Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: 5pGogZrOtjQOo1mrc09mS0CXpfDf/u39/7kQwa2MTmQ=
Subject key identifier: 42:58:E6:F2:69:0D:23:70:D7:FF:51:34:F3:98:4C:FF:D2:AD:9D:95
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019D9A3DE32399CD4ACE44022D049EB1F71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0917
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: HEZSTK/mlrK6imADATasbF/FufIuFJtzUNqdB/bYMkY=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e3:23:99:cd:4a:ce:44:02:2d:04:9e:b1:f7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=4258e6f2690d2370d7ff5134f3984cffd2ad9d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:c7:eb:b7:44:69:24:58:f0:ce:81:d0:16:
bf:b8:48:0a:7c:d7:30:9b:11:09:e7:f0:90:0e:42:
5d:90:62:3b:a8:63:4b:3b:eb:ea:92:74:98:07:06:
33:64:42:98:d3:5d:ae:7c:55:7a:56:a0:9c:15:17:
e3:d4:ea:03:3f:48:53:34:40:99:22:f4:a0:47:85:
26:93:d7:5e:0d:db:09:23:a5:41:5c:31:50:0c:24:
5e:0a:bc:44:c7:4f:bf:12:8c:69:45:07:99:7e:dd:
93:4f:89:fc:70:05:50:6d:d7:e1:fc:d0:50:80:39:
01:85:d2:1a:13:2b:bc:bc:fa:16:56:f2:fa:bd:c1:
3b:6f:60:33:6e:58:08:27:f3:71:f1:6c:7d:ec:b6:
4d:31:b9:39:ed:44:49:7e:25:ba:1e:8c:25:c6:23:
96:42:1c:16:63:83:83:35:df:7c:71:d9:8e:05:ff:
16:a1:8d:f0:72:ba:26:cc:ac:3d:7c:4f:9a:d2:32:
b8:5c:30:62:26:69:8f:7a:93:b1:df:38:37:4d:7d:
0d:0e:79:35:6f:5c:18:45:ec:24:29:47:dc:48:c6:
d8:14:2d:23:b4:48:e5:ec:15:40:5a:e5:78:3b:ad:
87:d9:e8:af:1d:b7:13:b9:5c:87:6b:b7:87:13:e2:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:E6:F2:69:0D:23:70:D7:FF:51:34:F3:98:4C:FF:D2:AD:9D:95
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:80:66:3a:6d:10:3b:18:95:36:fb:34:11:e3:84:85:5e:
b2:7b:58:62:47:f9:32:0d:20:b6:5f:76:67:eb:aa:ad:9a:82:
ec:f7:36:f5:36:bf:ef:fd:28:bf:b2:8f:94:a2:48:55:f0:4d:
91:1a:b8:f3:7c:8e:47:94:6f:d9:d1:77:78:a5:f2:b3:cd:b2:
2b:bf:8a:0e:b3:47:27:e4:74:fc:75:71:56:2a:67:76:19:15:
23:66:2e:59:66:cb:7c:5b:19:c4:64:d7:2c:78:98:1c:db:30:
34:09:5b:6f:f9:5d:38:ae:00:30:70:83:bb:86:d8:d0:8f:b8:
14:39:4e:e0:38:84:a5:7c:4a:21:09:01:fa:c4:26:71:48:21:
45:67:97:29:34:31:40:e8:e7:96:91:6f:54:0a:94:8e:0a:f7:
05:47:c8:2e:62:d0:3a:76:02:86:11:3f:c7:c2:4e:86:e9:de:
ce:d8:d9:76:8e:5a:62:b6:d7:77:0f:a5:7b:c7:fd:e0:38:68:
91:2b:fd:f4:80:e2:97:06:87:fd:6e:47:65:0d:95:e1:0d:37:
33:0c:10:aa:9d:5d:1d:fe:73:36:90:fe:bb:59:75:e2:a7:6d:
44:8a:e3:68:e4:49:dc:6c:6a:b1:aa:f6:76:f2:1a:67:e3:f3:
a1:f3:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:32 2026 by rpki-client