Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: P4isYGklc3ezNXjPWZpdR73fhtEMbJ9essA2yFE+ls4=
Subject key identifier: 4B:A0:C7:DC:2E:51:6C:66:6C:77:B0:62:FB:34:05:14:41:0D:00:70
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 019D9B87811555558255F617F8F6DA3ECBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0F86
Signing time: Fri 17 Apr 2026 13:00:41 +0000
Manifest this update: Fri 17 Apr 2026 13:00:41 +0000
Manifest next update: Sat 18 Apr 2026 13:00:41 +0000
Files and hashes: 1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: WrjNPgTEr5psNXec0PuZr7JbzOsmMcCD7yTXOfaAHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:81:15:55:55:82:55:f6:17:f8:f6:da:3e:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Apr 17 13:00:41 2026 GMT
Not After : Apr 18 13:00:41 2026 GMT
Subject: CN=4ba0c7dc2e516c666c77b062fb340514410d0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:54:c2:94:20:4e:7b:07:80:40:9a:e9:b8:
ec:db:80:89:f4:ad:6f:bb:2e:6b:62:9c:d8:c5:c4:
c6:8c:b7:c9:bb:79:65:65:27:45:47:04:aa:57:e2:
17:1a:6c:65:9f:3e:7d:c9:8c:7d:8b:5d:54:78:99:
04:6b:81:cd:50:6b:fe:2b:22:0c:4a:3e:5f:2e:f3:
7f:36:00:12:a3:b2:e2:99:08:aa:bf:1e:64:05:98:
5d:b1:b1:e8:c7:6b:c5:d4:4e:79:c8:4a:69:22:d3:
b2:83:93:53:e5:34:71:51:3b:40:15:df:87:bd:58:
cc:bf:85:04:07:07:a9:f8:f0:8b:54:2f:88:5c:c4:
5a:4b:bf:f8:82:0a:da:f9:08:64:df:4d:35:79:a9:
00:c9:45:96:50:40:56:f6:60:ee:5b:88:5e:8e:ec:
5f:0b:31:e9:e0:d1:62:04:2d:d3:5a:0a:82:4d:ff:
01:55:21:40:08:c1:45:2d:33:54:ac:78:84:49:3b:
d6:a6:f0:b3:ba:9e:11:d6:4c:07:4d:65:1e:43:4f:
bf:a6:60:a9:65:94:54:17:1a:14:b4:03:9d:ce:9f:
d7:d5:9f:7c:e4:d1:a3:46:3d:db:3c:27:2e:a8:71:
a7:66:4c:95:de:33:09:cb:f9:d6:db:b1:4a:61:2b:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:C7:DC:2E:51:6C:66:6C:77:B0:62:FB:34:05:14:41:0D:00:70
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f7:ce:9f:01:c9:c9:46:e5:77:28:40:c0:c1:d1:e8:a5:d0:
2c:99:bb:14:8a:03:f1:bc:40:4f:07:a8:47:1e:94:f3:23:df:
54:b1:37:51:56:0f:01:61:7d:d2:35:13:a1:53:f9:b1:38:6a:
4c:e3:44:b3:14:88:0c:2d:d4:e3:08:96:6c:55:41:62:62:3a:
23:a8:60:9a:07:d1:69:7d:2d:1e:fb:c9:a8:d6:4d:cc:02:a4:
7b:74:7c:a6:60:bd:29:16:38:d2:7b:29:d1:18:73:14:60:4c:
f7:61:1c:f3:d8:7f:d1:81:43:30:68:0b:4c:6b:7e:90:57:61:
ee:c9:b8:7d:36:86:a7:f4:31:b4:17:2d:f4:0c:52:41:44:7f:
81:16:65:73:aa:f2:76:a6:57:b5:d0:ae:57:b6:e9:77:ed:1b:
5d:50:e3:52:4a:35:e5:78:d2:0f:7d:87:07:20:89:7f:6e:8e:
3b:78:c0:0e:49:a7:ca:1e:04:5a:4f:df:0e:c2:71:71:0b:0b:
d5:35:e6:84:3a:94:c2:de:e4:57:c3:b8:52:d9:95:f7:d7:44:
75:47:34:2c:20:cf:51:77:34:fe:69:02:48:4b:5e:67:94:63:
b5:c6:8f:ec:27:a8:28:92:c0:07:ed:0e:58:d3:a7:5d:22:3a:
1c:37:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:34 2026 by rpki-client