Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: JG/rLPhLUgoufrAZjC15mnEtV+GRv6V9ZiEFYKiQvAY=
Subject key identifier: 3F:A8:A8:7E:61:86:50:56:15:EE:6A:C5:48:13:75:E9:EA:CF:72:38
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 019D9C2CF5D37F34C74996ADD243B845CC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 16:01:25 +0000
Manifest this update: Fri 17 Apr 2026 16:01:25 +0000
Manifest next update: Sat 18 Apr 2026 16:01:25 +0000
Files and hashes: 1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=)
2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=)
3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: 4X4n7IwGKA1Wmy3fHQitA9TVpBUDI8f0WW6PjBYaT2Y=)
4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:f5:d3:7f:34:c7:49:96:ad:d2:43:b8:45:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Apr 17 16:01:25 2026 GMT
Not After : Apr 18 16:01:25 2026 GMT
Subject: CN=3fa8a87e6186505615ee6ac5481375e9eacf7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:11:23:8a:62:2a:0c:64:c3:57:94:aa:a2:
1b:3d:aa:06:ce:ae:58:d1:a3:c4:66:bb:c9:ec:28:
bd:7c:60:39:c9:d7:8b:e4:71:8e:d8:00:3f:07:c8:
51:d4:63:c8:b4:4d:e3:83:0d:3c:64:c2:b2:52:d3:
fb:21:9d:da:f3:e3:64:e2:e2:1b:8e:fb:ed:4d:67:
b1:aa:8a:f4:18:91:c7:ec:d6:14:45:63:e7:1c:fb:
1c:61:cb:db:f7:8c:df:a9:44:5a:9a:f9:6f:d3:0b:
8e:c5:00:6a:f0:ed:da:66:29:b2:24:1d:d4:21:ef:
fe:5e:17:7e:64:7d:e4:b2:d9:64:e2:08:2b:bc:e6:
34:49:d3:4b:39:a3:03:a2:0e:10:73:cc:07:49:c8:
fc:86:2c:24:ed:51:98:46:b2:ca:d3:40:da:7c:7a:
7b:27:12:98:1f:4f:56:71:fe:67:b4:a2:27:64:dd:
7c:04:61:9b:aa:b0:8b:60:5c:b2:d3:3c:26:00:fd:
40:c3:1d:7a:22:59:92:a4:0e:8c:e6:c2:42:30:5f:
6b:4e:de:a4:ba:13:b1:9f:9d:bf:7b:bf:f1:0f:49:
57:4a:98:1f:3d:ea:83:9d:4a:72:5e:32:9f:68:6d:
d4:79:83:a7:6f:a5:02:7a:e3:fa:63:80:e4:f5:da:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:A8:7E:61:86:50:56:15:EE:6A:C5:48:13:75:E9:EA:CF:72:38
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:a8:11:04:ff:72:d0:18:37:50:16:e0:52:f2:5e:e2:55:
e2:8b:db:88:84:47:96:d1:99:ac:8a:12:1c:bf:5d:88:08:9e:
f5:98:88:a7:52:c3:e9:91:53:79:9f:3f:52:84:cf:f7:5c:e1:
02:76:a7:6b:15:59:3f:7c:9c:60:06:99:67:d5:92:aa:78:41:
3c:35:23:0c:4a:a0:bc:83:90:3d:02:ec:c8:95:34:12:9c:a4:
87:38:50:5c:bc:fa:a0:e8:27:14:40:da:f7:55:91:24:1e:be:
bb:24:d5:b9:f0:50:b5:b8:86:30:98:96:d6:b7:b2:02:3f:90:
cd:fc:39:07:d1:73:de:4c:6e:4c:46:a3:a7:58:67:82:50:cc:
f6:eb:a1:d6:82:33:39:b3:9f:eb:40:97:82:29:f3:97:5f:7f:
06:cf:95:69:30:31:94:17:ca:0f:9f:7d:53:82:92:fd:05:1b:
2b:24:fd:61:d9:cb:a8:00:33:0c:35:19:81:26:e6:92:0f:ee:
c9:04:1c:8d:10:eb:24:6d:1e:d9:4b:26:5a:b7:d5:c7:ee:96:
f9:cc:c2:c7:40:03:84:9f:24:8e:01:9e:cd:a2:0a:be:9c:1d:
86:f4:cb:dd:45:83:fc:5d:9e:68:a5:71:2f:aa:3f:ad:82:6c:
1a:9b:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:52 2026 by rpki-client