Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: 1h+ckik1PNoc/3mmeHfGsNNzU8RFHOHPegVPwr4Yqtc=
Subject key identifier: A1:9C:A3:A3:E5:79:B5:37:5B:B5:45:48:A7:0C:56:6A:55:81:C5:DA
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019D9B8784D8D47477E9F9D4723459A1598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 13:00:43 +0000
Manifest this update: Fri 17 Apr 2026 13:00:43 +0000
Manifest next update: Sat 18 Apr 2026 13:00:43 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: vTkXGPlnCGOx0IESDMnL+IEPXYRcaIyqHRGy6UZInfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:84:d8:d4:74:77:e9:f9:d4:72:34:59:a1:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Apr 17 13:00:43 2026 GMT
Not After : Apr 18 13:00:43 2026 GMT
Subject: CN=a19ca3a3e579b5375bb54548a70c566a5581c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:f0:d4:33:96:0e:4a:3f:2c:6a:1f:6f:60:
cf:40:8a:2a:f0:cc:45:1a:54:e1:8c:80:7d:81:90:
8b:10:0b:47:51:3e:d8:bd:54:d1:ff:32:b5:0a:f5:
95:fa:d0:b3:63:8d:83:8e:a5:ae:2f:c8:24:12:00:
84:d7:6e:8c:94:cb:af:be:12:64:d6:94:be:57:37:
00:2c:83:af:d5:d9:e8:33:6f:e2:49:d1:86:86:31:
8d:06:17:73:3d:6d:0b:0c:19:5c:55:40:95:40:cd:
92:18:47:25:64:03:26:eb:b9:ea:65:71:3f:53:98:
de:1f:6e:ca:74:16:96:cf:02:9b:32:55:e0:58:85:
3e:a5:b2:c4:78:34:f8:8e:51:f4:cc:68:1a:8c:15:
20:35:bb:97:56:f6:02:1f:cd:49:dc:56:45:c7:d7:
68:08:65:cd:8d:0b:a1:88:0a:d7:ef:0f:bf:30:a7:
e6:18:aa:02:98:ed:d4:16:60:62:48:d6:2e:5a:a6:
a1:2f:64:87:25:b9:7e:7b:85:b0:c1:41:07:fb:8a:
86:7b:05:74:c2:48:c9:45:f2:5f:70:b1:69:f0:33:
74:a6:7e:2b:b4:95:89:f3:41:c9:dd:0a:3b:6d:ca:
90:8c:d7:2e:13:17:55:8d:a9:00:87:e5:fd:ed:fe:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:A3:A3:E5:79:B5:37:5B:B5:45:48:A7:0C:56:6A:55:81:C5:DA
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4f:b9:ec:cd:22:b5:fc:5b:cd:d2:35:4d:43:28:42:e8:11:
49:1c:70:74:21:7a:0c:d0:3a:ed:58:78:04:b1:62:0e:16:ef:
a8:c1:b6:41:2c:61:63:f4:b5:31:13:51:16:06:0f:fe:ee:f3:
a7:76:0b:f1:85:c6:7f:b1:8d:b2:8d:1b:20:fd:d0:b2:05:62:
27:97:4a:06:95:3b:97:c1:ea:fa:d0:35:10:40:31:94:80:65:
d1:a8:59:ea:4f:a2:bd:06:9c:e2:bf:92:63:5a:e7:a2:5d:aa:
a1:14:ac:0e:b4:23:c4:5b:95:7b:9e:44:56:6c:f5:f1:ad:1a:
9d:4c:45:d8:8c:40:3a:b6:62:15:d7:b3:cf:8e:01:96:9a:51:
8f:fc:17:56:92:30:5d:10:82:4e:46:45:e8:28:44:ff:49:8d:
3c:96:66:03:6e:ac:ee:80:75:5e:f8:56:73:e4:13:51:21:54:
9e:73:b9:54:bc:c6:95:ff:fc:e1:d9:9b:fc:70:5d:55:f4:1b:
c9:2a:97:83:b9:32:4d:cd:a7:b2:9a:16:42:b0:e0:fb:f1:1d:
83:db:81:3a:b5:a5:53:b5:86:88:09:df:01:72:cb:31:43:6a:
9d:d3:b0:22:95:c9:fb:fb:04:e9:37:8f:df:c9:52:ba:a4:ca:
6b:af:b0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4TY1HR36fnUcjRZoVmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5
NjVkOWYwHhcNMjYwNDE3MTMwMDQzWhcNMjYwNDE4MTMwMDQzWjAzMTEwLwYDVQQD
EyhhMTljYTNhM2U1NzliNTM3NWJiNTQ1NDhhNzBjNTY2YTU1ODFjNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rvw1DOWDko/LGofb2DPQIoq8MxF
GlThjIB9gZCLEAtHUT7YvVTR/zK1CvWV+tCzY42DjqWuL8gkEgCE126MlMuvvhJk
1pS+VzcALIOv1dnoM2/iSdGGhjGNBhdzPW0LDBlcVUCVQM2SGEclZAMm67nqZXE/
U5jeH27KdBaWzwKbMlXgWIU+pbLEeDT4jlH0zGgajBUgNbuXVvYCH81J3FZFx9do
CGXNjQuhiArX7w+/MKfmGKoCmO3UFmBiSNYuWqahL2SHJbl+e4WwwUEH+4qGewV0
wkjJRfJfcLFp8DN0pn4rtJWJ80HJ3Qo7bcqQjNcuExdVjakAh+X97f70fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGco6PlebU3W7VFSKcMVmpVgcXaMB8GA1UdIwQY
MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt
YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj
LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0+57M0i
tfxbzdI1TUMoQugRSRxwdCF6DNA67Vh4BLFiDhbvqMG2QSxhY/S1MRNRFgYP/u7z
p3YL8YXGf7GNso0bIP3QsgViJ5dKBpU7l8Hq+tA1EEAxlIBl0ahZ6k+ivQac4r+S
Y1rnol2qoRSsDrQjxFuVe55EVmz18a0anUxF2IxAOrZiFdezz44BlppRj/wXVpIw
XRCCTkZF6ChE/0mNPJZmA26s7oB1XvhWc+QTUSFUnnO5VLzGlf/84dmb/HBdVfQb
ySqXg7kyTc2nspoWQrDg+/Edg9uBOrWlU7WGiAnfAXLLMUNqndOwIpXJ+/sE6TeP
38lSuqTKa6+wbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:08 2026 by rpki-client