Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: U8uivcVvXnbiip9+AjDUsd2rBTDskIxkZ9yJPeQ2FWQ=
Subject key identifier: C2:F9:2A:95:BF:8C:1C:EA:FA:1E:FF:6B:BA:B7:33:74:B6:75:D9:28
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019DA3AEBDF5C4460E5D2BB4DBE16A8AAA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 18D6
Signing time: Sun 19 Apr 2026 03:00:31 +0000
Manifest this update: Sun 19 Apr 2026 03:00:31 +0000
Manifest next update: Mon 20 Apr 2026 03:00:31 +0000
Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: JdiO1Z5wb2AFu+MymPbnPO9ezISu1GZCusGpA8kWEl0=)
2: rFBai3dtN7fZfaYWmO7HTtf0n_k.roa (hash: VWZKUi8qjHJhvT6NFBJ/pi6UQ/Bzuh/5fCRivrLEGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:bd:f5:c4:46:0e:5d:2b:b4:db:e1:6a:8a:aa:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Apr 19 03:00:31 2026 GMT
Not After : Apr 20 03:00:31 2026 GMT
Subject: CN=c2f92a95bf8c1ceafa1eff6bbab73374b675d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:2a:51:14:43:8a:fb:b6:06:3b:bd:10:a4:
e8:2d:90:61:0d:ca:9c:21:3a:64:45:7f:32:3e:a9:
51:3e:03:f3:95:d4:3a:9e:54:51:5f:fc:35:fd:f2:
07:c2:24:66:a6:a7:78:c2:05:1f:1a:b6:bb:2a:e1:
03:20:63:62:85:1b:fb:2b:4e:d9:6d:e8:b5:f4:b7:
6d:e2:e2:5f:0e:8a:81:53:f4:7e:72:b3:ac:91:4e:
67:b6:2c:8c:93:72:c9:12:61:17:70:95:e9:bd:cc:
05:c9:1b:23:7c:03:64:52:d8:e5:b7:52:64:7d:fd:
ff:48:e1:1c:80:84:40:ed:bc:ac:16:62:a3:86:26:
14:12:37:01:24:bf:69:4d:b6:01:55:50:4c:5b:4b:
94:93:6b:2f:45:18:39:61:5e:58:15:8f:f7:df:e5:
83:ad:e6:ed:e0:e2:9a:26:43:e9:96:4b:90:59:71:
b6:a0:21:c8:b8:73:a4:b5:a7:f0:65:e0:c2:77:95:
80:9a:78:fe:a7:80:49:4c:24:ec:9d:22:a6:c3:3d:
b9:55:f8:0b:ef:d6:ea:77:d1:02:e1:1e:54:7a:36:
cb:c3:5c:5e:09:98:c5:a4:e4:d4:33:14:ba:6c:66:
b1:cb:a4:4e:80:3a:f4:ba:a7:33:66:85:5f:36:1b:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:2A:95:BF:8C:1C:EA:FA:1E:FF:6B:BA:B7:33:74:B6:75:D9:28
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:ee:0e:31:2e:a8:08:03:69:93:c2:6f:09:cd:e8:d8:b3:
2d:d5:01:4c:79:62:d0:03:8a:0f:69:56:c6:ae:da:f7:ca:6f:
fa:d5:9d:8c:19:36:dc:6e:f4:d8:b3:60:da:fd:14:33:b0:18:
28:21:da:ed:c7:46:65:4a:57:55:fc:79:16:c4:93:91:e5:66:
39:df:74:e3:5d:b8:8b:d2:52:e1:21:5a:60:94:2b:3d:ec:d3:
30:ff:ed:60:48:1b:9d:99:77:63:94:c5:fd:9f:c0:5e:52:da:
fc:f3:ca:e9:0e:3f:9b:be:54:b3:99:78:84:e7:a0:3c:7a:f4:
10:d6:c0:59:26:3f:68:02:e2:13:33:7f:d8:bd:b5:32:60:83:
90:c3:38:fd:c7:8e:da:27:fa:3d:f3:8a:9d:f8:bc:b0:26:49:
4b:15:4e:d3:44:c9:d4:18:5d:95:55:22:8a:be:0d:5f:60:27:
c9:59:c9:50:a7:4c:73:27:4c:4c:b2:b4:66:ca:95:ba:4b:70:
cd:a2:42:57:a9:58:d9:26:3c:68:b3:ca:fb:d8:1c:3d:a5:cb:
6d:4d:a3:50:92:ab:33:92:03:af:2d:42:7c:06:1e:d1:0e:0c:
e0:9e:6b:e3:99:cb:d6:c8:e3:65:91:60:16:41:5b:ed:01:6d:
5e:1b:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:20 2026 by rpki-client