Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: RVjoYDXGnsiyjrKmbnE2F0BajDJYMUAzN9VWmjo8ciU=
Subject key identifier: 95:34:04:92:3E:60:F1:DB:50:FF:EA:8A:5C:F5:B0:69:15:C7:EF:2F
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019D99622066DD848201F75C9F656B567DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: K0ACqYr6FmcBgvmASw+L11Ws0uQGtwQdfaMp4xSLsp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:20:66:dd:84:82:01:f7:5c:9f:65:6b:56:7d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=953404923e60f1db50ffea8a5cf5b06915c7ef2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:ef:2c:1e:c5:ee:72:41:4b:d3:b4:f1:c6:
7b:53:9b:40:a0:2e:2c:76:83:d2:3c:e9:7a:a7:db:
07:14:47:57:95:6b:2d:54:c0:77:a1:42:7d:3a:73:
83:97:85:84:de:f1:ef:05:79:d6:d4:dc:c3:c7:43:
be:9b:91:92:e9:13:d4:99:89:8a:cd:f4:5e:ff:f5:
89:55:41:1e:dc:de:d4:36:b3:6f:04:6c:b0:6f:93:
01:53:e5:b1:2a:56:ca:79:07:3a:99:b2:cd:fc:02:
b1:d0:6c:6d:91:88:3d:f9:aa:4a:95:03:36:65:95:
69:9f:0c:4e:ed:c1:3e:8b:6a:35:81:4c:0f:dd:68:
c5:d3:dc:5b:14:71:c9:fc:ef:ee:d4:bb:8f:eb:cd:
46:5c:12:43:eb:d5:3b:8d:75:34:30:fc:17:0e:e6:
cc:a0:b8:f8:ac:33:f4:a4:c3:dc:40:19:b2:c1:3d:
02:8f:60:d3:40:58:0a:85:a4:b4:9d:cb:32:4f:d5:
74:19:41:b6:91:24:50:55:7b:69:dd:69:b8:94:4d:
84:a9:70:63:a7:9e:ad:c1:db:09:39:f7:b5:9c:80:
4f:ca:ac:4a:35:7e:ff:fb:f4:e3:63:14:64:da:39:
fe:ae:52:3f:1f:b3:43:12:06:b6:89:20:11:8b:24:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:04:92:3E:60:F1:DB:50:FF:EA:8A:5C:F5:B0:69:15:C7:EF:2F
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e6:d3:ce:bb:27:ba:0f:c7:bd:43:db:cd:65:72:fd:c8:e4:
67:65:4e:79:22:6b:f5:24:22:43:c0:8a:06:17:07:d5:e3:5f:
57:9a:40:ca:25:6b:db:77:01:78:09:8e:f9:74:8f:c0:de:6a:
8d:4e:bd:1e:80:a3:37:f1:c6:3d:6d:20:eb:ca:b5:4a:b2:ed:
c0:15:ed:6f:e2:23:6b:63:f4:a7:72:46:46:02:5a:3d:af:27:
e8:0d:f9:59:fa:b3:65:49:ee:f6:dd:c4:c2:1f:56:82:d6:4c:
46:35:6b:7e:d7:3d:60:09:8a:9b:21:0f:21:37:9e:d8:2e:60:
c6:d7:7a:bb:b7:08:9c:c4:a6:00:ae:18:f0:ac:f4:c2:d4:94:
fc:54:65:40:90:b0:96:75:4b:de:87:49:bf:24:7b:64:91:93:
23:4e:86:e2:a1:58:45:69:5a:82:99:e8:a2:6b:6b:75:8c:3a:
8b:cf:02:8f:9c:a7:ec:b0:c2:71:23:0a:f2:04:cf:30:c7:94:
6c:ce:91:c2:00:b4:da:9c:9a:d3:33:2f:7a:f7:a6:83:0c:23:
50:1e:93:e0:0e:22:2a:29:cb:31:d7:b5:36:c8:97:2d:6d:93:
47:9e:0c:08:46:54:21:14:bf:b3:65:1c:a6:ed:4e:88:37:a1:
fe:52:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:16 2026 by rpki-client