Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: rqcqWqH1aQXd9wix8bOoi+QdeD5wtMY5/TLMXRm2EHU=
Subject key identifier: 63:30:CB:A9:B9:5D:6E:A5:99:BC:7A:8F:91:73:7F:39:C0:3B:39:EF
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 019D97E1FEBB88D8F7ECD56BF741DA91DDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:01:03 +0000
Manifest this update: Thu 16 Apr 2026 20:01:03 +0000
Manifest next update: Fri 17 Apr 2026 20:01:03 +0000
Files and hashes: 1: jl1Gy7ca20_j2KWNsOiG_HyzyKw.roa (hash: ErKY/69zjGb+XdFCBodBK2CXOv9JRDcTgwXpmXZI5JY=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: n6X7DHaiclj5qfMk9m6TSOsMw8fQd1r5UgeCqZI0r7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fe:bb:88:d8:f7:ec:d5:6b:f7:41:da:91:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Apr 16 20:01:03 2026 GMT
Not After : Apr 17 20:01:03 2026 GMT
Subject: CN=6330cba9b95d6ea599bc7a8f91737f39c03b39ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:94:7b:1e:3f:ff:c2:b9:cf:0e:4e:4a:58:
95:7d:8a:d4:56:7c:4b:49:94:6b:3b:77:27:07:f9:
9e:48:8c:82:47:d8:4b:d5:6e:05:8f:85:ac:53:fa:
44:0e:7e:2d:08:d3:bc:22:62:20:0b:c4:79:d7:42:
88:46:56:1a:f5:14:ab:24:bf:59:33:7e:0d:43:d3:
1c:79:a3:b4:ef:17:8c:67:80:d8:c8:5f:a8:3a:59:
31:21:1b:88:f7:ac:26:39:e6:93:a7:93:1c:3f:cc:
76:e0:f9:c7:6d:d3:12:60:63:ed:eb:ed:ce:5d:37:
95:5b:d2:80:f5:cb:f6:55:e1:1e:ea:b3:8c:06:bc:
30:8a:af:68:0a:bd:8e:d0:aa:2c:e1:a8:3a:b7:86:
33:15:7a:5d:77:ad:e3:d2:a7:ea:64:29:60:7f:3d:
01:fb:61:87:3f:98:31:d1:45:b7:09:07:41:bc:3a:
64:05:7b:6f:b4:91:07:cf:f6:d6:42:83:0e:f9:51:
82:e4:35:b2:b3:6b:c1:15:ac:8e:bc:5a:b0:f7:85:
7a:2b:06:e3:b4:0a:6b:89:9e:35:91:a3:3a:22:fa:
31:cf:62:07:b5:a7:e6:db:bd:e6:5c:a7:98:58:78:
4a:2c:77:7b:f0:98:05:9d:8d:11:f5:d8:77:9d:92:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:CB:A9:B9:5D:6E:A5:99:BC:7A:8F:91:73:7F:39:C0:3B:39:EF
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:85:9f:d2:be:c1:b4:b3:d1:a5:64:a0:9a:4f:68:9d:b6:
63:0b:72:46:2a:94:89:72:75:d9:5d:ce:f2:f1:c2:52:f9:bb:
f5:8b:9d:c7:bd:d3:25:59:f5:12:49:02:8f:dc:48:bf:81:4e:
c5:0a:08:64:4b:f7:f5:39:fc:1c:6d:fc:35:1e:59:51:98:00:
52:73:72:81:a6:d6:b9:97:d1:0d:c2:f5:86:e7:78:36:77:75:
be:50:de:6d:5e:26:c4:c3:f6:7f:b9:13:f4:42:32:9e:b1:fc:
1a:b7:bc:29:3b:f6:a4:02:9c:1b:cf:07:86:38:d2:a6:21:af:
1c:9b:80:4e:8e:2c:bf:78:0d:7f:00:48:87:19:80:42:54:26:
03:04:20:46:a6:c9:5b:35:4c:a0:bc:0f:6c:6c:99:58:45:48:
bc:33:ef:ac:21:39:63:d9:73:c6:c5:8f:ae:35:38:b6:5e:a8:
45:cb:3e:d2:01:68:29:c9:83:1b:90:d9:e7:c6:1e:4d:a5:f2:
64:ff:8d:35:df:25:e4:52:6f:fd:da:6c:f8:b1:30:f9:a9:02:
db:3a:2c:e9:5d:20:89:53:b5:aa:c6:95:46:30:20:61:d3:1f:
ce:dd:c5:9b:77:ce:48:fe:c3:4f:a3:b4:c5:3c:4c:c1:b1:a8:
14:14:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:37 2026 by rpki-client