Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: XBNKB4A2U9iNp8eZk7RgbDmNFg+xDOg2IP5F+5kaKVw=
Subject key identifier: 6B:0D:37:1D:AA:F2:91:34:40:E8:5D:79:6E:2B:09:9D:AC:09:F8:A6
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019DA59D3584B4216EBF852CE0428263B093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 016D
Signing time: Sun 19 Apr 2026 12:00:36 +0000
Manifest this update: Sun 19 Apr 2026 12:00:36 +0000
Manifest next update: Mon 20 Apr 2026 12:00:36 +0000
Files and hashes: 1: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (hash: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: MDrMiP4ga1mmdymN6c/RFaczmsTrmY4HAMeocYzorLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:35:84:b4:21:6e:bf:85:2c:e0:42:82:63:b0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Apr 19 12:00:36 2026 GMT
Not After : Apr 20 12:00:36 2026 GMT
Subject: CN=6b0d371daaf2913440e85d796e2b099dac09f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:c3:cd:a8:97:e3:5c:7e:0b:ed:70:21:a4:
d2:df:56:a9:91:80:36:c3:2b:f9:1d:b3:dc:4a:ab:
82:b5:d4:5b:16:dd:23:01:99:bb:74:ee:b0:ef:88:
82:3e:23:1d:17:b1:70:4a:15:92:97:69:95:21:c2:
a9:ac:14:77:d8:50:ba:85:4f:8f:30:fe:69:ff:37:
5a:af:f6:61:20:17:4a:d0:3f:5e:49:c7:64:bc:02:
77:12:53:bd:0c:a4:37:86:60:30:85:84:0d:0b:ef:
bc:ff:c4:26:11:18:47:ed:4c:cd:2c:a4:e6:0a:b9:
a6:22:7a:46:ba:a5:b8:df:80:be:95:51:8c:3a:4d:
f2:ac:1d:7b:1d:8a:b8:2c:0d:1c:29:5f:f4:52:aa:
18:a0:ed:17:57:b0:6a:32:80:74:e0:1c:ba:6d:0d:
c6:22:f6:11:6c:7f:2e:23:2c:e4:05:c3:e4:5e:aa:
68:47:c3:2f:64:fa:71:75:a2:87:3a:3d:b7:f6:06:
9f:6a:9f:4d:15:a9:72:cc:7b:0a:82:d8:d5:ae:19:
e8:d9:ef:aa:10:cb:e5:94:36:80:ae:d3:c7:69:a0:
b9:c7:a0:2f:3b:9e:6e:68:84:63:9f:4a:16:6e:cc:
ae:8b:99:eb:f9:6d:e4:dd:b1:34:73:0f:37:2e:d6:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:37:1D:AA:F2:91:34:40:E8:5D:79:6E:2B:09:9D:AC:09:F8:A6
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e2:96:ea:0a:7b:91:3f:62:f6:51:7a:ee:29:79:6b:62:ae:
cd:7d:04:30:6c:10:fa:c1:2f:9e:c1:f3:70:3e:b3:1a:b2:2d:
73:0f:b2:a2:cf:49:2d:11:4e:47:a1:8a:ea:97:69:6e:dc:dc:
2e:19:8c:c4:bb:54:63:0a:2f:aa:3c:f2:fa:06:8d:cb:8c:1a:
b2:87:92:df:d8:64:71:72:c0:be:5f:a8:22:51:d9:3a:c3:9e:
05:b5:e8:a2:f5:c0:fd:1e:52:ea:c2:6e:13:39:fe:df:b7:a3:
d0:1f:85:8c:2a:d4:3a:da:5c:67:6f:90:12:e3:0f:7f:07:1f:
fe:55:3b:14:ce:9d:b0:69:e6:55:93:80:e5:f5:37:17:f8:7e:
24:f0:66:e0:d2:7f:e0:04:76:4f:23:a7:e8:84:c8:1d:15:6c:
90:84:bb:39:61:ee:e8:eb:e7:ec:5f:be:8d:34:d3:86:0a:e3:
cf:6c:62:dd:97:93:a8:d1:f1:8a:a7:93:93:78:62:ba:58:1e:
61:57:31:6c:22:df:86:b9:20:c4:45:c1:d9:69:d3:3a:d0:c7:
be:3e:4d:32:97:9e:ee:14:f4:91:b3:56:dd:1d:b4:34:e1:34:
f7:34:3f:27:d3:66:2c:ad:15:9f:de:4f:dd:30:1f:eb:50:f2:
6a:64:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:14 2026 by rpki-client