Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: tMssCcZEniX5ObmvEcAGtCM/6CVILONfnzAj3vzEkis=
Subject key identifier: 37:D7:95:06:B7:41:48:8E:A5:87:EB:D9:40:99:D2:AF:1E:F2:55:77
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019D9BBE98C523B7EC519E9C4DDA664542E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:52 +0000
Manifest this update: Fri 17 Apr 2026 14:00:52 +0000
Manifest next update: Sat 18 Apr 2026 14:00:52 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: 1XkazGB39PnTmVmzhhUvpNPvHR/VlE8UsKYl/nl2W74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:98:c5:23:b7:ec:51:9e:9c:4d:da:66:45:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Apr 17 14:00:52 2026 GMT
Not After : Apr 18 14:00:52 2026 GMT
Subject: CN=37d79506b741488ea587ebd94099d2af1ef25577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:9b:e5:0a:14:08:c5:12:cd:6e:a6:cb:15:
58:d2:19:df:9d:21:41:69:8f:21:7b:be:f7:99:35:
09:02:02:1f:b3:5b:e3:31:5a:6b:c5:36:b4:00:a1:
aa:11:90:51:c8:64:24:08:05:bd:b6:75:e7:e3:77:
7c:c5:7e:1a:b5:f2:22:09:fe:13:b3:db:c9:e0:5c:
bc:1f:16:a4:29:ef:ab:87:3f:93:7f:90:48:d4:b0:
56:5e:da:ca:f3:6b:41:4d:3b:19:c8:7e:b2:b5:c2:
21:0d:c8:f6:05:39:b6:22:4c:5f:d2:17:5d:f9:14:
7e:c4:c7:86:66:c6:48:56:65:aa:a9:67:ee:6e:28:
94:ee:80:dc:91:89:db:55:29:0c:ec:a9:7c:3f:9b:
4f:11:9a:76:8f:99:3c:83:73:75:a5:d9:29:90:51:
c5:a9:13:ca:57:e1:bf:27:fb:45:84:67:31:ce:3d:
20:44:dc:3e:58:e9:5a:13:9f:42:ef:18:3f:5e:3a:
a1:94:1f:be:2e:57:de:d8:2c:c6:ef:e9:43:bd:23:
75:40:a8:7a:57:bf:e6:e2:8c:bf:dd:40:46:bc:af:
a7:27:ee:cb:b1:9e:f3:1e:74:20:07:53:7d:93:38:
35:42:cb:8c:ae:49:af:80:f3:9a:6f:a4:8b:42:4c:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:95:06:B7:41:48:8E:A5:87:EB:D9:40:99:D2:AF:1E:F2:55:77
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:f9:6b:0f:ae:f6:78:e9:e3:b4:0a:cb:24:af:73:cf:88:
9d:ee:0a:e7:46:8d:c4:13:9f:80:41:44:b0:dc:fe:52:22:63:
88:c3:dd:cb:c9:89:af:c8:a9:45:13:fe:ec:d4:ac:16:87:72:
4a:4e:7e:e2:41:29:1b:12:8e:14:aa:f6:85:e0:3e:74:0f:44:
ff:3e:58:f5:91:bc:fb:f7:e5:d3:6d:aa:33:f4:bf:83:b5:54:
b8:16:4c:23:29:5b:17:a6:6b:a7:fa:a7:29:4d:c1:1e:78:d3:
e1:15:84:4b:49:c2:1f:4a:1a:85:e7:79:54:93:64:2d:86:16:
b6:9c:b0:d9:a5:fb:2d:a2:f6:3a:1c:21:48:15:e6:1f:2e:66:
55:b1:40:13:db:d7:86:57:7f:ad:db:a8:2c:7b:bc:43:a4:73:
71:5e:e8:42:6f:08:22:54:82:3b:5d:a2:9f:ea:11:5f:4b:d6:
9e:a9:91:b1:f1:f9:e2:33:9e:5d:be:2e:1f:e7:6b:4e:d0:18:
8b:18:bf:ce:c2:4d:ac:33:4e:a4:64:ea:e3:12:77:22:72:cd:
7b:ed:fc:58:7f:fb:e6:22:0f:4d:16:7d:8f:e4:c0:33:1e:87:
b0:c7:de:4c:22:21:b6:e6:55:57:ba:d3:ee:fd:9e:25:fc:fc:
b5:e8:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:03 2026 by rpki-client