Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: TXD+B9svt7s+MH449aWF1y+qhzxz2xRsVCZKOa2bBXE=
Subject key identifier: AA:58:56:89:4A:77:64:E1:AD:40:36:19:04:B7:0F:5A:57:B0:8A:63
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019D9998F05172A1CA6D733DBB4D2FCD3EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 11C0
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: 8kadOx5P/IiYc8qKQDr/3433yufnDCPOL5F6N3wovKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f0:51:72:a1:ca:6d:73:3d:bb:4d:2f:cd:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=aa5856894a7764e1ad40361904b70f5a57b08a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:91:63:0a:b9:aa:59:91:8c:4c:a5:3a:80:
48:5f:c2:9f:78:a9:5f:57:70:f8:e5:df:95:88:cd:
90:4d:37:1c:93:ef:c5:7b:9e:47:e7:49:89:e1:06:
bf:c5:1f:20:b8:3e:c9:8d:80:73:3e:32:71:3b:26:
6b:95:0f:9f:6b:c8:8c:2f:8c:45:db:93:4d:bb:da:
eb:be:4e:f5:7a:24:88:e2:7e:49:10:53:fd:49:fd:
3b:6a:0c:2b:9a:0f:42:74:c9:3a:df:e6:e3:a6:c8:
b8:d6:5d:d4:7d:a0:fb:e4:5e:a4:b3:99:b2:a7:90:
ac:fa:79:fa:c6:86:df:c0:4b:ed:52:ca:23:42:24:
c2:e2:9c:5d:3c:46:53:c6:ef:ef:7d:f6:11:2a:34:
4e:22:15:0c:74:72:e8:1d:55:2b:29:ae:fc:5e:ad:
2e:79:49:74:d9:87:f9:4c:d3:49:a0:71:e3:e9:5a:
4c:19:38:c2:d1:33:f5:50:2c:b6:98:b1:40:2a:76:
4c:64:d4:cf:c6:88:78:7c:91:eb:51:89:e6:27:10:
47:17:78:f0:1c:54:3e:3f:25:0b:dc:13:f7:a4:9f:
7e:1f:b9:80:1b:5d:61:0d:0b:dc:5d:b2:00:99:0e:
7d:e3:5a:e7:1c:53:82:3e:bb:0a:c0:d6:83:42:48:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:56:89:4A:77:64:E1:AD:40:36:19:04:B7:0F:5A:57:B0:8A:63
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c7:4d:ea:43:47:34:a0:d3:9a:d4:86:98:6c:37:a4:1d:bd:
43:fd:67:cf:5b:8f:ab:15:a2:df:dc:86:51:ce:e6:79:96:fd:
fb:eb:e8:11:d7:23:1b:cb:ad:ce:f9:c9:95:7b:5f:cf:f2:74:
37:52:c5:4b:0a:3e:d9:47:00:ee:cd:b9:fe:bc:05:09:d2:90:
b1:bf:40:76:36:c0:26:ab:9a:42:eb:85:79:b5:1b:45:b2:f7:
1c:0d:37:5f:86:58:77:76:3e:3e:ab:db:4c:bb:f7:7f:94:6c:
9a:d7:b2:96:1a:f1:d3:b2:47:e7:5d:45:eb:f8:6d:26:da:08:
0d:71:45:90:62:26:51:87:5d:dd:70:fd:58:6d:f0:5c:6f:ba:
11:43:f3:8d:e1:bc:41:ce:6d:ad:81:01:7d:45:99:7d:b1:ba:
34:ca:6d:a8:58:91:8a:dd:79:49:f5:00:db:3d:9c:bf:1a:a1:
fa:21:87:27:4b:d4:ca:d4:d0:5c:20:b8:75:65:1d:8c:89:94:
ac:84:04:a2:6d:06:2f:7c:76:8e:aa:b8:62:22:cc:fe:0a:7d:
a7:28:38:b8:20:ad:c3:3a:10:4c:16:99:eb:19:5f:8d:62:1e:
4d:da:ec:4d:21:01:c6:02:38:d5:6a:ac:00:4e:ac:82:64:08:
6c:ab:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:40 2026 by rpki-client