Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: J76GF3v7Q0HmpeJU1GcXMs3we+6FpPf+4n6R5q1od+g=
Subject key identifier: B8:02:19:08:C2:45:FB:51:FC:CC:38:1E:78:06:5E:DF:A4:6C:30:A3
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019D9886294997CE836CDD354F00EB941BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: 4rWRMTAx37_lQCzr5hcZsju6dqw.roa (hash: W2xQvjb4BYluc6hJ83tM86YR+fMCZk+Sc0Dq669prBQ=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: 77AH2B1PLSF0S6b035y0hbAdt2wjukNYNadZtLLaS/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:29:49:97:ce:83:6c:dd:35:4f:00:eb:94:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=b8021908c245fb51fccc381e78065edfa46c30a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:10:b9:fb:30:2c:fd:94:55:e0:b8:dd:d6:
1a:7e:e8:24:90:9f:3b:2d:8a:bf:e4:87:28:06:49:
91:a0:7a:e1:2b:10:01:b7:fc:98:55:fa:50:91:3e:
14:3b:3d:9f:34:4c:30:5d:d4:11:79:10:e5:b9:6e:
87:59:66:be:b7:d3:47:9a:35:7c:38:1e:b1:46:ec:
f3:a2:7c:0b:2b:59:1b:67:1c:79:1d:68:df:33:42:
06:bd:8b:76:c3:fb:b2:18:23:a0:34:84:ec:64:ab:
a5:23:9e:f8:7d:0e:49:7e:b4:4d:15:ef:e6:3d:78:
6d:9b:7d:e6:e7:29:8e:d3:84:2a:89:3a:85:d3:94:
fb:57:f4:e8:71:c5:56:f1:49:f7:e0:a9:c3:c0:e1:
5c:22:81:25:72:d5:4f:4e:8e:2e:9b:c9:e1:ec:91:
82:15:4c:32:eb:99:ee:61:a9:73:9d:23:11:97:75:
c6:8b:4e:47:ce:ba:3d:a6:8a:f6:33:f3:05:0e:ae:
bd:2d:82:c9:dc:aa:24:9a:af:b0:97:72:a0:41:ea:
b9:2e:7f:ad:d3:32:32:1d:e8:54:01:45:28:a7:f7:
9d:7e:9c:a0:64:6f:bb:19:bb:5e:e1:21:73:bf:c2:
5d:30:4a:d5:bd:53:f5:8b:05:92:30:30:78:20:d0:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:19:08:C2:45:FB:51:FC:CC:38:1E:78:06:5E:DF:A4:6C:30:A3
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:06:c4:da:fd:6d:6f:8b:ac:cb:4c:3b:08:d2:5a:60:94:
a1:04:7d:15:07:99:66:94:a1:e9:2a:61:e5:75:df:5f:bf:cf:
2c:15:bf:f6:c4:f2:59:ac:2a:91:82:c7:a5:f3:a6:3b:62:3d:
de:a2:d5:a0:33:d9:6d:7a:23:27:2c:ad:4a:af:45:8d:11:8e:
d1:85:bc:54:b6:ed:e8:d6:cf:70:b5:b2:ce:8d:31:e0:9d:f0:
e5:34:1e:c6:7e:ac:c9:e6:f5:9c:12:49:79:85:c6:64:64:eb:
eb:3d:c4:f6:4f:cd:be:b6:4d:38:ba:26:7c:d9:90:96:c4:ec:
4f:14:85:0f:22:0a:df:40:2a:fc:20:04:c3:bb:58:6a:90:53:
00:02:f2:92:84:48:e7:f5:25:50:fb:64:98:b3:0f:f6:b9:76:
36:39:2f:c6:27:b0:45:60:0e:92:ec:03:07:48:f1:10:fc:ec:
d5:27:d8:36:b2:9f:5b:36:6c:8d:ae:6c:70:eb:b1:9d:a7:92:
c0:af:91:83:f6:08:ac:79:b3:9b:fd:16:3c:c7:f5:91:aa:9d:
c4:66:b8:bc:8f:3a:ee:70:dd:dc:d5:92:a2:1c:99:27:6c:b1:
9a:77:12:d0:af:fd:ed:c0:f4:34:1c:03:2d:60:7d:df:dc:42:
3a:f2:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:54 2026 by rpki-client