Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: aYHRS1fsLY77DXoOjJQT0MLbi8XADABgXIKCm0gonsA=
Subject key identifier: 41:08:38:C1:93:0C:F2:1B:29:6D:99:A7:1C:64:57:87:E3:E5:92:98
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019D9D3FB34A2A5944CE2E947C1B7C5118FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 0128
Signing time: Fri 17 Apr 2026 21:01:30 +0000
Manifest this update: Fri 17 Apr 2026 21:01:30 +0000
Manifest next update: Sat 18 Apr 2026 21:01:30 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: QwYulqaqaOwUchS44iRT5r96htiiXPAVWVuplSh8so0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:b3:4a:2a:59:44:ce:2e:94:7c:1b:7c:51:18:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Apr 17 21:01:30 2026 GMT
Not After : Apr 18 21:01:30 2026 GMT
Subject: CN=410838c1930cf21b296d99a71c645787e3e59298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:8c:69:14:f0:88:92:76:cc:a3:db:ad:f1:
24:85:b6:9b:ef:ef:5d:95:00:dd:99:e4:08:69:c2:
19:c1:c6:65:20:05:95:60:d3:17:d6:22:55:3b:c0:
14:c8:ce:4e:08:aa:c3:1d:a7:44:c1:71:28:51:97:
d9:e1:4e:d5:df:87:a1:ae:f7:14:3c:fe:71:91:4f:
29:c9:30:9e:b2:10:93:24:6a:e5:3a:83:1a:58:ee:
ad:b0:7f:26:30:c2:4c:8c:82:76:34:2a:44:51:97:
5a:b9:53:21:dd:00:24:1f:9c:05:8f:a2:0a:37:05:
6c:af:ed:58:7b:be:cb:c7:2c:9d:1e:53:87:ed:9e:
c2:06:1c:74:4c:e0:e5:f3:75:59:7f:8f:fd:4c:64:
54:cf:11:2e:c0:62:7b:63:48:71:e5:8f:cf:52:a2:
e9:e3:26:5e:53:2a:75:ff:36:07:f0:d3:06:13:28:
68:bd:c7:95:54:cc:ac:9d:03:b0:e0:87:28:75:67:
1f:7b:61:4a:af:c0:ca:fd:90:87:79:f4:6e:d0:83:
44:c3:b4:44:62:c9:7b:da:9c:c7:3a:f4:50:18:ad:
e4:68:1e:c6:4e:25:f6:78:d7:49:12:2c:1d:21:6b:
8d:e4:a2:a9:d0:02:5e:18:fe:84:e5:d4:3b:99:de:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:38:C1:93:0C:F2:1B:29:6D:99:A7:1C:64:57:87:E3:E5:92:98
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:48:3a:c0:ee:25:72:8e:3d:39:93:de:b6:20:c6:25:b8:
54:b5:14:b6:ee:65:44:44:ea:e5:92:4c:54:93:c5:af:9d:10:
7c:44:84:f0:7d:9d:16:09:e9:6d:41:ee:98:c7:4e:8e:22:d2:
d1:7f:73:23:ad:ca:50:f3:8b:d9:c1:c6:59:57:8e:52:b8:a0:
d3:a5:d3:c3:35:30:38:e2:98:c2:ae:46:b2:5f:a9:fd:f5:c1:
11:48:ac:52:d0:14:1c:ee:a9:42:fa:6e:b5:98:78:88:d3:3c:
4e:13:bb:b2:68:6a:48:52:14:c5:67:d6:02:b4:cf:e5:2d:c4:
44:f2:ba:84:e4:c3:23:e4:6a:08:ca:35:70:ec:d1:b7:75:26:
49:2a:5a:a0:a9:56:7d:6a:72:0e:63:bb:80:39:72:be:76:63:
79:d1:75:8f:5e:6a:a6:72:04:aa:bd:97:fa:f3:e9:96:df:00:
3a:67:59:e8:a4:28:10:17:7d:15:14:c6:2e:97:8e:2c:bc:68:
4a:67:de:8e:77:19:5b:30:01:d2:0b:ed:ec:6a:76:60:d1:f0:
5e:26:01:2d:3c:23:85:02:1a:86:3d:b7:a6:c0:37:a6:68:d5:
b0:fe:e3:1e:5b:0d:5b:29:77:f2:9c:04:48:8d:0c:e3:9d:59:
3e:38:ac:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP7NKKllEzi6UfBt8URj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTY2N2MwNTU3ZDhlNzdhODlmZDJmNjc1Mzg3ODM1Yzky
OTkwM2MwHhcNMjYwNDE3MjEwMTMwWhcNMjYwNDE4MjEwMTMwWjAzMTEwLwYDVQQD
Eyg0MTA4MzhjMTkzMGNmMjFiMjk2ZDk5YTcxYzY0NTc4N2UzZTU5Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyOMaRTwiJJ2zKPbrfEkhbab7+9d
lQDdmeQIacIZwcZlIAWVYNMX1iJVO8AUyM5OCKrDHadEwXEoUZfZ4U7V34ehrvcU
PP5xkU8pyTCeshCTJGrlOoMaWO6tsH8mMMJMjIJ2NCpEUZdauVMh3QAkH5wFj6IK
NwVsr+1Ye77LxyydHlOH7Z7CBhx0TODl83VZf4/9TGRUzxEuwGJ7Y0hx5Y/PUqLp
4yZeUyp1/zYH8NMGEyhovceVVMysnQOw4IcodWcfe2FKr8DK/ZCHefRu0INEw7RE
Ysl72pzHOvRQGK3kaB7GTiX2eNdJEiwdIWuN5KKp0AJeGP6E5dQ7md42GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEIOMGTDPIbKW2ZpxxkV4fj5ZKYMB8GA1UdIwQY
MBaAFLTmZ8BVfY53qJ/S9nU4eDXJKZA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMt
MTczNjg4NjhlOTRiLzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMtMTczNjg4NjhlOTRi
LzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4BIOsDu
JXKOPTmT3rYgxiW4VLUUtu5lRETq5ZJMVJPFr50QfESE8H2dFgnpbUHumMdOjiLS
0X9zI63KUPOL2cHGWVeOUrig06XTwzUwOOKYwq5Gsl+p/fXBEUisUtAUHO6pQvpu
tZh4iNM8ThO7smhqSFIUxWfWArTP5S3ERPK6hOTDI+RqCMo1cOzRt3UmSSpaoKlW
fWpyDmO7gDlyvnZjedF1j15qpnIEqr2X+vPplt8AOmdZ6KQoEBd9FRTGLpeOLLxo
SmfejncZWzAB0gvt7Gp2YNHwXiYBLTwjhQIahj23psA3pmjVsP7jHlsNWyl38pwE
SI0M451ZPjisjA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:33 2026 by rpki-client