Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: 5Jba4y9lAuf47kbH0Mc9r+eM2KEnDCdPCFffAyV3hbY=
Subject key identifier: 43:21:E2:D9:F2:F7:49:21:DD:19:CD:F3:6B:E1:2D:9F:F6:BF:F0:A9
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019D98BD81DD710B534EF363DD9B4E7DC556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0EF3
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: zmqw69lY+ad6Tb2VnyTrqxsGtzQKj5tLFWS94I20NsI=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:81:dd:71:0b:53:4e:f3:63:dd:9b:4e:7d:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=4321e2d9f2f74921dd19cdf36be12d9ff6bff0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:09:d3:01:50:d6:bf:1d:80:6a:1d:d8:b9:
16:41:2b:7f:1b:75:ae:f2:48:f1:69:08:99:93:4d:
83:f0:30:d1:20:37:ef:db:b2:af:1e:f5:ed:f7:7b:
24:ec:8a:db:eb:53:36:d0:cb:14:94:87:96:d4:7b:
82:74:65:fe:6e:2f:3f:74:d5:9c:ff:16:a3:9e:17:
ca:0d:ae:9d:f5:0f:b9:ff:6b:4f:d4:37:a7:23:15:
61:7c:fb:6a:98:d8:1b:04:a8:91:c4:40:c5:fa:3b:
c7:66:2c:57:72:33:a3:77:9e:bd:4d:35:dc:ba:10:
ca:79:b6:ee:b4:07:6f:07:c8:54:19:8e:80:ee:a8:
8e:c3:4d:43:23:ad:ad:1c:6e:d2:12:55:c0:85:b0:
85:b9:21:72:1d:7c:31:27:4b:44:89:4b:e4:cb:91:
5e:4d:cb:6d:b6:6a:70:69:a7:76:ec:fd:fa:c3:2e:
b2:7d:2c:81:d1:a6:36:d1:ba:88:0a:8c:6f:13:25:
bb:2b:21:22:8e:01:79:c1:71:83:a2:3e:31:43:8e:
93:33:b6:bd:9a:25:62:83:98:ac:9d:1a:34:01:91:
25:47:3b:26:4b:c3:ab:12:ba:9e:03:c0:66:e0:61:
b9:66:e3:26:43:b7:19:39:9b:2c:01:bd:82:c0:a0:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:E2:D9:F2:F7:49:21:DD:19:CD:F3:6B:E1:2D:9F:F6:BF:F0:A9
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:c5:42:c6:f2:8d:8e:8b:d8:3b:6f:aa:86:1b:90:98:cb:
1a:cf:f7:f0:68:db:73:42:5c:ce:f7:22:b0:61:67:29:48:81:
be:22:b8:57:98:1e:c3:07:2d:e6:6c:7a:1e:82:e6:79:be:24:
fe:f0:91:aa:12:42:00:98:fc:0c:ee:50:98:2b:b0:cc:93:6f:
4d:3c:b5:c3:36:63:a6:cb:e0:e9:5d:d8:54:41:4a:52:e4:fd:
50:36:12:43:bd:a6:ba:11:ba:d9:65:b7:41:41:d4:20:96:7c:
2a:cc:5c:4e:02:05:59:06:08:06:fa:92:21:7d:f0:5d:af:e5:
c8:7e:57:47:7c:30:02:57:df:a7:53:19:21:a4:a0:cf:69:89:
7b:f3:e0:11:ea:60:fb:56:fc:8a:da:f7:d8:f8:48:5e:19:e8:
8a:8d:4e:4f:5c:d6:c3:cd:fe:04:eb:e8:23:4e:a2:3a:72:4f:
01:30:19:ec:5a:9c:ae:7c:e7:de:47:64:7b:fb:db:a7:9a:83:
62:25:88:fc:ef:bd:12:7a:ac:5f:51:d0:e6:ea:20:b3:ee:40:
53:7b:d6:2d:30:2f:9b:21:9d:35:a0:4a:52:f9:e1:16:88:1f:
cd:e6:76:52:22:8d:97:f5:a1:14:b1:2b:45:89:b7:f5:87:1d:
13:01:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:04 2026 by rpki-client