Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: l+8YxJnMUOi7JlJPmn+SjKir3+BAFffrDURG+eJ7bu8=
Subject key identifier: ED:03:3F:90:8F:11:3F:2B:E0:88:3D:84:32:F5:B9:75:37:90:79:AA
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019D9A06C4E7194A8E32C68295BBDE38237C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: ftTRHt9VbAkp6eAJZLmPVSsUNohf3AeBeB2Anvfv1dY=)
2: kJ79XeVCgRV25HKpL8ktREfXHlw.roa (hash: 7gNr/5O63l4yUAcolVBkp40kuH2WYLPsyzzPi2c2gEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c4:e7:19:4a:8e:32:c6:82:95:bb:de:38:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=ed033f908f113f2be0883d8432f5b975379079aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:10:34:f2:01:c2:7b:3d:48:c0:13:ec:23:
de:90:07:ff:2c:ef:c4:f3:24:13:90:3d:d1:d8:f0:
67:c5:16:fc:69:b4:20:39:21:bd:e3:28:e0:cb:6d:
9b:a0:9d:08:dd:c7:8d:8e:2c:51:eb:76:42:08:bb:
6f:67:f6:b8:0e:7d:2b:ca:9d:33:26:d6:4f:b1:cc:
70:d0:14:d0:b0:ef:a7:97:ee:4b:f4:28:6b:3f:81:
7a:aa:f8:a7:91:5e:93:f4:40:2c:2a:f2:ac:ce:78:
cc:00:a7:85:28:b0:e4:97:e1:20:c5:51:d1:63:f3:
c4:09:3b:ea:27:96:8b:7c:0e:d7:d1:a0:cf:a4:a2:
01:d1:2a:6d:7e:21:c8:45:9f:ba:25:3f:fc:f6:3d:
28:6d:e6:18:2b:01:01:d0:a7:1b:88:f7:9c:27:7f:
73:dc:8e:5b:bd:d2:76:6c:a1:8c:74:93:fa:c9:13:
65:f1:04:73:23:3e:c3:f1:ba:77:d5:b3:0d:b4:d7:
d4:4d:65:30:d9:91:68:1e:f4:38:6a:c4:df:a3:fe:
01:ca:19:dc:26:0f:04:dc:fc:7a:18:eb:6b:da:b7:
db:2a:5f:8c:c7:51:2e:1b:70:6b:5e:49:02:45:df:
e6:4f:32:7f:d7:c6:35:e0:1e:a2:be:27:43:61:6c:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:3F:90:8F:11:3F:2B:E0:88:3D:84:32:F5:B9:75:37:90:79:AA
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:bc:d5:ad:ec:2b:7f:30:05:ab:7f:6f:96:99:1f:2d:68:
4b:51:37:d1:01:19:24:a0:43:45:21:3b:e7:58:b0:ef:a0:54:
6a:76:90:cb:a2:06:4b:60:fe:0b:e8:12:ac:1f:fd:2d:71:fa:
72:55:1c:da:a3:b1:1f:d8:37:35:59:69:72:d8:17:6f:29:29:
b6:06:b6:79:0e:de:04:a9:8e:1b:10:f8:b3:21:10:47:6f:ca:
0f:83:79:75:5f:da:48:7f:fd:bf:32:84:83:e4:34:45:35:73:
b6:8a:60:60:bf:ee:86:3e:3f:83:6b:57:ee:18:7f:96:40:02:
de:4f:2d:66:35:d4:6d:a0:05:20:1c:5c:88:14:73:03:ba:06:
b2:74:bb:9c:25:23:7f:60:0b:3a:4c:80:bc:cf:9b:78:7a:f0:
c8:32:be:90:eb:00:f5:84:13:94:46:2d:e2:cc:f6:fe:12:9f:
1e:16:82:10:80:e4:d5:ac:83:82:e0:be:c0:8d:9a:f0:0f:53:
a3:af:dd:d3:f9:0c:96:9d:c2:ee:f1:34:64:07:27:0e:fb:a4:
56:9b:1c:19:8e:7e:3d:9c:c5:2e:cf:22:fe:4f:b5:69:51:7d:
ab:6a:22:8d:a0:e6:b2:ab:e9:93:94:20:4b:be:d5:37:e7:7e:
69:24:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:25 2026 by rpki-client