4:9c:0e:2e:93:f9:0e:3e:95:1d:f8:
45:58:7b:a3:59:d5:70:07:49:1a:f9:3c:8c:61:77:
03:53:a9:61:7b:5b:ae:49:92:f8:16:77:df:2b:dc:
f5:9e:8d:bf:88:67:27:02:56:2b:50:67:3a:c9:c7:
4e:f2:95:9f:29:56:94:33:5f:0c:10:e8:a3:ff:41:
ae:2a:ce:17:c0:57:bf:83:c1:fb:8a:d4:78:07:bd:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:81:52:9B:F9:F3:69:45:66:00:8C:C4:1F:B0:CC:B4:BE:E1:23
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:8e:05:5c:02:0b:63:d6:70:4e:6a:1a:c7:67:59:79:a2:
83:c4:7a:5e:e1:06:7b:8b:65:38:62:0c:17:f4:38:84:28:5f:
7e:d3:35:2f:74:56:26:fb:44:85:0e:48:18:ff:93:dd:46:60:
f6:36:87:ae:35:c5:23:34:77:01:ba:ed:1f:11:e4:92:46:b3:
31:c6:9c:c9:46:e0:5b:91:c6:d6:1a:c9:3c:14:2a:6c:62:d5:
35:bf:9b:e4:3c:74:5a:e4:da:b8:a6:6c:79:22:32:74:14:5f:
4f:b9:dc:2f:94:1a:c5:d2:6f:67:96:51:4c:77:fe:70:3c:ef:
3e:fe:a5:b4:1e:d1:a9:65:56:2e:b6:54:9c:60:fb:e6:de:17:
b8:fa:8c:5d:5c:b7:32:6f:7b:58:f4:3c:47:5a:95:6a:e7:79:
cf:b6:7a:33:30:33:2e:88:80:d0:4c:07:57:b7:ed:b2:81:bf:
8b:48:d6:7c:af:08:1d:b5:d6:06:34:e7:77:09:a8:d8:88:89:
16:9b:fd:38:bf:54:2d:5b:bc:81:73:37:ba:06:5d:85:56:ae:
7e:9b:36:8d:e4:7c:f4:f8:ec:72:8f:88:3c:a7:30:59:62:6a:
23:3d:5f:be:42:2d:fd:53:74:ea:16:5e:40:cd:07:07:00:77:
ad:2d:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:20:34 2026 by rpki-client