Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: YKaiA8hUrw0N7QPZPGPoHII2vjCLMGegWDOGY5Vfjig=
Subject key identifier: A1:EF:91:64:97:6E:B9:7B:04:2C:32:25:0C:75:44:B7:1C:40:0A:3C
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019D9A3ECB204D919915E5F187C4F720C56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 1158
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: W7PszGuLo4ZPHrxqpbCi40rggbu5lOLarKvUiSYihB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:cb:20:4d:91:99:15:e5:f1:87:c4:f7:20:c5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=a1ef9164976eb97b042c32250c7544b71c400a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:ec:77:b0:46:51:f9:44:28:c0:d4:84:85:
51:b1:eb:98:d1:4b:d9:c1:51:e7:1b:2e:3b:84:ff:
e7:79:51:b0:f1:54:51:80:96:63:43:eb:4a:f7:5d:
52:fe:df:79:06:a4:c9:ec:84:29:22:c9:98:44:3d:
62:1e:70:0a:e8:72:77:b6:60:db:12:aa:ba:cc:31:
cd:fa:8e:02:7d:e8:32:ee:cd:7c:f8:a9:f7:5e:c4:
5e:bf:87:56:f2:ab:af:3e:b3:94:3c:5c:a0:2d:f8:
04:8d:8f:44:b3:12:03:00:51:68:b4:60:de:95:2f:
53:2c:54:38:34:17:0c:5a:6d:7a:7a:b5:7c:e0:06:
86:b0:9c:9b:3a:1d:95:8f:e4:1d:3b:a8:df:c0:b5:
26:a3:c0:95:8e:1a:98:45:ce:ab:83:91:09:54:4d:
f8:44:8d:c7:39:aa:79:4a:05:49:30:af:6f:b4:71:
c1:c3:cb:68:8e:0b:6a:60:e7:79:95:c8:81:9e:90:
2a:f2:28:bd:f3:70:a5:75:9c:0b:a4:04:bd:87:00:
04:71:9f:e2:80:38:aa:df:a8:70:17:fb:ec:2a:20:
d7:a0:0c:fe:80:f3:d9:b5:ca:4a:de:75:f9:63:c9:
39:df:81:32:30:03:7a:03:fd:19:cd:97:0b:08:e0:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:91:64:97:6E:B9:7B:04:2C:32:25:0C:75:44:B7:1C:40:0A:3C
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:29:d2:25:18:ca:a0:81:61:5b:90:36:7d:b7:00:fd:53:5e:
49:ee:49:41:e2:8b:95:ad:bc:c9:ed:42:c2:5d:57:98:a5:ed:
4e:2c:2a:f7:1f:1f:9c:60:b9:38:0d:42:14:5d:8c:72:03:5f:
fb:9e:ee:74:9d:c4:4d:b9:a4:37:0d:b6:c0:77:56:0e:f1:ed:
2d:d5:7e:ad:d7:65:c9:ab:7b:a5:25:29:03:ed:e4:43:2f:6b:
c8:ad:8c:68:bf:4b:71:c8:75:b4:ef:41:ad:bc:23:9d:b1:6d:
a5:32:47:71:cb:ca:4b:8e:4a:5c:1f:66:b1:96:c0:13:2c:8a:
ba:f1:14:50:7c:15:ca:2a:7a:20:d9:24:6a:39:cc:2e:fd:d8:
d7:53:f4:bd:bf:a6:b7:86:c1:91:fc:bb:e8:58:b4:1e:e5:30:
c9:ad:0f:8d:46:e3:13:51:cb:e1:86:ae:a5:c9:df:0f:5b:b1:
81:b6:44:50:d5:96:4b:87:96:15:6c:fd:9f:a4:27:ec:84:de:
87:33:45:c4:f1:51:02:12:f5:e4:d3:e2:8d:c1:2b:ac:22:20:
6e:97:38:70:4e:46:43:6b:fa:4e:74:2a:78:02:ec:e3:b5:d5:
28:d9:ee:42:24:b7:4f:28:e4:66:3f:fa:52:04:b9:8f:70:9f:
e5:7a:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:07 2026 by rpki-client