Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: LuzQNBLeh4uHF0r3Ty8k9MZBBsYJ9QsVDw72KRh+MOA=
Subject key identifier: 10:3A:16:BF:7E:42:14:8C:72:43:77:CE:17:D9:E6:69:B7:A8:16:65
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 019D9B19585A0F14D683FF93429B693098A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:00:22 +0000
Manifest this update: Fri 17 Apr 2026 11:00:22 +0000
Manifest next update: Sat 18 Apr 2026 11:00:22 +0000
Files and hashes: 1: 0_bDufbDC749XM6FeQZedL-kk0k.roa (hash: g27LLjmMTEPKwmdpRxcxsvyxvSaT85tGJMHzBXS0Bvg=)
2: Et_E8L3JnyGGi7EORm0tAklWkLY.roa (hash: SpPpnnc6LbJxToXLzGDYpTEBRnHYaBTsGIvm0GxadyE=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: TUx/KNhRTk+EGGTgw/Un4TMmY2rlk3CYiWahpqjN5aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:58:5a:0f:14:d6:83:ff:93:42:9b:69:30:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Apr 17 11:00:22 2026 GMT
Not After : Apr 18 11:00:22 2026 GMT
Subject: CN=103a16bf7e42148c724377ce17d9e669b7a81665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:c1:02:88:90:bd:58:a5:ea:17:bd:0f:1f:
2f:1a:7c:e5:e0:23:10:f6:06:f4:ac:85:18:8f:93:
55:37:33:4d:2b:84:c1:53:e2:2d:8f:36:3d:d2:ee:
23:e4:c5:ff:5e:2d:c8:80:c8:9e:6b:5d:ac:72:13:
d0:f5:bb:7d:09:6d:67:8f:23:f7:47:e2:07:0e:39:
e2:9e:b6:6b:51:45:8e:08:a1:e3:d9:6f:80:bc:ac:
94:2d:84:85:cd:e3:68:4b:ed:1b:1a:45:8c:41:6b:
11:e4:50:10:34:30:1d:01:56:9a:bf:b6:c0:de:a3:
8c:9e:9b:28:00:e1:86:93:c4:29:6d:9c:b8:20:db:
9d:95:4c:86:d0:1b:a1:b2:bc:70:be:bb:6d:2a:ea:
60:84:c2:c9:80:47:37:fc:b1:e5:77:1e:88:66:ca:
ce:bc:48:43:65:5c:1f:42:16:e7:22:e2:e6:bc:78:
f8:46:1e:60:07:1f:6c:88:71:0f:b1:e0:13:18:58:
a0:38:5d:f0:f0:f7:14:05:d0:f5:8e:5d:6e:d0:db:
04:7c:4b:60:91:58:be:9a:ab:eb:fe:2f:df:ba:d8:
c9:b4:a3:98:05:9a:0c:11:26:19:c1:5c:88:3b:6c:
ad:6b:b8:46:32:61:9a:c2:70:57:4c:ed:af:4c:e9:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:16:BF:7E:42:14:8C:72:43:77:CE:17:D9:E6:69:B7:A8:16:65
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:a3:2a:65:61:c0:54:bf:b1:a2:54:c0:2f:c8:2f:5f:c4:
80:88:2f:03:4d:e1:d5:a5:30:bd:15:12:20:f6:50:a9:f9:64:
fc:eb:31:89:b0:2e:93:ed:ad:bb:ca:d1:a3:92:3a:e7:7e:dd:
dd:03:e4:76:b5:13:79:7c:32:d6:70:cc:ee:1c:80:b8:17:93:
18:58:51:3b:cf:a7:7a:dd:e1:ea:c7:1f:18:0f:84:64:28:a1:
ee:82:af:20:8a:4d:df:5b:a2:1f:96:c5:57:ad:a4:df:07:80:
92:b4:15:a7:c0:77:44:a6:57:09:96:a2:91:c5:03:64:a5:7e:
42:d1:76:c7:c9:55:91:a2:22:e0:5f:7d:e6:75:69:d8:40:60:
e6:ea:30:6d:ac:28:01:2a:3e:d2:f5:0c:60:61:6b:00:40:13:
5e:b7:b7:f9:78:15:bd:da:78:f0:4e:70:9f:a9:e0:94:46:20:
3a:25:c4:dc:96:9b:97:5a:3e:79:3f:7f:fa:90:e4:5e:5d:86:
a7:55:80:56:74:4b:bf:cf:46:0d:39:0b:72:ab:b9:01:44:de:
6d:08:40:ee:0e:89:54:a8:52:d1:bd:28:27:d0:9a:6d:fb:4d:
14:e9:70:99:d2:b5:15:de:70:36:2f:e0:5c:69:b7:6d:e9:25:
b5:5f:69:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGVhaDxTWg/+TQptpMJiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGQ2Y2E5NWUyNzcwZjU1MzQwZDkwOWVjN2M5N2VlY2Ez
ZmUyMGUwHhcNMjYwNDE3MTEwMDIyWhcNMjYwNDE4MTEwMDIyWjAzMTEwLwYDVQQD
EygxMDNhMTZiZjdlNDIxNDhjNzI0Mzc3Y2UxN2Q5ZTY2OWI3YTgxNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+3BAoiQvVil6he9Dx8vGnzl4CMQ
9gb0rIUYj5NVNzNNK4TBU+ItjzY90u4j5MX/Xi3IgMiea12schPQ9bt9CW1njyP3
R+IHDjninrZrUUWOCKHj2W+AvKyULYSFzeNoS+0bGkWMQWsR5FAQNDAdAVaav7bA
3qOMnpsoAOGGk8QpbZy4INudlUyG0BuhsrxwvrttKupghMLJgEc3/LHldx6IZsrO
vEhDZVwfQhbnIuLmvHj4Rh5gBx9siHEPseATGFigOF3w8PcUBdD1jl1u0NsEfEtg
kVi+mqvr/i/futjJtKOYBZoMESYZwVyIO2yta7hGMmGawnBXTO2vTOnDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA6Fr9+QhSMckN3zhfZ5mm3qBZlMB8GA1UdIwQY
MBaAFLYNbKleJ3D1U0DZCex8l+7KP+IOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUt
MjM4NDdhNDBkOWU0LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUtMjM4NDdhNDBkOWU0
LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZSjKmVh
wFS/saJUwC/IL1/EgIgvA03h1aUwvRUSIPZQqflk/OsxibAuk+2tu8rRo5I6537d
3QPkdrUTeXwy1nDM7hyAuBeTGFhRO8+net3h6scfGA+EZCih7oKvIIpN31uiH5bF
V62k3weAkrQVp8B3RKZXCZaikcUDZKV+QtF2x8lVkaIi4F995nVp2EBg5uowbawo
ASo+0vUMYGFrAEATXre3+XgVvdp48E5wn6nglEYgOiXE3Jabl1o+eT9/+pDkXl2G
p1WAVnRLv89GDTkLcqu5AUTebQhA7g6JVKhS0b0oJ9CabftNFOlwmdK1Fd5wNi/g
XGm3bekltV9p0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:26 2026 by rpki-client