Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: FjvuUbBJMcXzTBDEgi3GonUPm7gzsPG/J/30cWc4RE8=
Subject key identifier: 62:A2:6F:3E:64:FA:F0:48:16:8F:65:AA:44:84:E1:6B:0B:60:F6:B4
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019D9AAC363BC554310B075C0650F1521EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 08EB
Signing time: Fri 17 Apr 2026 09:01:10 +0000
Manifest this update: Fri 17 Apr 2026 09:01:10 +0000
Manifest next update: Sat 18 Apr 2026 09:01:10 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: /rZCi0LGB5y10YmtGkMQP6TZy4uABuRY2uZzwuEu3ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:36:3b:c5:54:31:0b:07:5c:06:50:f1:52:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 17 09:01:10 2026 GMT
Not After : Apr 18 09:01:10 2026 GMT
Subject: CN=62a26f3e64faf048168f65aa4484e16b0b60f6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:1e:4c:bb:ff:93:d7:b9:b4:d3:6b:57:04:
0e:ce:b8:43:d0:f6:21:57:52:9c:b3:ce:f8:c2:00:
0a:c2:78:56:7a:21:00:c1:b8:05:df:cf:f3:4f:d2:
0b:0b:6d:fe:12:a7:c2:4d:ca:f7:5d:5f:30:c3:d3:
33:15:eb:af:70:38:69:8f:0e:30:f1:98:5e:ac:92:
d0:be:71:90:02:13:c5:73:54:42:e9:1b:48:24:b5:
7b:d4:4e:a9:61:38:66:3b:22:89:3f:f8:c7:2d:74:
13:2d:9f:ef:24:ce:a0:ab:6d:cb:8b:3e:c5:dc:a1:
a5:c6:4f:d4:8d:4d:e9:26:8d:b0:33:35:00:9f:f7:
ba:dc:4c:00:08:df:66:4f:72:6e:bd:bb:f3:2f:d8:
ce:c9:33:ec:68:42:44:3c:92:2e:f8:8a:e6:b9:39:
f9:2a:1f:1b:90:52:72:38:b7:be:3b:e8:ff:f9:96:
5f:83:dc:26:ec:77:49:44:70:8c:cd:ca:60:de:6e:
1f:be:6e:e5:2b:76:50:fb:15:9f:b6:c7:47:35:f5:
85:b3:eb:7a:6a:0c:c2:d4:ca:ef:09:88:94:c9:35:
21:36:37:77:ee:85:1f:bb:7c:dd:81:f6:83:88:40:
d3:a4:af:c9:6a:7a:1b:fe:e2:1e:4c:ec:24:30:7f:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:6F:3E:64:FA:F0:48:16:8F:65:AA:44:84:E1:6B:0B:60:F6:B4
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1a:72:d7:87:ed:50:f8:74:43:db:61:58:c4:09:7f:1f:18:
2c:a0:b3:cd:6b:2d:00:05:09:a2:5f:8b:d5:ce:11:92:a4:05:
45:8d:ee:86:1b:0f:d3:1a:17:20:85:5f:2e:01:57:4e:dd:76:
9d:46:3f:4f:57:cb:ff:da:90:c7:ac:6f:b1:86:95:c5:2d:bb:
10:49:0c:4c:be:99:18:0b:f9:c1:dd:68:35:db:2e:63:d5:83:
29:6c:30:c7:2d:a2:c8:4b:fd:c0:f5:79:02:65:66:5a:c9:15:
72:af:36:0c:95:a8:a6:b8:8f:30:61:cb:9e:d9:1c:1a:fa:eb:
ce:9b:8b:36:b9:33:83:36:db:e7:25:d0:c9:03:58:a6:3e:98:
d8:35:e4:a1:57:06:0e:4f:00:85:c8:f4:b6:85:fc:30:55:f0:
61:b7:46:b6:67:0e:3d:41:2e:6c:f0:70:72:dd:be:67:6d:5e:
69:90:1d:17:92:7e:9a:02:ee:37:8b:6b:21:4f:c5:f2:10:ca:
30:47:3a:12:1b:11:1c:3f:43:bd:ec:5c:51:13:cd:8d:d1:69:
0c:9b:ed:12:0d:a5:49:06:5a:43:10:93:60:9f:4f:0e:ea:68:
35:f8:4e:6d:f9:ac:dc:3b:08:02:2f:49:7f:e7:0b:48:08:14:
a3:61:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:33 2026 by rpki-client