Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: nYoA1Qm77tWgk+qYZQFOOeYyqFsbNZwa048tBx18NwM=
Subject key identifier: AD:C1:05:91:EE:CD:F4:D5:4A:42:8D:2D:9A:08:4D:D8:FF:74:0F:85
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019D9AABEFBE8B95C3ED12D69DDF165D5B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 09:00:52 +0000
Manifest this update: Fri 17 Apr 2026 09:00:52 +0000
Manifest next update: Sat 18 Apr 2026 09:00:52 +0000
Files and hashes: 1: PPMSN5ftVbVmFA7MLiS8HWouZbQ.roa (hash: HtUbwNMUWX3DsqRNwPU8T/yihNDfkh2LcL+11x+HCT8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: q7r+IneaSZzthJtWJLhmN7uKgjrB+/evWrtx0XVv5po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ef:be:8b:95:c3:ed:12:d6:9d:df:16:5d:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Apr 17 09:00:52 2026 GMT
Not After : Apr 18 09:00:52 2026 GMT
Subject: CN=adc10591eecdf4d54a428d2d9a084dd8ff740f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:52:db:89:74:1a:73:99:28:81:86:7d:d0:
55:a5:a1:24:d2:97:49:2f:6c:61:e6:99:47:83:94:
db:de:bf:3a:73:f7:c7:6a:2d:3e:21:a5:07:20:b6:
c5:ff:7b:6f:c8:f4:70:7e:13:58:01:27:3c:09:a6:
2d:c9:80:53:19:e9:28:87:c3:fa:a0:2b:97:70:9c:
ca:3c:ae:d7:c7:bf:85:6a:a4:f8:34:5f:34:b2:e4:
8f:f9:0f:f0:3a:d8:31:7c:d8:7a:00:9d:c9:9d:01:
97:c2:52:17:84:af:3c:18:84:ac:cb:b8:12:7c:1f:
e4:b7:66:8d:b2:4f:be:48:73:3c:c4:d1:b5:8a:bf:
14:eb:c4:a0:c0:f5:08:ac:9e:ff:dc:95:8c:14:d5:
b1:80:38:60:19:26:13:70:3b:56:83:57:03:49:b9:
55:bf:ef:b4:44:54:5d:c2:42:fd:6c:02:0d:d0:00:
60:52:a5:14:b5:d8:81:7d:98:91:32:3f:9e:3a:45:
9b:b1:f9:10:dd:b8:06:f1:69:55:10:fe:da:68:90:
43:82:0f:74:f8:81:e0:a2:d3:d4:a1:3e:06:c9:cc:
89:6a:86:6a:51:8d:40:d1:0f:ab:02:50:bc:3c:8a:
ca:53:a1:be:fa:c5:ff:6e:49:4d:d0:7c:0a:e0:cf:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:05:91:EE:CD:F4:D5:4A:42:8D:2D:9A:08:4D:D8:FF:74:0F:85
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:78:ed:c4:79:25:e8:e8:74:e1:b9:18:b2:76:ca:20:3f:3c:
c6:da:f1:da:40:c1:85:34:b7:04:ab:fa:67:d3:7b:b0:67:1d:
a2:a7:d8:f1:95:0d:93:7b:78:77:36:89:55:1a:13:41:45:3d:
21:92:14:35:c0:53:18:26:7e:b6:43:43:b1:4e:14:37:0e:28:
b8:03:39:54:a9:65:66:72:4e:d3:8e:6c:f8:19:46:38:ec:0b:
ee:7e:82:d4:92:03:bd:d1:43:24:62:23:dd:cc:b7:6e:35:31:
ce:a7:3b:50:12:48:ed:7c:a2:27:00:e7:77:02:14:1d:cc:fd:
23:f6:70:79:86:85:ce:86:83:12:74:8a:a6:eb:de:15:cb:dd:
47:2d:38:08:df:65:fa:13:4a:0a:9d:08:ef:62:a3:4b:a4:e5:
5f:56:2b:b4:06:87:a1:f1:03:22:3f:62:2a:6b:c9:3d:7b:42:
9c:7d:7d:82:3a:52:d5:48:75:37:81:29:cf:22:6e:d1:07:06:
74:13:70:8e:87:91:e6:38:53:7f:bd:76:fb:44:e4:6f:a7:38:
bb:ff:06:dc:80:0f:42:c6:06:c1:c0:4d:b2:2f:e6:f8:98:29:
e0:98:69:c2:8e:2b:e2:99:d4:bc:a8:d0:ae:19:f4:ef:ec:23:
91:cd:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:06 2026 by rpki-client