Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: gTCOY60f6S6IRGCWyvB6UWbYgQWn8ZevsG4/8jmERZ0=
Subject key identifier: 1C:D7:80:02:08:C0:40:B6:5C:A2:F7:B7:C3:CF:A1:65:AC:8F:C9:CA
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019D97AB4A0D20E7B58E643A667433A2E0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:01:18 +0000
Manifest this update: Thu 16 Apr 2026 19:01:18 +0000
Manifest next update: Fri 17 Apr 2026 19:01:18 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: B0EmAG6C8KuWTyOxR/yBoJlEb+G9LPd4+S4JOVwGxFQ=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:4a:0d:20:e7:b5:8e:64:3a:66:74:33:a2:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Apr 16 19:01:18 2026 GMT
Not After : Apr 17 19:01:18 2026 GMT
Subject: CN=1cd7800208c040b65ca2f7b7c3cfa165ac8fc9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:6a:db:a2:83:88:45:44:48:fa:7a:75:fd:
73:e8:8a:a6:ad:c0:4d:35:c8:26:c7:9f:49:12:92:
22:1c:2a:e8:dd:49:8e:27:4b:be:6d:c1:4f:54:c1:
a6:fd:24:0c:1c:3b:c9:6b:60:3e:d4:5e:3b:c4:28:
a0:59:c2:17:88:cc:76:bb:ff:3b:5b:89:91:93:eb:
dc:d5:b4:6c:90:bb:17:bc:99:a9:88:cf:41:2d:14:
00:c4:7e:2f:29:86:99:ae:76:b6:85:c8:76:68:21:
68:22:f2:86:ed:d5:d7:2f:6c:c1:b5:a2:23:e3:09:
98:34:cd:d7:da:9f:b1:7a:f9:02:b2:59:e9:e8:a0:
3e:c7:07:cf:6b:a2:83:78:a1:6a:04:7e:9e:da:d3:
ee:d3:96:68:a9:34:18:45:18:e6:81:9c:d6:e2:c1:
5c:0e:ec:00:15:68:d0:d5:11:5a:1a:99:1a:ba:d8:
ae:f4:0c:26:44:a8:a2:33:c6:31:ec:4c:86:17:7e:
71:cf:c9:d4:cb:48:09:2a:2f:4a:83:af:66:fc:98:
db:9c:fa:b2:7e:14:06:1d:b5:47:d3:8d:2f:f7:b3:
5a:77:09:3f:9d:ca:61:85:82:02:39:3d:b2:f6:ad:
a0:7d:0b:94:4d:1c:28:eb:58:76:04:2d:91:2c:14:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:80:02:08:C0:40:B6:5C:A2:F7:B7:C3:CF:A1:65:AC:8F:C9:CA
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7d:04:c0:c5:42:c3:8f:9f:1a:c2:b2:ff:dc:f3:bd:be:f8:
6c:24:e9:5c:58:97:85:5d:80:9f:37:f3:45:c4:3f:f4:e5:fd:
50:3f:d5:b2:1e:a1:47:71:88:26:15:c6:44:36:12:68:8c:6a:
f6:71:e1:6f:0e:8e:24:97:4b:c2:99:c8:fe:ee:e2:31:de:cf:
a1:67:f6:8b:a7:29:ed:5e:45:78:9a:fd:13:d2:ab:dc:5d:4f:
b2:7d:19:41:e4:47:5c:dd:ca:27:70:dc:81:b9:f1:85:b2:5e:
01:2c:3e:3e:42:46:f1:d0:59:d3:9b:74:77:8f:14:5e:16:b7:
e9:e7:67:a8:84:c7:00:48:9d:df:1e:81:04:63:69:8f:36:5d:
ee:4f:37:e0:29:83:1c:07:3b:eb:26:3b:49:18:76:39:0c:6d:
ae:c7:7e:e7:81:cc:33:04:d5:ec:b5:07:b4:d5:e7:1f:c1:9b:
39:62:74:4b:c1:c8:f7:17:e2:9f:be:b8:b5:8d:fc:86:25:b2:
9a:f8:22:39:4a:2e:cb:1f:b4:ce:4e:04:64:fa:6d:3f:83:63:
65:21:2e:ec:a8:cd:79:d1:2f:02:73:46:69:30:16:b8:0f:9d:
e1:c2:97:1e:a7:46:e3:5b:3e:44:48:1f:c5:26:3f:6d:2c:cd:
77:90:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:47 2026 by rpki-client