Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: oVEdwPU0ODHuHWTH0YA7Mp4KOixcYvSs/fIurbj1+CA=
Subject key identifier: 37:C4:F7:1C:BC:A4:25:8C:7F:CD:71:35:3F:48:FD:63:93:D2:F0:C0
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 019D98BD9FBCC870A8F002735C159467C089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 14A2
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: gH8nhVdvVz6RzU/8zrs/+1YrKUhTXLdPojxIA1HywNQ=)
3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9f:bc:c8:70:a8:f0:02:73:5c:15:94:67:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=37c4f71cbca4258c7fcd71353f48fd6393d2f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:72:69:b4:3e:d5:59:df:2a:ba:8e:8e:e5:
c5:35:ed:c6:70:01:28:ef:31:a5:69:52:3b:52:17:
9d:e8:b1:fd:bc:f6:4a:d2:d5:2e:20:81:79:09:bc:
bf:67:7b:c5:be:9a:37:b4:21:f8:b8:6c:15:63:bf:
ac:dd:ea:d5:20:44:8c:7e:87:ca:29:43:81:6e:41:
2a:35:6e:c5:57:c3:4e:94:db:7d:7b:2e:96:a5:b0:
40:72:c6:a1:ae:74:0b:0a:81:72:b0:a8:0b:f7:21:
06:66:a8:21:36:9d:07:cc:17:69:65:bf:b6:b6:52:
e8:4c:9d:ce:4f:e9:6b:bb:e6:36:54:f2:f0:27:0e:
97:09:3c:a5:93:14:91:55:37:3f:b0:a2:75:79:99:
0f:83:0a:86:09:5a:a9:c1:3a:a5:50:72:14:61:18:
08:e5:51:fb:62:84:55:fa:c7:7e:84:d6:0c:1b:a2:
38:66:86:3d:02:b2:b5:89:52:71:b9:51:31:23:98:
eb:37:42:e2:ae:db:cb:5d:ae:f1:44:f6:dc:2c:c6:
13:f2:2e:a4:fa:82:f1:21:57:48:bc:08:8d:d6:4c:
83:46:ea:33:21:23:a3:6d:8a:9c:72:d0:a7:f8:00:
0b:9d:10:53:b7:40:19:1e:4f:5e:34:0d:37:35:68:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:F7:1C:BC:A4:25:8C:7F:CD:71:35:3F:48:FD:63:93:D2:F0:C0
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:2e:77:6c:c0:1f:ad:c5:12:ff:33:50:42:f5:53:e7:7b:
92:ff:0c:9b:a9:8a:89:d6:a3:d0:89:5b:c1:34:7b:47:07:ed:
60:82:24:8f:f7:23:26:16:16:c1:ca:1c:8a:1f:db:f3:d8:42:
c6:a7:23:8a:5b:96:06:57:bd:c8:4d:27:3d:28:8d:26:0e:ee:
fe:79:c0:1a:10:5f:44:52:71:2c:60:34:ec:41:0a:4f:b0:5c:
4c:28:4f:9e:57:c3:e7:34:82:db:ce:6f:7f:d1:2f:df:3a:f6:
0f:75:38:e0:69:a5:32:04:ef:f2:1a:e2:2b:33:e3:7e:a7:2d:
c1:b4:fc:e5:9b:97:62:15:50:00:7c:dc:a1:8e:e9:db:d5:8b:
96:df:d5:d9:b1:65:5f:15:ed:7b:f4:f7:6b:85:41:89:38:b2:
f0:26:e2:af:73:ba:ae:69:45:f6:9f:ff:0f:b2:9b:dd:1b:a6:
9a:ac:9d:4d:fd:37:20:f0:da:85:9f:3b:04:d3:3a:ad:11:b7:
08:7f:a8:90:a8:75:52:c0:3f:21:57:b0:19:8a:d8:0b:61:dd:
1a:90:ba:db:2b:54:52:02:b3:87:7a:5b:72:42:e8:de:c4:52:
d9:d7:21:36:2e:13:43:6c:db:54:eb:dc:55:20:da:d1:be:ed:
e6:c9:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:03 2026 by rpki-client