Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: ps7NU0wbtsvkAK3hOeIYqVbQoIjj22pY6NCyFrnPozQ=
Subject key identifier: CE:AF:45:BB:5F:7F:43:A5:00:54:E4:EB:F8:C9:DE:E7:6A:2C:CB:4D
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019D9D75AF3BF2F35FBDFCAC02BB7F772847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 1707
Signing time: Fri 17 Apr 2026 22:00:28 +0000
Manifest this update: Fri 17 Apr 2026 22:00:28 +0000
Manifest next update: Sat 18 Apr 2026 22:00:28 +0000
Files and hashes: 1: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (hash: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk=)
2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: qrigGdFliWX2yU3YgmZaPoR71dWW6r9FxI8G5tW/FVc=)
3: u3rQ39mTeV2kE1STzKrih9_L758.roa (hash: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:af:3b:f2:f3:5f:bd:fc:ac:02:bb:7f:77:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Apr 17 22:00:28 2026 GMT
Not After : Apr 18 22:00:28 2026 GMT
Subject: CN=ceaf45bb5f7f43a50054e4ebf8c9dee76a2ccb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:14:98:77:4b:7f:b9:4d:7b:f2:82:ad:8f:
ad:cc:54:f9:cd:49:16:6a:dc:c5:84:fc:23:80:fb:
0c:68:a2:36:06:a5:77:76:05:d4:d2:d4:5b:10:8b:
8f:f0:9b:52:d7:92:5e:bb:e8:ae:3c:c2:10:c2:07:
1e:3b:9c:2e:c3:7a:bf:42:d6:ae:2a:bf:52:0e:7f:
6e:c4:de:26:02:2d:19:bb:fc:fb:cc:e3:fe:f1:cf:
73:a7:05:aa:ac:75:77:c9:bb:71:86:d3:89:7f:32:
86:30:fd:43:90:e3:f2:f7:e3:15:48:99:6d:49:17:
c0:5b:d7:ef:d5:28:1d:22:87:74:94:ed:b5:97:f4:
8e:0a:4b:d3:9b:f4:51:d8:c3:0d:b6:9d:d2:6c:4e:
d0:e3:af:16:4e:75:9e:6f:cb:d9:31:6c:f6:62:54:
6f:55:93:e0:1f:dd:79:3a:a1:f7:6b:e1:3c:e3:5b:
c7:8b:9a:98:ed:80:8e:0a:37:fa:5f:d0:cf:80:af:
21:73:d7:dd:0f:f9:63:a2:13:12:b1:6c:83:68:e9:
61:18:67:ea:16:15:d6:7c:31:97:97:c2:1d:06:e9:
c8:44:37:68:de:0d:73:b9:18:4a:ea:5a:ca:85:d5:
ad:0c:25:15:24:68:b8:00:bb:6c:a8:d2:31:31:29:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:45:BB:5F:7F:43:A5:00:54:E4:EB:F8:C9:DE:E7:6A:2C:CB:4D
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:1b:6b:c7:b3:25:85:f3:02:e1:d9:eb:95:ab:63:4e:06:
cc:ff:79:07:a6:6e:d6:ac:7d:26:d7:50:6d:bf:14:10:bf:ad:
03:00:f7:b6:ef:ff:06:9a:95:39:9f:fd:20:e7:b4:5d:f1:0f:
cb:25:a1:1d:c5:7b:12:18:6d:c0:60:35:bc:38:0c:e2:b5:01:
bb:8a:26:c2:49:96:0c:e4:4f:6b:0d:ce:40:59:e5:a0:f3:7c:
7b:bf:1a:6a:8d:55:4f:4c:75:57:d6:54:16:5c:58:26:8f:55:
21:9a:95:1c:68:62:a5:8c:9c:ba:9f:7f:cc:01:71:b9:3a:4c:
2b:96:2a:56:4e:51:ff:41:6a:1f:4a:93:8e:88:30:6b:7d:e6:
95:3c:df:20:1d:8f:9c:46:c9:86:99:17:7a:6b:2f:11:a2:f7:
b9:fc:46:b0:03:6e:ae:a9:eb:1f:be:9d:97:41:65:a0:fe:d2:
ce:e0:4d:d0:04:20:28:54:c3:3f:09:bc:15:26:75:8e:2f:e2:
83:46:90:6c:24:9f:52:70:63:d3:4d:37:db:eb:62:61:57:1b:
12:86:5a:e0:d9:9e:32:ec:86:52:1f:22:b0:f3:ac:1a:a5:c0:
c4:55:9f:f5:69:36:c7:ea:10:ba:42:98:9f:33:b0:5a:aa:fe:
52:2e:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:33 2026 by rpki-client