Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: i/NNUCXzvosYntFkCbmWsO1Z+67Xrwp3TYZebcco4jU=
Subject key identifier: 96:71:60:C2:67:9D:EA:0B:43:C6:BB:8C:3E:35:BD:06:52:87:7C:F1
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019D9C9A9BBD78F93E8CF7C748EF8F824B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 08EC
Signing time: Fri 17 Apr 2026 18:01:11 +0000
Manifest this update: Fri 17 Apr 2026 18:01:11 +0000
Manifest next update: Sat 18 Apr 2026 18:01:11 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: Y2RZ/GMeraulBwub38BuGXEz2jS0PrGJkCuLfw4E0HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:9b:bd:78:f9:3e:8c:f7:c7:48:ef:8f:82:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 17 18:01:11 2026 GMT
Not After : Apr 18 18:01:11 2026 GMT
Subject: CN=967160c2679dea0b43c6bb8c3e35bd0652877cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:21:0e:f0:10:5d:00:05:5f:f5:53:d1:4d:
52:cc:47:9e:fa:a0:dc:88:b0:6c:b5:5b:ac:b9:ca:
02:53:d0:21:10:42:7e:f0:b3:f5:93:ec:b6:3b:e0:
42:f1:e8:45:41:03:0a:25:1a:f7:c9:dd:16:c2:d6:
d9:ff:67:f8:0f:10:23:72:a3:ef:b7:08:80:92:6d:
e2:32:0a:ab:63:5e:40:b0:e2:3e:24:d6:43:94:17:
11:44:89:35:5d:5d:fb:21:68:44:3d:29:90:a3:c8:
b7:cf:69:66:21:2e:76:64:40:30:86:07:55:f5:3d:
ca:40:08:6f:99:b6:f3:bd:88:f6:4f:46:c2:ec:d0:
6c:b5:78:0d:4a:01:62:65:d6:2f:ce:58:ab:59:3f:
6c:91:9c:6f:56:0b:fa:87:77:be:1e:2c:57:e6:43:
d1:b5:d5:33:ff:fd:82:58:08:45:d0:fe:c0:73:d3:
25:81:f3:11:93:77:98:37:40:2d:7a:6c:5e:96:d6:
d8:6c:89:14:0f:1e:da:e3:72:a8:f7:7a:c2:54:1c:
fb:93:0c:4b:8a:5e:12:54:eb:bf:b1:68:1c:27:ac:
22:de:02:26:bc:77:3d:72:7a:72:59:c2:97:a2:80:
ce:1b:36:dd:a9:b7:2e:a1:7b:13:69:40:1a:3d:5b:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:60:C2:67:9D:EA:0B:43:C6:BB:8C:3E:35:BD:06:52:87:7C:F1
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:01:48:c5:7d:67:2f:ca:46:6d:db:9a:09:1b:4d:54:e3:
de:4d:5a:63:75:40:06:84:bb:98:0b:c3:99:33:04:c3:f9:11:
a9:f6:3e:c2:92:a3:71:36:f5:7f:2d:0e:a6:ee:59:77:20:72:
12:8d:bf:84:75:2a:b0:d9:2a:35:11:4e:99:ee:fb:28:01:6f:
2a:b3:a3:d1:b5:80:dd:39:ba:f2:9d:5e:37:1f:1d:39:89:21:
09:06:ec:ea:08:96:bf:75:4f:ea:ed:b9:e0:99:17:fe:c9:c0:
16:a6:5a:ad:f5:4c:60:da:07:5c:4e:00:05:49:30:b5:11:62:
bf:89:80:65:23:0b:30:21:0d:05:bb:84:ed:60:20:d9:c2:b1:
64:e3:97:11:1a:96:e2:90:f7:a3:4f:cc:98:d6:e5:7d:6d:a7:
18:95:5f:55:bf:f7:a9:ea:3f:fd:ac:d9:2e:8f:26:24:bd:fe:
ba:43:4e:1b:1d:fc:6c:16:13:67:89:ce:2e:c0:82:48:35:db:
27:8b:23:c3:7e:e7:d6:52:44:cc:3e:9e:02:34:eb:91:2b:af:
0c:e2:66:fa:61:ac:9c:34:fb:ff:76:e0:11:16:db:1e:d1:8f:
d4:96:ba:25:ae:e2:fd:62:b2:47:ea:61:00:99:63:9a:5e:61:
3c:14:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:01 2026 by rpki-client