Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: F+ZvpJDxVyxQGf1M18K2/2K+wIDjo+gKH5fKeSlxwew=
Subject key identifier: AE:AD:82:86:AE:81:87:41:3C:91:0B:9C:5A:9B:66:94:CD:68:90:0D
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019D99D044B7D24F69D6352674D951772DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0C1C
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: BOgwaBfeVQSIIpapc527zkUmHqU.roa (hash: nrw7ZZfH7PdSf3N6nWnSJG5fTiZauLCGIT/x1kU9vbo=)
2: iMohY32XGfMe49GauUZuk8wSe_o.roa (hash: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw=)
3: taAXT03F3M3JAGdGzCZ9PUX6syw.roa (hash: fgpH3fuH0sJY/Yp9V/TwIQ+R+Yd9bAUVli6dhikUJko=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: ebCZx4dqrjXH0uKJoABUe4nxvfbLcAIndO0YxBCOmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:44:b7:d2:4f:69:d6:35:26:74:d9:51:77:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=aead8286ae8187413c910b9c5a9b6694cd68900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:a2:1d:ae:89:77:df:57:15:31:26:bf:cf:
3f:c8:16:30:1e:a0:08:a4:77:ae:d2:9b:71:42:b6:
fa:fc:02:f1:df:2b:9e:93:12:c9:f2:56:7a:d7:73:
cc:ac:e6:45:85:e7:80:49:3b:5f:b5:16:be:f9:77:
eb:97:43:1a:4d:7e:09:52:ba:5a:e2:88:e6:d2:27:
d7:e0:d0:2b:55:8e:a1:ec:d1:6e:26:6a:24:90:5c:
6a:66:61:45:51:0b:7b:02:d9:74:11:c6:d8:6b:2a:
68:fc:30:90:28:51:df:fd:da:9c:d0:25:7d:ec:6d:
5e:61:0f:25:15:af:2e:62:e1:45:19:32:0b:9c:08:
b0:85:09:76:70:c8:07:22:2f:86:24:58:98:70:17:
c2:09:85:03:74:09:a8:29:23:b3:c8:87:04:cf:4c:
9a:1d:8c:0f:1e:f8:9e:23:46:73:ee:ef:f7:01:0e:
3b:26:46:e6:49:61:42:32:28:b3:12:29:fc:60:e6:
de:b7:25:c5:80:69:90:85:9c:35:9c:a2:6f:08:f2:
43:40:ba:25:6e:2a:b1:19:51:02:c1:95:4d:ca:14:
6a:46:6e:75:50:f1:12:26:90:6c:ce:ef:2e:eb:1f:
01:d7:a1:34:a8:6f:69:6e:55:93:dd:75:fd:b3:52:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:82:86:AE:81:87:41:3C:91:0B:9C:5A:9B:66:94:CD:68:90:0D
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:47:82:25:32:3f:05:75:a7:3f:1b:e8:2f:dd:2d:27:f4:
3e:62:5c:d4:2d:c6:21:fe:e8:4b:66:64:a0:b7:37:dc:fd:cb:
c5:3c:de:08:be:9e:f3:d7:c2:da:a9:a8:dc:31:f0:be:47:1c:
28:0f:58:14:db:3b:c8:83:21:6d:c8:cb:49:c2:b2:7a:3a:01:
7d:28:2d:75:1a:08:43:f4:2a:75:0b:be:a0:6c:e2:33:07:5a:
22:d1:af:85:ef:21:b3:27:fa:3f:8f:ef:7b:80:6a:84:24:2c:
24:7c:c2:3e:41:e9:32:53:22:5f:92:21:ac:be:72:ce:95:4b:
5c:bc:53:37:a9:6d:18:d5:a9:64:2c:7b:4a:d3:c8:39:85:08:
1d:9a:3f:b4:94:1a:4f:ff:0b:aa:b9:48:cd:9b:43:84:b0:6d:
9f:d0:fb:9f:1f:71:f9:7f:09:bc:60:65:b7:5c:91:9b:4f:b5:
d8:5e:b7:2e:48:ac:be:a1:a1:4d:66:b3:00:d6:a6:6e:00:59:
e4:70:54:88:50:97:cf:74:5a:58:02:c1:f5:72:e9:75:e8:d6:
c0:c2:49:44:4b:bc:e4:0c:7e:60:3c:85:9d:d0:a8:e9:bd:95:
bb:b2:18:c0:97:aa:70:cb:fd:37:c7:4e:ee:4b:0e:f7:67:b0:
74:3a:9b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0ES30k9p1jUmdNlRdy3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjYwNDE3MDUwMDU2WhcNMjYwNDE4MDUwMDU2WjAzMTEwLwYDVQQD
EyhhZWFkODI4NmFlODE4NzQxM2M5MTBiOWM1YTliNjY5NGNkNjg5MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIeiHa6Jd99XFTEmv88/yBYwHqAI
pHeu0ptxQrb6/ALx3yuekxLJ8lZ613PMrOZFheeASTtftRa++Xfrl0MaTX4JUrpa
4ojm0ifX4NArVY6h7NFuJmokkFxqZmFFUQt7Atl0EcbYaypo/DCQKFHf/dqc0CV9
7G1eYQ8lFa8uYuFFGTILnAiwhQl2cMgHIi+GJFiYcBfCCYUDdAmoKSOzyIcEz0ya
HYwPHvieI0Zz7u/3AQ47JkbmSWFCMiizEin8YObetyXFgGmQhZw1nKJvCPJDQLol
biqxGVECwZVNyhRqRm51UPESJpBszu8u6x8B16E0qG9pblWT3XX9s1Kc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6tgoaugYdBPJELnFqbZpTNaJANMB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexBHgiUy
PwV1pz8b6C/dLSf0PmJc1C3GIf7oS2ZkoLc33P3LxTzeCL6e89fC2qmo3DHwvkcc
KA9YFNs7yIMhbcjLScKyejoBfSgtdRoIQ/QqdQu+oGziMwdaItGvhe8hsyf6P4/v
e4BqhCQsJHzCPkHpMlMiX5IhrL5yzpVLXLxTN6ltGNWpZCx7StPIOYUIHZo/tJQa
T/8LqrlIzZtDhLBtn9D7nx9x+X8JvGBlt1yRm0+12F63LkisvqGhTWazANambgBZ
5HBUiFCXz3RaWALB9XLpdejWwMJJREu85Ax+YDyFndCo6b2Vu7IYwJeqcMv9N8dO
7ksO92ewdDqbTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:57 2026 by rpki-client