Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: iWE22uifuWo8P1kgAQqzVLOfGL2koi+PcUa0AUVt3aY=
Subject key identifier: AF:D8:58:45:38:07:67:D9:7C:CF:72:35:1E:8A:B8:B4:33:EE:91:28
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 019D9962C29496A70982B445DF1B3953B54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: d33Vn9+M5ZSiIUAmRVaVzJ5/+HNH9Sym7udShUZp+jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c2:94:96:a7:09:82:b4:45:df:1b:39:53:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=afd85845380767d97ccf72351e8ab8b433ee9128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:94:63:34:59:1f:e0:a3:2f:32:18:48:71:
aa:8b:32:71:9c:fd:fb:b9:ef:1a:b2:90:05:58:b4:
6b:5d:22:d6:c0:95:29:9b:78:a8:f6:95:7f:ed:4f:
8f:43:9d:f2:e9:88:71:df:0d:fe:08:26:a3:24:8e:
c8:37:7f:d0:79:a1:0f:ca:06:be:03:3c:3c:db:34:
f1:b1:64:50:b3:e6:eb:ea:03:f7:4d:1f:2d:a0:71:
7f:ba:bb:2c:6d:9b:03:10:7f:dd:20:76:88:f0:c6:
4e:d5:50:85:85:d3:c5:6a:e5:3a:4b:2e:95:15:e0:
84:00:8b:8c:f5:f9:94:0d:50:16:ee:2a:6f:2e:e6:
9c:3b:98:40:70:b5:9d:22:3b:d4:a5:2f:97:05:61:
5c:a8:6e:4e:ce:80:ce:2a:c7:8a:a4:47:ca:85:9e:
a0:6e:dd:7f:80:a0:61:0b:a2:6b:c6:7f:18:a4:4c:
ee:16:2f:7a:41:5d:f2:1f:f3:9c:28:6e:d0:28:bf:
4e:a7:eb:6e:cf:d2:fe:01:f8:e3:ac:85:74:7d:8f:
79:70:66:68:2a:88:65:cc:98:c0:6b:f0:4d:cd:7f:
a0:98:da:11:90:83:76:16:50:2d:91:99:b0:20:c5:
62:4b:38:1d:6b:3c:d0:1a:a9:62:50:e6:9e:8e:59:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:58:45:38:07:67:D9:7C:CF:72:35:1E:8A:B8:B4:33:EE:91:28
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:77:70:f2:f9:6a:23:d9:d1:c5:f6:19:a6:5d:15:50:67:b2:
74:3c:ff:53:72:0d:2e:fa:70:78:c9:e9:43:29:8a:99:b4:f0:
17:e2:d4:77:3a:3e:92:69:76:11:4e:06:23:7f:ad:b9:0f:ac:
da:27:5e:c6:e1:3a:1d:0e:a9:97:bb:74:56:5e:55:e9:f2:84:
eb:bc:16:50:6a:fc:4c:50:78:b2:b2:20:1f:35:c0:73:97:c2:
9f:31:cb:f2:6e:53:55:7c:9e:46:ac:fb:bc:16:25:7b:38:62:
eb:6c:32:8c:d4:01:cd:ed:86:39:a5:fd:9d:88:5e:98:de:02:
bb:23:89:6e:7d:02:1f:8e:b9:24:9e:c9:f0:25:ed:20:cf:ca:
66:b4:cf:88:cb:5f:9f:f1:a9:16:b2:cc:75:58:81:93:54:07:
be:78:dc:b1:a4:92:b8:ca:d3:92:92:f6:95:2c:db:e5:f4:45:
25:0e:59:6e:7f:6e:0e:cd:f7:3f:70:ed:be:6c:90:66:3b:6c:
c8:fe:21:38:31:21:5b:f0:61:27:d5:f3:ae:d0:9b:9e:f6:3b:
6f:b4:af:96:ba:73:11:64:c6:17:b8:46:04:d8:98:c7:95:13:
8b:53:e2:7d:00:91:06:ce:f3:1d:e8:f5:ad:de:78:83:fb:89:
e4:85:05:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYsKUlqcJgrRF3xs5U7VLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk
Y2IwMzQwHhcNMjYwNDE3MDMwMTE5WhcNMjYwNDE4MDMwMTE5WjAzMTEwLwYDVQQD
EyhhZmQ4NTg0NTM4MDc2N2Q5N2NjZjcyMzUxZThhYjhiNDMzZWU5MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gCUYzRZH+CjLzIYSHGqizJxnP37
ue8aspAFWLRrXSLWwJUpm3io9pV/7U+PQ53y6Yhx3w3+CCajJI7IN3/QeaEPyga+
Azw82zTxsWRQs+br6gP3TR8toHF/urssbZsDEH/dIHaI8MZO1VCFhdPFauU6Sy6V
FeCEAIuM9fmUDVAW7ipvLuacO5hAcLWdIjvUpS+XBWFcqG5OzoDOKseKpEfKhZ6g
bt1/gKBhC6Jrxn8YpEzuFi96QV3yH/OcKG7QKL9Op+tuz9L+AfjjrIV0fY95cGZo
KohlzJjAa/BNzX+gmNoRkIN2FlAtkZmwIMViSzgdazzQGqliUOaejlm0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/YWEU4B2fZfM9yNR6KuLQz7pEoMB8GA1UdIwQY
MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt
YWJkNjFhYTgyNDI2LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2
LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqndw8vlq
I9nRxfYZpl0VUGeydDz/U3INLvpweMnpQymKmbTwF+LUdzo+kml2EU4GI3+tuQ+s
2idexuE6HQ6pl7t0Vl5V6fKE67wWUGr8TFB4srIgHzXAc5fCnzHL8m5TVXyeRqz7
vBYlezhi62wyjNQBze2GOaX9nYhemN4CuyOJbn0CH465JJ7J8CXtIM/KZrTPiMtf
n/GpFrLMdViBk1QHvnjcsaSSuMrTkpL2lSzb5fRFJQ5Zbn9uDs33P3DtvmyQZjts
yP4hODEhW/BhJ9XzrtCbnvY7b7SvlrpzEWTGF7hGBNiYx5UTi1PifQCRBs7zHej1
rd54g/uJ5IUFXg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:57 2026 by rpki-client