
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: lxBe/zMRrK7BsyaDmZrCUMr+BK9DhrzlMii9m3PRcBw=
Subject key identifier: 7F:2A:48:63:9E:53:58:41:13:8E:DE:15:B2:BC:AE:56:9C:FB:37:3C
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 019D98F46EDFFCE05A47C2FEAC4225A4834F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: Hr++Mm/gv59tIhvSmb2kuR5+ZvnhPZ9YC+Yu2R4anqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6e:df:fc:e0:5a:47:c2:fe:ac:42:25:a4:83:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=7f2a48639e535841138ede15b2bcae569cfb373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:69:a3:81:3a:fb:ab:a6:1c:e9:f7:3c:24:
ab:9b:77:36:ec:18:00:84:46:8e:94:47:bd:18:e3:
0d:01:8e:08:8e:c5:48:d2:48:9d:55:b1:20:57:ff:
c1:18:d7:61:71:f6:82:5b:24:87:66:98:3a:77:7f:
0b:be:ae:c5:8e:11:b3:a2:f3:b9:54:e6:8e:b8:20:
3a:89:a7:dc:24:e1:f0:4e:d8:30:9d:e6:47:dd:e6:
1d:cf:60:9f:18:c2:4b:dd:51:2c:7c:7e:60:10:5a:
e7:39:e0:2e:97:14:29:83:78:fb:fd:10:ed:07:a7:
b7:e9:fc:2f:c8:c3:95:c4:f6:85:55:7e:59:1b:80:
79:9a:e8:a4:58:37:cb:dc:47:8d:88:2b:e4:6a:05:
29:89:f4:98:bf:19:b3:b1:b9:f5:ae:24:f1:2e:3e:
e6:ac:b8:5f:93:68:4c:70:0d:9f:6b:0e:38:f0:b7:
40:4f:1b:45:23:3d:8e:ea:e6:d0:fd:c6:51:6e:a8:
1d:3a:78:f3:5f:18:30:48:7a:9d:fd:97:89:a5:40:
fe:7c:59:24:f9:77:45:e9:33:67:ab:4f:8a:93:13:
60:47:5c:5d:24:1b:8b:5a:ba:9a:bb:ce:96:5b:f9:
88:93:74:5d:4d:d1:6c:00:6e:fa:bf:fc:48:f0:56:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:48:63:9E:53:58:41:13:8E:DE:15:B2:BC:AE:56:9C:FB:37:3C
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:d9:25:ac:e8:7a:a3:52:ae:1b:bf:94:75:df:88:8c:91:
c0:c5:e3:3a:0c:a4:7c:68:51:56:1f:2f:f6:d8:21:cd:51:60:
3c:86:52:f6:07:48:56:6b:e3:70:1c:0e:06:e8:e5:1c:53:20:
ed:99:2d:e1:d9:ee:d8:2c:99:9c:0e:66:6b:70:56:a1:05:8b:
1f:dc:96:7a:1c:42:7f:f6:ed:c2:9c:cc:7d:af:8d:07:d5:47:
31:c2:a2:b4:57:82:74:ba:4a:52:77:4f:53:63:07:b6:4d:de:
f6:0a:b7:4c:d9:74:25:52:5a:32:f1:a7:b1:8b:61:fe:a8:d1:
88:75:85:10:6d:8e:ec:9f:fe:9f:38:68:43:02:80:2c:17:26:
a0:a5:24:57:45:9f:85:6e:6a:08:ab:4c:4d:43:8d:ad:6f:1e:
11:cb:4e:48:87:79:de:66:d4:0e:ca:f5:3f:2d:3f:64:72:ac:
e6:83:82:31:c5:7a:23:9f:e9:4e:0a:7c:96:7b:43:86:30:fa:
58:bc:d2:e6:ee:4e:92:31:1c:55:5b:1f:ca:47:f9:f5:6a:45:
c6:5f:4b:8a:44:3d:8a:e3:e1:71:63:af:0b:7d:cb:5e:b9:13:
4d:36:a3:7a:47:7e:f6:d9:8b:a7:33:db:f8:b5:91:cc:a5:e1:
c7:ed:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:34 2026 by rpki-client