Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: 5iEvSvasI6tylEyR9ZGtTCY8MGmMA44r28h7pRfGxmg=
Subject key identifier: C8:D6:58:02:B1:32:7B:8C:17:3C:2E:21:E1:BA:D9:73:05:1C:11:0A
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 019D98F4DD92E861EF8061BBA69F9F5525D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 0832
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: EOvpij8XFx8KVtCekvhCjuSa9A2yGmTaNl28cr+8v6A=)
2: xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa (hash: xT5SlCyi7OJT7hItkCDdSCgLR6moh28cNvwOG2rN9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:dd:92:e8:61:ef:80:61:bb:a6:9f:9f:55:25:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=c8d65802b1327b8c173c2e21e1bad973051c110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:8a:f9:b9:5b:88:ee:0e:0c:75:bc:4d:37:
f5:5d:38:d1:5a:63:7d:41:d6:32:da:20:ca:08:e5:
be:5a:7c:80:c6:48:3b:50:84:c9:80:64:4e:03:f5:
f0:8b:67:1c:90:04:e4:13:db:94:a9:dd:e3:07:e0:
9b:a1:02:61:76:9d:d2:84:7e:ac:60:6d:44:6a:eb:
27:92:10:47:9a:6f:97:71:cb:a9:95:20:3d:d3:0d:
99:b7:d4:59:17:13:c8:2a:08:5d:1e:fc:23:f5:5f:
26:fa:47:c7:d1:52:58:2b:e8:f0:d7:9d:29:f2:13:
e8:82:69:c2:78:1f:16:59:91:2d:34:e8:22:09:6c:
ab:3c:07:46:38:e5:73:89:de:14:36:1b:9b:6b:bc:
b3:41:8a:78:29:f0:9d:9a:9c:e6:ad:f4:70:77:af:
6e:30:a7:01:4f:25:2c:a4:6d:be:d3:ce:83:3d:ea:
8b:b5:95:33:2b:a2:dd:9d:2a:74:55:7c:b8:21:d2:
5a:2f:a6:a8:99:f8:e3:fd:4e:72:ac:80:20:eb:57:
e6:c9:60:e2:3f:bb:9a:04:b3:1f:87:af:2a:cd:2d:
02:d2:11:8b:60:4b:06:48:7f:c0:fd:ac:1f:fb:70:
f2:36:a8:28:25:8e:7e:e3:5d:b6:1c:fd:8a:d5:9d:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:58:02:B1:32:7B:8C:17:3C:2E:21:E1:BA:D9:73:05:1C:11:0A
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0f:b9:8d:0d:cf:2f:55:0d:2e:26:bd:7d:7a:f7:e8:1d:06:
a9:8d:96:3a:c3:17:ea:c1:a1:c7:74:b1:81:e2:01:7a:4e:b1:
7e:b7:b0:25:dc:57:50:77:c2:94:73:76:61:42:b4:64:c2:3d:
04:c1:da:2e:27:59:9c:71:85:ec:ca:31:f5:4e:5f:92:8c:6c:
77:65:6d:9e:f5:7b:5a:65:ac:e5:62:aa:73:8d:e5:82:a4:3d:
49:0d:2a:77:cf:c9:5c:b9:be:87:58:f2:0c:79:ae:ba:00:54:
36:a9:d0:b5:cb:a6:1c:8d:d1:d6:ca:b7:2f:94:69:c1:72:ef:
a6:7f:c3:b5:55:99:27:1b:87:1b:c2:2f:3d:21:54:90:a9:1a:
5b:7b:5d:4b:20:50:a4:46:1a:c1:33:4b:04:81:93:c1:94:8f:
69:52:48:51:91:11:56:8e:3e:73:7a:c7:61:e5:0b:b3:bd:37:
4b:a8:a8:77:27:5a:80:db:6f:c5:bf:e1:2c:bd:2b:65:6d:86:
03:7f:6a:b1:ea:ef:7e:bb:4f:a3:1f:a8:2b:09:4e:8c:1a:a9:
aa:b2:69:ba:1e:02:ae:00:b8:f9:42:01:ad:a2:90:a7:1f:2e:
31:e4:af:4e:bc:bb:a7:68:83:15:a1:78:a8:b1:e9:02:14:92:
fe:96:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:12 2026 by rpki-client