Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: DS9yHB3vQBs0wJuDJF3esMNGzydOYhpSAcL0S0vnZps=
Subject key identifier: 8F:1E:CB:1D:DE:71:DC:69:A9:A6:6E:FA:1B:4C:04:C3:07:0B:C3:D2
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 019D992B3DA42659D23F4AE17CCFDEB01032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0A8E
Signing time: Fri 17 Apr 2026 02:00:41 +0000
Manifest this update: Fri 17 Apr 2026 02:00:41 +0000
Manifest next update: Sat 18 Apr 2026 02:00:41 +0000
Files and hashes: 1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: 24Lz6zkweZc4VCnVk/3UGxeDNGs2BI5aQvlFJKhgb4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3d:a4:26:59:d2:3f:4a:e1:7c:cf:de:b0:10:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Apr 17 02:00:41 2026 GMT
Not After : Apr 18 02:00:41 2026 GMT
Subject: CN=8f1ecb1dde71dc69a9a66efa1b4c04c3070bc3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:26:d4:f3:21:c5:90:8e:41:d0:5f:10:cb:
ba:f2:17:9f:18:af:74:7b:51:dc:ab:ef:ea:10:6c:
0e:d2:59:ae:55:6f:6b:59:09:20:c2:02:7c:41:89:
48:9f:66:ec:31:cb:1f:a1:35:bf:58:6b:17:a5:2c:
56:e9:cc:a0:fa:8c:c2:31:41:07:53:3b:8d:fd:6a:
d0:ab:e2:2d:83:59:94:41:3a:25:4b:4e:77:18:27:
0f:f0:1b:22:2d:3b:09:96:f1:c5:69:39:f5:c8:18:
69:9e:12:0f:7a:6f:05:a3:92:03:94:25:48:ae:c1:
71:bb:92:b7:f9:f4:0a:18:83:c3:be:d4:6f:a5:b8:
19:e2:0e:4e:5f:9b:23:e6:f9:2b:5c:34:1f:48:62:
f9:41:24:37:9a:bc:3a:ea:7b:a6:8a:07:9e:94:cd:
e2:d7:57:3c:bb:4a:0c:d6:25:8b:e4:a0:26:86:84:
70:0f:c6:1d:27:ae:93:3f:1b:41:1d:e8:72:b9:20:
c9:47:bb:f9:a4:f0:fe:d9:2f:de:30:6a:df:10:57:
b1:bd:1a:69:51:0c:22:8b:61:f3:2b:b6:74:13:c7:
0c:af:7b:58:29:33:9c:93:f8:1c:06:e8:fa:86:f7:
f2:d7:8e:23:a8:ff:43:16:8a:c0:a8:10:05:70:37:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:CB:1D:DE:71:DC:69:A9:A6:6E:FA:1B:4C:04:C3:07:0B:C3:D2
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:92:a5:88:2d:95:d6:d7:0a:b3:12:ac:9b:7a:9b:47:3a:
40:f1:d7:52:e7:12:fb:05:47:75:18:b2:0d:b9:28:5a:c9:fc:
fe:39:e2:55:70:49:cf:27:5d:fe:50:b5:d2:bd:b1:46:4b:93:
93:8d:9e:9f:56:55:3f:4d:7c:f8:05:2b:09:81:dd:76:56:e7:
ab:8b:bd:00:20:31:65:0d:ee:c7:d9:71:d9:81:e4:a0:91:03:
1a:a1:02:42:a3:af:18:f0:bf:b0:1f:e8:c4:61:a5:55:71:d0:
1a:8a:80:8c:66:63:fa:66:cb:3c:58:13:f0:44:ef:56:2b:41:
19:d0:8b:31:36:03:92:f7:19:bb:88:f5:de:52:37:29:85:36:
35:e8:03:4f:44:85:54:62:76:b4:f7:84:61:9c:5c:c9:8b:f2:
55:b8:23:23:b7:b3:4a:74:be:82:bf:20:09:d8:0c:35:31:93:
ae:02:51:16:d9:bc:30:63:c9:d9:9e:03:02:86:6d:15:78:03:
2a:22:df:78:28:91:ce:a9:10:c0:be:b1:10:86:02:b6:22:c2:
4b:2c:d3:89:d0:18:67:4a:be:f4:34:c4:c7:6c:47:67:23:92:
52:ac:cf:01:21:b1:39:9c:ca:11:11:66:f6:1b:0c:d6:87:ab:
24:e4:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:06 2026 by rpki-client