Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: 5sF+ETmPc4JTW+DD1vDGVp9cCh5+UfM0GMTpHDXefwo=
Subject key identifier: 09:E7:F3:BD:38:DD:40:54:B3:D2:E1:93:35:C6:EA:82:16:07:D9:44
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019D99CFEC16817B8B96C6C2B4B1398AD1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: su62Pl4khPRTu5DOcqK3eXCSxM+zyqHDBsZy5QnEJsc=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ec:16:81:7b:8b:96:c6:c2:b4:b1:39:8a:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=09e7f3bd38dd4054b3d2e19335c6ea821607d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:01:25:c3:e8:76:0a:a4:04:5b:b5:80:fe:
91:d4:78:9f:a1:5a:88:6a:1a:dc:ed:88:09:ab:d1:
65:56:62:70:66:56:6c:35:02:95:05:0c:5c:81:2c:
98:14:10:49:ec:85:92:52:4b:83:74:c1:5f:66:8a:
ac:75:7e:38:40:85:2a:0c:8d:d0:bf:18:66:bc:59:
b0:1f:a3:d1:11:31:0a:ec:0a:98:c1:6c:7e:f3:cc:
f5:ff:55:a2:36:ef:23:0a:f2:f9:70:ee:9f:ef:58:
ed:9e:c0:0f:6a:80:db:ac:47:fe:c0:08:bd:1f:f2:
46:9a:26:5a:45:48:75:d8:11:92:f8:af:f0:27:e0:
3d:6a:dd:fb:b1:b0:e7:45:11:de:e7:8b:f1:a0:87:
05:96:43:a9:8d:16:68:c8:cf:fe:ed:2d:8a:94:bf:
6e:bd:14:36:9a:c2:6b:e1:c8:5c:3c:ec:64:17:4a:
6f:09:1b:3e:be:1b:66:25:fd:f2:6c:57:45:d2:38:
e0:40:53:a0:c5:eb:c7:36:c1:f6:58:97:00:87:4f:
bb:3e:f5:49:63:bb:fb:22:05:51:3a:b0:50:7a:e4:
06:57:7e:60:ac:14:55:0e:20:28:8c:bb:20:02:2b:
9b:92:e9:05:20:cc:8a:af:d6:39:aa:ec:27:54:21:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:F3:BD:38:DD:40:54:B3:D2:E1:93:35:C6:EA:82:16:07:D9:44
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6d:4d:7c:95:e1:63:00:bf:e6:d7:b5:75:c1:b4:38:25:14:
46:b7:ce:48:d0:87:43:46:af:0d:4b:07:95:3a:d2:fe:e3:24:
0c:0c:c3:3c:45:c9:dc:00:ff:45:63:48:c7:69:b4:45:7b:2b:
8d:6c:3a:c3:45:08:ad:de:91:c1:80:aa:b1:f7:85:a7:df:f8:
dd:69:1b:ad:5a:dd:e9:9e:56:b5:37:84:b6:f5:6e:06:68:4f:
b2:ab:41:e7:9e:97:30:39:7a:6c:c6:6e:7a:33:f5:88:67:98:
08:ff:00:f5:e3:f8:9e:0a:27:59:38:d0:e1:ab:46:6e:99:63:
88:bf:fa:f5:14:bc:18:57:65:2c:a8:37:fe:9a:a6:01:c6:98:
0f:e0:db:43:a3:f8:82:c0:d6:ee:b8:7e:51:5e:b4:6a:38:72:
d8:94:b8:3a:7d:58:88:f0:d1:0e:88:06:d2:5d:1c:05:68:14:
dd:ca:49:30:3a:99:b4:8d:02:d7:6d:83:36:b7:3f:e8:5d:c3:
10:6f:11:84:a6:ef:0c:f9:56:c0:55:46:ed:dd:0d:e8:bb:04:
0a:fb:d8:44:55:b2:2b:9c:27:e6:d7:40:2d:08:f6:15:ef:a5:
6c:30:16:73:fa:3e:9a:d9:8c:37:03:9e:8b:b7:3e:a1:95:6a:
d2:4f:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:30 2026 by rpki-client