Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: a522XUwaJP7ZTe6M8IscdW399uR+TfutheZ3M94WfyU=
Subject key identifier: 64:75:EB:CF:3D:4E:50:50:27:93:0F:21:2B:FA:96:CD:06:38:B7:7D
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 019D9C6318132CAB78E3F418ADB191969DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 17:00:32 +0000
Manifest this update: Fri 17 Apr 2026 17:00:32 +0000
Manifest next update: Sat 18 Apr 2026 17:00:32 +0000
Files and hashes: 1: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
2: nUF12WZsvpoiPI9C00eeFdJfaVo.roa (hash: 9SbxvhyRlkdpKS3ff2WOCyOa7It2KK0x1wSPI6mJgOw=)
3: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: PXPC5JB9vdgMme+++y4ioerzzuvJ2AjPL1Y6jywwdZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:18:13:2c:ab:78:e3:f4:18:ad:b1:91:96:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Apr 17 17:00:32 2026 GMT
Not After : Apr 18 17:00:32 2026 GMT
Subject: CN=6475ebcf3d4e505027930f212bfa96cd0638b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:63:2f:9b:91:b3:6f:b5:1f:d3:73:ef:9f:
1b:f2:d6:b9:53:02:f5:8b:4e:bc:34:59:b3:a2:9b:
b8:40:18:15:48:d0:f9:33:04:f6:e1:2a:90:e8:fc:
e7:0a:d2:47:72:9b:9d:5d:6b:5b:70:f7:32:58:70:
c1:62:d8:7e:71:b6:4b:35:46:35:4d:34:bc:c8:af:
68:99:a9:3b:f9:d6:1f:cc:bb:81:eb:35:f6:34:1b:
4a:a3:7e:fb:bc:12:09:e4:a7:38:95:ec:ba:b0:11:
46:84:0b:20:ed:46:98:c8:3e:62:ea:2c:92:c4:43:
da:6b:16:50:d1:9c:ee:df:a2:ec:67:b3:c6:f0:07:
50:4a:e2:b9:37:68:92:3a:81:e7:87:ac:41:48:34:
1a:47:fd:4c:e9:fa:84:5c:78:dc:46:c9:52:c8:13:
9f:e6:26:1e:60:7c:ae:bf:01:37:71:08:d6:12:28:
d8:e9:8c:e9:4b:83:51:de:9f:b0:a9:bf:59:cb:8d:
16:14:d5:d3:66:e0:13:ca:16:a7:fa:0d:21:61:67:
90:2c:1a:8e:36:05:84:14:4e:1f:97:b6:32:a8:75:
c1:bd:8b:8f:53:da:9f:99:d5:03:48:06:5f:bf:41:
76:60:28:7d:1e:48:29:f2:f5:2c:5a:78:03:e8:d8:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:EB:CF:3D:4E:50:50:27:93:0F:21:2B:FA:96:CD:06:38:B7:7D
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:39:72:ad:44:b4:9f:d6:84:c3:f2:7c:2b:ad:ea:42:fa:44:
00:b4:a3:e2:a5:87:8a:5e:0b:e3:2a:2a:fa:9b:9d:9f:49:da:
9a:4c:8f:ce:ef:47:29:f1:04:41:4c:0c:8b:38:28:06:23:b8:
92:be:2a:f4:30:c5:0b:81:a3:e1:3a:1f:d2:a2:2b:6e:32:45:
e1:f2:84:d3:2f:30:ce:09:63:0d:58:08:1b:74:38:f1:ab:43:
cd:a1:18:b5:cd:ed:6f:31:29:16:67:0c:07:fd:fc:24:66:ec:
75:4e:3e:e1:3b:32:d0:78:ef:f0:84:c2:44:86:c8:04:f9:ce:
a8:f4:80:0d:9e:71:37:b1:28:10:d8:86:90:dc:02:ab:f9:b8:
72:e3:a0:c5:31:7e:5c:6e:fa:5c:de:7f:02:86:6c:f7:3d:01:
ba:a2:a3:e6:58:25:c0:dd:b7:61:59:d7:6a:27:20:5d:97:86:
93:ef:9d:8f:79:24:b3:25:d3:d1:e4:32:3e:12:11:be:0c:1c:
b1:41:4d:ef:de:9b:85:80:71:d9:7b:07:a2:42:3d:e1:0b:e3:
81:c4:48:c0:2f:2d:17:d1:08:52:a4:1f:13:3c:e4:b6:22:18:
e4:2b:7e:5f:e6:92:74:1a:3d:28:11:ce:0b:fa:ff:08:82:60:
5d:98:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:05 2026 by rpki-client