Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: jW/5VNKTQmWfAFiL0aqsjsa/JL6gsvEgleTe/iKWd1w=
Subject key identifier: 70:C9:64:BD:87:4A:B8:DA:E7:3C:48:81:01:05:F5:5C:7C:1A:D0:84
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 019D98F505E3F3E8B4290011954522F475E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: 7AN2y--6BWBDlHsQXRo-Ms_T9_E.roa (hash: 5G/O/em7a1btfI5sEj4BLe5JKY4pGeRIT+C2NR1XoD4=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: u+zRR8jqrdCjUt5ouuXPgNO5pAaY7Odf1ZxQGsfGywA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:05:e3:f3:e8:b4:29:00:11:95:45:22:f4:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=70c964bd874ab8dae73c48810105f55c7c1ad084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:73:79:50:9c:78:30:8d:bc:68:b1:42:1b:
52:07:20:c9:d9:6d:e7:a9:b6:30:b1:e1:5a:e6:a2:
19:86:78:77:c5:67:02:d1:f1:a0:ce:fe:ce:9a:98:
3b:63:ba:ff:db:32:3b:14:5f:ea:45:d9:2e:5d:ba:
07:02:25:a0:61:fc:a3:f8:c0:c3:20:8c:d4:43:98:
59:e5:a0:c5:24:52:9c:a8:d4:e6:af:31:94:22:fa:
e6:63:46:dc:50:e4:bd:89:18:84:46:49:80:27:68:
78:cb:95:0d:ed:00:9b:b5:7f:0b:bb:8f:c2:e2:c2:
11:79:5b:38:a0:f2:93:39:21:56:ba:81:2c:a6:4d:
0d:4a:ca:ff:cd:c8:aa:f2:3a:5a:01:e1:5d:1a:a6:
7d:4a:f4:8f:1e:dd:cc:f1:5f:93:09:e1:36:7b:dc:
54:fe:9e:09:6e:4c:a5:44:31:94:49:aa:b9:9b:c5:
d4:44:95:57:05:34:4e:8c:88:a6:fd:d8:54:47:f8:
fe:93:b3:63:6a:96:6c:d6:0b:3d:eb:23:08:c1:3d:
33:b0:fd:22:f7:bd:d1:fa:d6:6e:bd:71:17:f5:39:
f2:1c:e1:64:9e:88:45:38:83:12:da:23:23:b7:e6:
32:be:02:50:47:52:3f:80:7d:1c:e3:23:0f:1c:12:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:64:BD:87:4A:B8:DA:E7:3C:48:81:01:05:F5:5C:7C:1A:D0:84
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b0:ec:66:62:a4:e8:8c:50:01:60:e2:5e:1d:72:e0:e0:c5:
63:c1:0c:36:72:01:85:7f:9b:d9:94:38:80:6d:94:f2:b9:a0:
67:f3:0a:b8:7e:55:78:25:3d:f0:ae:e3:6e:55:e7:9a:0b:af:
04:8e:26:29:b7:de:0c:c9:16:db:8d:80:b2:51:7a:eb:1d:bb:
ea:02:e2:7a:8b:ae:e6:0e:d8:74:60:55:a2:8e:99:b4:6e:fe:
01:36:36:8c:6a:6e:06:4a:c8:e6:27:7b:b0:d6:d1:ac:6e:85:
d4:2e:ed:5a:01:03:61:83:29:b9:0b:d7:90:c1:c8:c1:e0:23:
10:84:5e:ce:fe:b4:bc:5c:0d:78:f9:1b:0f:ff:58:33:e3:0a:
41:dd:6e:36:1e:c5:e6:b4:75:c9:cc:27:4e:23:fc:88:a9:09:
af:9f:9a:b9:b3:d7:86:55:25:8e:94:47:4c:ba:97:66:de:64:
f2:e4:ae:82:09:c6:5b:a6:c1:c1:8d:5f:83:6c:0a:a3:6c:5a:
23:8f:57:8c:a1:df:19:86:8a:5c:d2:67:00:fc:15:21:2f:1c:
21:c3:37:31:74:5b:4f:f1:b7:cc:29:39:57:82:ba:67:d9:02:
6a:91:0a:0c:45:91:e2:4d:26:e2:e2:e5:be:b9:7f:b9:53:49:
be:9e:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:46 2026 by rpki-client