Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: 0xrq4IOoQqFt5KKX308kd4FJnEq9t/kDxDdsq/kEWvo=
Subject key identifier: 7D:66:07:35:2D:B5:C4:63:92:2F:2B:27:7A:37:16:94:E0:74:6C:F4
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019D9A3E7D3A68493C2BE77E2C261693FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 144A
Signing time: Fri 17 Apr 2026 07:01:19 +0000
Manifest this update: Fri 17 Apr 2026 07:01:19 +0000
Manifest next update: Sat 18 Apr 2026 07:01:19 +0000
Files and hashes: 1: iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa (hash: juc+ynuClZ4OorzxxoiPvzF8miwUosVKgq4mBUka3tw=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: WebRkpGZm1XQlYudfWHxO5zdGG7Z/HdpxW/RyiFZiSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7d:3a:68:49:3c:2b:e7:7e:2c:26:16:93:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Apr 17 07:01:19 2026 GMT
Not After : Apr 18 07:01:19 2026 GMT
Subject: CN=7d6607352db5c463922f2b277a371694e0746cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:b9:48:aa:1d:fe:8b:4e:98:64:1e:ff:f6:
c6:d6:a0:29:59:c4:27:6e:1e:6b:18:ae:b3:eb:1e:
a2:a3:5a:d7:44:3d:73:17:ce:98:8f:6e:c4:a2:ae:
ea:a3:44:d3:6e:62:16:1f:46:57:83:53:fb:df:3c:
5f:fe:08:6f:a8:10:ce:e7:9e:46:d2:4e:73:75:52:
16:95:96:d9:27:f3:20:28:8f:52:d8:21:c4:cb:20:
5a:7b:b7:29:fb:52:f4:9c:d2:ef:7e:cf:e5:f3:ee:
a0:78:fc:71:4e:0a:f1:fc:10:12:5c:cd:aa:ed:38:
41:69:94:93:2a:83:1e:b1:84:4a:d6:e6:6c:68:bc:
ca:dd:a0:c4:43:26:12:3c:22:00:83:48:98:3e:3f:
88:fb:91:ab:23:f9:d8:af:28:cc:1b:56:b0:32:c3:
ae:09:5a:c8:60:3d:37:23:89:1c:58:e3:c8:20:4c:
4e:e4:41:29:ee:72:b9:bc:62:e4:91:b6:56:5e:d9:
64:7d:74:e5:21:d3:c2:de:c5:3b:f4:0a:86:c7:49:
af:71:e2:95:8b:29:a5:da:f4:84:07:40:6b:da:c9:
f1:01:e1:3c:19:2d:d0:79:aa:e8:94:b5:68:b6:f3:
0f:27:ec:47:8e:5f:d0:b7:6c:94:ad:24:44:8b:03:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:07:35:2D:B5:C4:63:92:2F:2B:27:7A:37:16:94:E0:74:6C:F4
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9e:ae:e7:46:a6:43:7b:c7:49:f8:18:4c:47:12:3e:40:87:
09:b7:56:a6:a2:d3:aa:e2:e8:ba:fb:85:1f:8e:c9:cc:6d:72:
07:49:54:26:30:86:45:fd:cc:29:83:ca:a1:c1:56:b6:cd:79:
88:e3:77:75:9c:cc:76:bd:03:e7:2c:a8:21:03:9a:27:13:3d:
b1:07:70:e7:bc:ce:c9:ae:93:de:d4:40:5b:e6:7d:ad:af:68:
b8:e3:54:9d:64:77:a6:3c:3f:1d:5d:ed:93:02:27:57:1a:f0:
96:01:3c:e7:1f:db:b4:0d:ef:a1:76:c6:d3:b6:2f:e4:17:6d:
43:6e:77:2d:8e:34:4c:fa:35:3d:7e:d4:fd:a7:56:a9:70:5c:
46:91:9b:09:67:17:a4:c3:4a:3a:a6:0e:b5:34:58:f0:0e:e1:
0f:d4:20:33:54:7f:55:21:bc:57:64:8f:0a:93:2b:2d:db:36:
ff:09:91:c3:9b:1c:8a:21:7a:b3:53:c5:32:8f:d6:06:23:92:
dc:52:ed:4e:da:80:4f:9c:cb:9e:4b:42:e4:7e:de:61:ed:82:
f3:a0:8e:9e:92:82:73:49:77:c2:32:99:8c:fa:87:4e:ba:06:
83:35:bf:48:b8:9a:4b:5e:e4:3c:83:28:2e:d0:4d:43:1b:d1:
cd:19:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:37 2026 by rpki-client