Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: YKsc+/CzkCMTwcyLqpSjWIJhAzy7bkkbkAGpUnPGZmg=
Subject key identifier: 96:2A:9F:EE:A8:DF:DD:1D:DF:C2:8E:A1:19:E6:E2:F5:C9:F0:A4:F9
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019D9A06F22197B0B624A162573A7C865221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0FE0
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: C97_7VGyt3z51YWbg6YIKKzKTkE.roa (hash: iks5W0aWtIawzxWfA5TI8oBeO4XFNLqMOBRmY+MnMEw=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: maW7/pYr6d+HyJz4ZNaIInpO+XJlFmVJlRe0NRDbQ6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f2:21:97:b0:b6:24:a1:62:57:3a:7c:86:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=962a9feea8dfdd1ddfc28ea119e6e2f5c9f0a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:80:d2:f7:fa:03:db:74:c7:a0:cf:7b:27:
67:a3:a0:18:67:3b:4a:5c:50:18:46:26:cf:ec:10:
fc:3f:47:9b:79:a1:b8:68:d7:eb:ae:fb:43:37:92:
b7:8c:19:49:63:16:5b:fc:16:93:b2:30:25:9b:3f:
4a:13:79:46:21:c5:79:1d:dc:fd:a1:dd:3f:89:d0:
a8:2f:bd:68:2d:90:1f:84:18:40:d1:22:26:29:7a:
d4:2e:8d:ca:cb:dd:6e:04:1f:9d:82:79:bb:c8:fe:
35:1e:ee:3a:99:e7:4a:58:60:f0:dc:95:80:f7:1e:
c8:a3:d8:36:a0:6a:f1:84:d2:2b:13:24:bb:4b:45:
4d:d8:9b:20:e1:cd:14:9e:fc:e4:6b:f4:49:5a:81:
b6:8c:c5:1b:d1:bc:b1:ae:b4:7f:b6:45:19:e9:7f:
33:fc:e5:bd:d0:35:4e:0a:b7:45:14:ee:a4:03:3d:
02:78:69:91:06:95:5f:25:a9:b8:9b:cd:15:e9:5c:
39:d9:99:a4:24:c5:93:93:7d:47:f0:13:e0:91:a6:
da:17:d8:85:a9:2d:d0:71:97:e3:25:7f:23:cc:7c:
5c:7d:18:f3:27:e1:86:be:2e:33:72:8e:22:c2:81:
ee:c1:b4:95:41:fc:51:8f:3d:75:7d:0c:f6:5d:a7:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:9F:EE:A8:DF:DD:1D:DF:C2:8E:A1:19:E6:E2:F5:C9:F0:A4:F9
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3a:3c:c6:1f:f1:83:f7:0b:d1:34:30:a3:42:4b:5b:17:34:
60:cb:b9:be:d2:e5:66:bd:f7:c3:59:75:66:52:0f:0e:06:e6:
7b:a0:52:5b:68:1a:e5:95:53:20:c8:33:56:d5:a3:46:cb:2a:
e6:c2:6d:80:dd:ba:9d:84:c8:1c:a5:6b:82:ac:bd:6e:be:4b:
cf:58:b0:2a:2c:11:54:3b:18:9e:d4:dd:73:e3:bd:6e:d4:7f:
fe:7c:d2:82:6a:8a:64:b2:6e:9d:f7:20:74:a7:dc:32:f5:06:
c0:b8:d0:df:85:9c:3f:f4:2e:bf:b8:4c:33:24:bb:8f:dc:1b:
6d:e7:c9:ee:d8:48:85:9e:2e:03:cb:b9:78:4c:ee:b2:71:b5:
be:a8:8c:4b:b0:fb:ac:b1:63:66:f8:e4:c5:40:d2:10:cc:34:
80:6e:35:62:2b:b0:31:dd:9a:5a:e5:fe:e0:9c:43:e4:00:29:
f8:f4:dc:15:46:10:cf:05:cb:5e:b8:35:67:70:39:34:4c:58:
50:bd:29:d5:95:23:ec:b2:1a:b1:8a:49:2b:e9:54:c5:62:e9:
f2:f8:9f:60:c6:d6:d0:c3:22:55:07:a1:cf:44:4d:6e:46:ef:
35:dc:fc:72:2a:37:52:d5:65:ea:44:7c:01:37:c3:4b:20:12:
d3:5d:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:55 2026 by rpki-client