Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: zhYl6cuYgF7oeGfZtU7meOL6bvEfCe/aPXIjyY85W0c=
Subject key identifier: 65:2E:CC:59:2D:6C:50:FA:3E:7F:5E:7E:3E:96:F4:41:60:0D:0A:5F
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019D9998D48D4CBC662AC53D4CFE7E9FAD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: mcRk7if8dMCuqAh7NWQMgpUggiI9egM0tMY6u8PwzMQ=)
3: WONBLwBKpxNMRzip371kxfQVjeI.asa (hash: GffsttYQI233beYeqBwhQ6dApHBHZjHU0cBZXCSiX1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d4:8d:4c:bc:66:2a:c5:3d:4c:fe:7e:9f:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=652ecc592d6c50fa3e7f5e7e3e96f441600d0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:12:9c:6b:36:2c:d7:63:80:b5:04:e5:32:
94:5d:ba:dc:0f:2a:84:d8:bb:66:5f:a2:a0:30:6b:
2d:f2:b4:96:1b:32:a3:ee:5d:a0:0c:56:c1:24:17:
d5:38:12:e5:6f:d2:9b:07:99:d3:fe:87:4e:05:f0:
26:80:9f:9f:9a:65:b2:7f:50:36:a6:19:25:25:59:
1c:de:1a:cb:41:10:5d:22:fe:a5:1f:f9:e9:b7:56:
5e:f2:d1:23:5a:69:a2:be:d5:ea:3b:fd:9a:82:b0:
1d:44:f3:3d:a9:35:90:70:e4:da:f6:1a:15:ce:ac:
e8:85:73:78:34:e3:d4:df:f0:b5:a8:28:5f:03:2e:
5f:4b:e2:76:6a:80:e8:fe:e4:ed:71:5b:c9:d0:7a:
51:3c:2f:ca:d7:18:d6:0c:d3:ac:59:04:a8:bb:91:
ae:51:3b:f6:66:4e:c9:8a:85:9f:ef:b5:05:47:c0:
95:1f:ea:ee:6a:b4:21:a3:89:70:99:7e:ac:1e:8c:
d4:bd:8f:a9:58:66:4c:5c:09:68:68:4b:76:ce:b3:
81:e3:27:da:f3:6d:e3:cd:b7:d1:62:69:df:6a:2b:
9e:9c:f2:aa:d6:70:21:2e:20:0d:1e:d1:32:e5:aa:
b5:4f:ae:06:38:45:f0:d4:49:c8:8f:aa:f6:2d:35:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:CC:59:2D:6C:50:FA:3E:7F:5E:7E:3E:96:F4:41:60:0D:0A:5F
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:b7:9e:4e:7f:f2:c3:40:cd:42:bc:e5:aa:c3:08:c2:62:
5d:f0:9a:02:64:13:60:57:72:ea:b2:63:da:86:c3:a9:a2:b3:
36:9c:f8:70:77:b0:6c:55:c0:0c:13:dd:a7:18:d8:67:9d:d9:
21:e1:4e:47:26:d8:d5:4f:4e:88:51:3f:78:b9:08:42:68:04:
3a:48:37:77:34:1e:7d:97:7c:a0:33:55:17:d9:97:fa:53:06:
7e:38:7b:53:80:c0:c9:e9:12:4a:72:3d:3f:23:83:5c:2a:ae:
e1:c9:5a:ca:d0:c7:89:43:1c:3a:94:f7:1e:c6:3c:8f:4a:5d:
51:8c:cf:1a:e0:18:1a:7b:f3:eb:3f:76:32:17:83:f7:a1:e9:
f4:a4:25:67:8f:46:52:70:06:82:78:dd:69:f3:65:d8:2d:6f:
93:0b:93:8d:22:7a:dc:74:e9:e6:5e:23:59:90:78:bd:b6:29:
ea:c4:df:ef:57:23:78:e2:4a:90:b1:f2:56:f3:bf:23:2e:6c:
95:de:50:f3:33:92:5a:51:85:0a:d9:30:af:28:9b:39:29:a5:
2e:33:97:4a:5f:27:02:a1:3c:0d:de:00:c8:bd:46:9b:7b:84:
b3:16:fd:28:93:57:d0:4c:27:e5:f9:18:32:2a:91:3f:50:b3:
44:c8:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:36 2026 by rpki-client