Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: dT6INFavOo4wzJRXep7HTf+Htxyt8Uvgh3NHR12OlRs=
Subject key identifier: 8E:99:F5:30:87:03:97:9A:A6:7E:02:56:7F:81:71:37:54:65:B5:E3
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019D984FE11801B13351652D710F1F406E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 11D6
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: UnX/k4iYUnw4vpH42yp5lS7Afl+0Y65g1srZF8wfj6U=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e1:18:01:b1:33:51:65:2d:71:0f:1f:40:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=8e99f5308703979aa67e02567f8171375465b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:6f:14:1c:96:3c:00:bb:f5:9d:e7:99:a6:
e2:b2:1e:c3:55:ed:f2:f8:b4:e1:d3:e5:20:00:a5:
9c:e7:33:c2:14:e0:20:c9:73:cf:2b:72:5a:05:77:
c3:60:21:2b:b2:7b:67:c6:59:37:2e:cf:cf:4a:29:
95:7f:77:83:fd:75:99:17:12:8f:8a:a0:af:8e:d5:
d3:66:e5:9d:9d:e3:a3:5b:13:9f:3d:57:11:9c:72:
e9:e7:2e:69:eb:a2:23:d5:e7:de:02:2e:b4:b5:e1:
59:e5:69:b0:29:47:0b:dd:d6:b8:84:98:75:8c:ca:
43:cf:b8:02:24:1e:ce:d8:3d:5e:b8:7e:b8:c8:ac:
9e:bf:7b:cb:c6:b9:a6:12:b7:83:85:8f:a7:be:93:
78:66:86:3b:3c:f9:b9:82:e2:55:02:a0:1b:19:ac:
7f:43:c6:f4:f4:fd:5f:e8:77:4c:4a:0a:2d:af:30:
0b:8e:55:fc:5d:3a:90:c6:ba:05:17:e2:d8:83:4b:
ac:75:df:c4:e7:0f:b1:d2:38:14:7d:2f:88:59:1f:
bd:9d:fb:e3:7e:79:9d:fb:b1:12:f9:d0:71:7c:8c:
5b:60:db:79:28:18:3f:f0:01:94:95:c6:26:a3:e9:
20:e0:d5:50:8e:9f:e8:2f:d6:98:df:d0:9e:0d:14:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:F5:30:87:03:97:9A:A6:7E:02:56:7F:81:71:37:54:65:B5:E3
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:cd:e4:1c:cb:f8:8f:74:fb:5f:37:21:84:16:71:38:c8:
67:d7:da:14:c5:ec:55:24:61:d1:35:29:b2:5f:25:8e:5d:83:
29:68:3f:fd:09:f6:ab:a5:49:5f:1a:84:b5:03:bf:80:1a:7d:
1c:f5:c3:52:70:50:28:6f:81:f3:83:fd:62:9d:3c:7d:47:db:
62:1d:c6:67:3f:b4:f5:9c:50:a1:bf:62:bb:98:4a:d7:dd:a7:
10:04:0c:ef:34:db:04:29:f6:15:36:d8:6c:1f:9e:64:d0:7b:
82:a0:57:e4:fc:67:53:a8:69:4f:b4:23:bc:2a:17:dd:57:2d:
db:94:25:c3:39:43:e9:3f:56:63:85:30:9b:72:72:e3:e9:98:
de:cb:36:00:e2:19:0c:b5:1d:cb:f1:1b:a3:1f:fd:29:9e:e6:
ae:72:b2:9c:75:2f:e6:c3:12:2e:ac:a0:d0:38:47:6b:b7:b6:
08:37:b0:b3:33:59:57:1c:22:7d:8c:5d:5f:57:7c:06:14:54:
ea:7f:1d:7f:d3:14:51:8e:a6:b5:34:bb:83:69:1b:ad:75:3d:
d9:c2:6a:72:b5:d5:4d:70:f4:04:d8:11:e8:c7:47:a2:67:9f:
55:94:0e:76:c3:68:a5:7f:59:93:d9:ef:cd:bf:a0:7c:28:fa:
b2:98:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:19 2026 by rpki-client