Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: aJkR7HGaLlKOmAXRtlXPnY5ZrYGlw1r0S1VNd2OnQ1A=
Subject key identifier: 45:21:A7:A5:44:83:8F:FA:79:8A:A5:F8:AD:5B:F6:79:F8:87:CB:9D
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019D97E1FD44221523C9D589E368CC300D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 12E8
Signing time: Thu 16 Apr 2026 20:01:03 +0000
Manifest this update: Thu 16 Apr 2026 20:01:03 +0000
Manifest next update: Fri 17 Apr 2026 20:01:03 +0000
Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
2: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: HuCJigw7vOYZvhbBNjOMB74wEpNaQQ8NUL0Ebe7UnN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fd:44:22:15:23:c9:d5:89:e3:68:cc:30:0d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Apr 16 20:01:03 2026 GMT
Not After : Apr 17 20:01:03 2026 GMT
Subject: CN=4521a7a544838ffa798aa5f8ad5bf679f887cb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:83:0d:a8:92:ba:c7:67:7f:45:04:76:8d:
66:f9:c7:c3:b5:f6:88:8c:12:4b:5a:ef:db:48:8d:
de:b6:80:ee:e7:4b:12:8c:d9:ab:2a:ed:f8:91:fd:
ff:f4:1f:43:52:d4:29:09:f9:92:ed:6a:90:c9:c0:
a7:a6:b0:08:2f:f2:16:ce:74:ab:ea:be:09:0d:b4:
2b:ed:a1:20:98:67:3b:16:40:87:b3:f7:e7:42:1d:
1f:e8:b7:78:bb:a9:23:4a:a9:b5:24:92:48:bd:ae:
1e:4c:35:8a:82:82:f4:4a:cc:85:31:49:64:75:d8:
84:df:e6:01:2b:c5:ce:66:1c:ad:d5:5b:d5:a4:ec:
8b:54:67:18:bb:73:a4:3d:92:ab:9f:b4:19:18:c9:
d0:e4:0e:59:68:24:eb:c3:d4:81:3d:20:c4:2a:1a:
ef:66:34:2b:46:56:79:44:53:e8:69:91:de:0f:d8:
bc:11:2f:9f:57:d3:0e:f1:09:6b:91:43:39:aa:1e:
a7:33:45:a9:ff:49:4b:89:a1:04:eb:00:54:36:d4:
c7:7d:cb:aa:4a:e4:0b:70:2e:11:92:cd:50:06:52:
8b:89:54:ae:e5:8e:39:b3:a6:0e:06:35:05:82:ac:
d5:29:18:6b:c7:5f:da:fc:5a:b1:14:66:88:ef:b6:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:21:A7:A5:44:83:8F:FA:79:8A:A5:F8:AD:5B:F6:79:F8:87:CB:9D
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:51:1b:ac:9e:85:7a:56:66:a3:d2:d5:3a:6a:2c:4f:f4:
02:57:75:a0:e5:da:3b:2e:fa:c1:0e:60:45:a7:cc:85:85:a2:
de:e5:d2:15:7d:56:5a:6c:e7:14:36:ca:0f:f1:19:c2:01:ed:
f7:2a:0f:1d:97:02:7b:92:e7:b8:0d:1b:e8:66:40:d1:ce:68:
b0:de:7b:22:f1:c9:f1:cc:b1:a5:54:28:c0:d5:6f:82:f8:90:
63:52:24:3e:73:10:8a:ce:c1:dc:cc:5c:f5:f2:a0:3c:20:ca:
ec:a7:aa:6e:50:08:c5:00:04:00:4e:f2:1b:73:5c:8d:bc:4a:
3b:08:40:fc:7a:8b:ff:f4:a3:96:dd:61:ee:20:22:c0:d8:3b:
07:8d:ee:fe:4f:ff:5c:bd:56:11:af:b9:89:80:19:44:b9:04:
e5:01:57:b2:18:71:59:4d:d9:eb:f2:e2:af:1b:7d:3c:ba:ac:
a3:1c:88:0c:23:86:b6:fa:2a:80:59:c5:b0:25:19:82:f6:0a:
69:18:cd:53:cc:31:4f:2a:7e:61:6c:9f:f1:2b:f0:1c:b3:df:
a0:ee:19:83:57:6e:64:24:27:92:1f:42:fb:04:5b:21:4c:29:
f0:47:e1:45:ba:e5:9e:3b:0f:c6:36:37:7f:da:ed:b0:b2:ea:
0c:9f:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:27 2026 by rpki-client