Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: 68et4gKU1C6KyJKiQQMhBqwp/aAxXMFHbMoqE0JWxVA=
Subject key identifier: 89:1D:93:4D:02:EA:3A:88:27:99:94:80:2C:68:03:CC:71:3F:EA:65
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019D9962C4332DD4F28F6996781DBD90440B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 0A73
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: COE1l5AcJpUIj8VESfwwNIX_aqE.roa (hash: Xk4fQMZM2kqvaeEiNYmxxopzI51Y0bhYgcMl+wQt2Ak=)
2: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: cxWC7qEsDJkFJwT499wKuYT4g1ri2OnMhSjYfIgAGu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c4:33:2d:d4:f2:8f:69:96:78:1d:bd:90:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=891d934d02ea3a88279994802c6803cc713fea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:eb:8d:76:58:84:85:cd:20:cc:0b:4c:98:
f3:ca:02:34:36:37:6d:f1:06:10:f2:4f:d9:96:65:
db:23:48:8f:e9:e7:17:88:ee:f2:00:80:12:3b:41:
f9:1b:dd:01:ee:60:bc:f5:e7:13:64:93:e2:46:e4:
22:c4:7a:c3:77:79:6f:0c:b6:02:47:b5:0c:00:f5:
e2:e2:f0:e6:3d:9e:62:29:cc:18:3e:73:e9:93:7e:
bc:4a:97:60:fe:29:90:a7:18:f0:32:0a:fe:94:22:
85:67:26:33:4e:15:72:db:df:7c:c9:47:b4:b9:7e:
81:4c:96:5e:97:61:0e:bc:41:da:f9:53:9e:aa:48:
d7:a9:89:f6:92:c4:ef:c9:39:d3:f9:8f:b4:29:7b:
67:5f:60:87:05:dd:ae:73:02:90:92:d2:95:c0:5c:
74:60:45:b1:db:c2:25:fe:33:13:47:e7:26:90:54:
22:96:ac:85:2c:2c:d7:7b:3c:4d:d7:d3:ef:ce:51:
73:31:10:c1:91:d2:c8:c7:7f:9b:4b:65:1b:00:69:
7a:ef:a1:2e:46:b8:8b:07:0c:68:86:07:b7:1a:0a:
c5:70:9f:ad:21:d4:6f:92:3d:46:1a:4c:f1:31:1a:
8e:cd:44:31:d0:d6:73:0a:48:15:a5:60:28:3c:cf:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:93:4D:02:EA:3A:88:27:99:94:80:2C:68:03:CC:71:3F:EA:65
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:a4:d8:82:3c:cf:8e:f7:bb:cf:37:16:e9:fc:6e:b8:32:
27:25:15:ed:a6:02:fd:d5:37:0e:3a:40:80:7a:46:ed:51:f3:
ce:81:22:3b:33:1a:c9:fe:d2:f9:ea:da:6c:83:68:82:10:92:
61:f4:61:5d:3e:06:1a:71:7f:ce:64:42:34:45:49:9b:b7:ef:
5f:65:71:85:e5:7c:b3:97:21:c3:2c:d1:2c:05:e3:84:f0:f4:
6b:c6:f1:59:8d:ac:d0:55:9b:d3:b3:27:67:18:d7:0b:41:57:
6a:50:dd:9f:93:0d:79:e3:5b:88:02:a7:68:78:67:95:c2:2b:
c5:5d:fe:9b:c8:af:17:ca:12:d5:f8:11:68:dd:94:46:2c:0e:
f9:22:83:8c:1e:d0:e0:19:9c:3c:c0:16:a3:d0:2e:f9:0c:07:
82:bb:f2:ca:97:59:58:a2:a7:2e:87:00:fe:94:1f:78:21:13:
5d:3e:e8:94:10:d9:76:c8:28:5d:83:15:0d:40:49:6f:48:7f:
39:c8:29:72:dc:f2:31:23:26:f5:1e:73:96:91:00:0d:28:e0:
82:34:1a:0b:31:7d:ec:a3:c2:2e:20:3c:7f:30:1f:0e:b2:bd:
7f:d8:10:17:8a:c6:47:fc:45:b3:ec:d4:43:e3:fe:be:0e:e2:
fd:71:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:20 2026 by rpki-client