Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: RueusZd0zESqqKmniBy8SFqNJk9+7YmhwCKA5XvRhGA=
Subject key identifier: A3:B4:B1:E9:75:EA:04:D6:52:75:59:9A:72:F2:50:42:A0:4E:F1:72
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019D9A073801D8FC2F8DF05C2AEBBBFE4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 06:00:57 +0000
Manifest this update: Fri 17 Apr 2026 06:00:57 +0000
Manifest next update: Sat 18 Apr 2026 06:00:57 +0000
Files and hashes: 1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=)
2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: IisvFjGa8+kVxSSYMXNfMSFAYnBgT6YacVIgjXf3CqY=)
5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:38:01:d8:fc:2f:8d:f0:5c:2a:eb:bb:fe:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Apr 17 06:00:57 2026 GMT
Not After : Apr 18 06:00:57 2026 GMT
Subject: CN=a3b4b1e975ea04d65275599a72f25042a04ef172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:5b:0b:fa:7b:7c:3d:b2:15:12:40:19:e3:
2d:4e:32:c3:66:5f:12:7c:16:05:20:28:00:ff:ac:
19:af:2c:e7:ce:d4:94:31:1c:85:4b:1b:63:af:ef:
01:4b:00:f0:cc:e3:04:6b:c9:02:d6:1e:cd:10:db:
99:68:af:c1:4d:72:ae:8f:72:e7:44:a1:b0:2c:e6:
6b:b7:b5:6e:10:10:7e:55:03:a3:55:0b:23:5e:f5:
57:a1:71:0a:83:04:a7:3b:af:4b:32:8a:ca:f5:87:
f3:e1:ac:2b:ba:a1:bb:b5:f4:66:41:50:5b:26:47:
db:75:90:3b:a5:db:29:4b:4c:1f:75:11:1b:6e:b8:
f9:ac:a7:b8:b9:26:e5:e1:c1:84:7e:4b:d6:2e:0d:
f7:9c:39:bb:50:d3:ed:69:54:c1:a0:06:a1:a1:0e:
59:b1:bb:2e:2a:57:b5:9c:cb:47:a2:52:ab:c5:99:
33:16:5f:66:f5:39:c1:47:8d:a0:ee:fe:29:88:3f:
d2:02:11:c6:04:39:36:35:97:07:6c:15:1c:cb:18:
4b:84:c9:19:f9:95:cb:f2:5f:8f:ff:13:b4:19:5d:
be:b1:6e:cf:82:3d:d0:29:8b:d9:ee:71:d7:bb:b0:
6e:75:4b:ec:3f:97:06:25:82:ca:37:23:89:30:de:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:B1:E9:75:EA:04:D6:52:75:59:9A:72:F2:50:42:A0:4E:F1:72
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:58:c4:5c:55:45:35:23:7d:48:99:ec:90:52:25:cb:43:79:
40:dd:63:83:65:36:1d:40:9a:20:e6:9c:05:94:15:7f:de:33:
a3:22:42:3f:06:09:21:1d:a3:9d:3a:63:41:db:f4:2e:05:72:
93:35:52:f5:36:12:ab:f7:03:8d:00:1f:e3:8f:cb:3c:3f:cf:
c2:ce:63:97:8d:b9:c0:3a:c8:dd:a7:81:9b:e0:c5:14:86:4d:
f8:d7:a3:b4:a7:53:f1:00:96:e7:85:88:9c:a8:c5:b8:db:6b:
60:92:df:48:ee:c6:d8:cc:b9:bb:d5:39:26:e5:dd:6d:fc:d1:
ef:7d:fd:5e:a7:3d:cc:e6:0c:c2:0b:ae:dd:8d:ae:dc:e6:c7:
4a:43:df:d6:75:57:0e:5b:c3:d3:62:6a:31:68:86:49:56:7e:
d6:f6:4f:89:7f:49:e5:bb:4e:16:e3:df:41:4d:26:c2:16:9c:
67:f9:f0:24:df:21:dd:29:e7:6f:ac:db:c1:3e:c0:2b:eb:db:
5a:61:e8:20:a9:1e:cf:57:8a:38:94:d0:5d:cf:9c:49:1a:38:
80:9a:47:d8:2e:a5:04:75:2f:9d:49:a4:6e:f1:7e:00:97:7f:
c9:b8:d8:c8:59:ec:f3:2c:23:95:30:83:d9:13:14:28:ae:46:
ab:f3:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:00 2026 by rpki-client