Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: 1sN2/iZ1liGLiyF30JkktM9O8j9c5oK5wOBQmuRKeJk=
Subject key identifier: BF:C6:59:89:CC:D3:19:54:EE:0E:2F:D7:13:86:49:56:A0:19:AE:59
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019DA4C15F2F92394CFB9B4F45EA37A282F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 08:00:29 +0000
Manifest this update: Sun 19 Apr 2026 08:00:29 +0000
Manifest next update: Mon 20 Apr 2026 08:00:29 +0000
Files and hashes: 1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: EFFZ5upk8GskA/7te7Xtf0pk6qrcQ0Ea1vMyyI4m5LU=)
4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:5f:2f:92:39:4c:fb:9b:4f:45:ea:37:a2:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Apr 19 08:00:29 2026 GMT
Not After : Apr 20 08:00:29 2026 GMT
Subject: CN=bfc65989ccd31954ee0e2fd713864956a019ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:1d:14:9f:d8:3d:54:e2:ad:66:f3:72:44:
19:da:0e:11:bf:5d:61:08:47:88:b2:48:3e:0c:59:
12:e3:8d:89:43:cf:fa:9a:ce:81:e7:85:2c:19:3c:
9a:f2:a1:62:ca:23:7d:22:b1:4c:39:06:94:8d:d6:
5e:8d:87:2e:3f:e1:d7:2e:f7:0b:00:7d:ef:6c:e9:
68:03:7f:6f:3e:f9:53:67:fa:55:da:45:51:83:2b:
bc:a6:5a:da:90:2b:f5:90:e8:94:7b:31:57:bb:37:
03:d3:a5:92:72:b6:0b:b4:1a:77:b9:f2:14:cc:6c:
77:2d:a8:09:bf:49:25:06:f3:15:07:41:bf:91:05:
12:a9:5c:60:2a:f9:0c:71:e0:b1:d5:9f:d9:88:e1:
4c:78:c5:29:7e:6e:ef:de:f6:97:6d:43:6b:e5:fa:
3c:21:9a:4d:38:a9:1b:09:2d:95:a2:e1:ad:3b:a3:
96:e2:37:55:f3:a6:b3:74:fd:55:70:54:f5:8a:22:
8d:0c:c2:86:24:4c:5d:9d:e3:65:f7:7d:ef:30:59:
1d:36:23:97:48:e5:8c:85:e8:c1:34:bd:a2:dd:8b:
d0:14:fa:d4:47:c8:58:0d:49:2f:4b:84:2a:d4:57:
e5:20:66:a9:b1:93:69:93:58:a6:07:62:e6:18:72:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:59:89:CC:D3:19:54:EE:0E:2F:D7:13:86:49:56:A0:19:AE:59
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:6d:25:f0:73:67:49:dd:c7:a3:36:7b:51:9f:eb:86:72:
27:d0:5f:3d:e9:fa:37:00:f0:b6:f4:e6:49:13:bd:87:3f:a0:
0a:64:e2:a2:9a:fa:5e:b3:99:e7:4e:e8:63:7d:5c:c6:21:0a:
24:de:8e:4f:f7:e6:6f:5d:ff:d4:fe:f7:3a:23:3a:67:57:c1:
02:eb:d5:ae:20:c2:c1:75:20:d7:78:4e:9d:eb:ae:da:bd:57:
a7:26:79:83:91:ee:a8:96:0d:e1:7b:9c:fa:27:fe:97:ce:0b:
c7:45:44:92:de:46:57:9c:8c:3a:a2:e8:d3:6f:39:72:98:e6:
3a:90:bf:78:37:2e:ca:7e:4a:44:a3:d7:40:55:c9:db:21:d9:
e5:1e:0f:dc:59:37:33:44:2c:27:7b:c4:00:f5:7e:03:55:70:
56:68:d6:1d:9b:43:be:74:1f:66:62:31:32:a3:61:d3:48:e7:
8f:f3:93:b1:c5:30:97:ba:20:97:9e:52:54:d2:32:78:fd:1a:
99:6e:48:db:3c:8f:df:bf:ed:1d:7a:69:b3:37:5e:d7:a1:98:
a3:f6:97:35:bd:b8:10:6e:2d:4b:45:ac:6b:e2:5e:cd:0b:2d:
12:de:56:e5:db:31:fa:2e:5c:19:73:2d:09:fc:6d:3e:88:5b:
7d:e5:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:31 2026 by rpki-client