Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: rc1+KYEnOqVcirPtlZpsLMMRRoHtQADRf212McWOFAQ=
Subject key identifier: EE:A6:76:71:62:93:6B:82:45:FB:48:EF:58:AF:A0:01:09:38:46:60
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 019D999940C1147277B5F1802AF98C00F9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:50 +0000
Manifest this update: Fri 17 Apr 2026 04:00:50 +0000
Manifest next update: Sat 18 Apr 2026 04:00:50 +0000
Files and hashes: 1: _NxFs9VMwTHWeFrLFxXw6Blpl0Q.roa (hash: pZ8HtaeBjPsZYe6sCpxe6vXfNXXqUpYEGChj0iJ3xgQ=)
2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: xmM5bi+/8aG/cumq2CSW2Rm/XFGlo8t5sl5S/QxAu1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:40:c1:14:72:77:b5:f1:80:2a:f9:8c:00:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Apr 17 04:00:50 2026 GMT
Not After : Apr 18 04:00:50 2026 GMT
Subject: CN=eea6767162936b8245fb48ef58afa00109384660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:8c:63:e9:ca:3d:f4:e3:7e:ee:92:7c:f9:
66:81:68:92:f9:7a:2a:83:7a:7f:d7:a7:a2:93:2f:
07:a9:38:fa:52:8d:fe:a5:7d:d9:d6:75:07:58:83:
c3:40:48:c1:1b:92:e1:d1:27:98:53:e6:18:0c:c6:
49:df:0b:d7:01:68:80:5d:ba:2b:ef:12:24:81:fe:
8c:b7:9e:bc:97:86:31:de:07:ac:05:6b:78:61:03:
4e:bc:5a:d5:87:bd:9b:f4:55:e0:c9:1d:3f:67:26:
27:1b:2e:d6:36:2c:46:b6:5c:6a:61:8c:a8:ac:d6:
72:99:57:9d:4c:07:ec:e2:5d:c0:9f:27:ac:c3:55:
d8:ee:11:7d:0f:9f:c5:78:23:fb:04:14:78:80:42:
2c:74:bd:e9:4d:38:c2:84:f4:81:42:b9:58:5c:8f:
ee:ff:fe:be:25:f6:dd:23:9b:bf:f3:0b:7c:3b:df:
a8:fe:cc:a5:c3:5d:11:ad:bb:34:8a:75:4b:29:83:
ee:5c:79:ca:20:ab:9d:9c:17:47:51:a5:c1:0f:47:
4d:d4:1b:f9:39:df:55:dd:1c:04:df:8b:30:1d:a2:
7a:05:79:93:1b:fd:8e:0a:05:3f:dc:57:bd:44:2a:
d3:b4:5c:9f:83:2d:a3:bb:7b:7e:1b:74:b5:bb:5a:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:76:71:62:93:6B:82:45:FB:48:EF:58:AF:A0:01:09:38:46:60
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:b1:73:9a:23:0e:f0:6f:49:63:9e:92:47:c1:e0:b2:ee:
c3:45:93:83:d1:f5:70:2e:24:92:7d:58:05:7e:ea:46:77:3b:
fc:bc:e8:e4:33:d1:e6:47:86:57:7a:5d:e5:55:05:c5:45:f9:
1f:d3:c8:6f:f3:c7:78:e6:0e:2f:50:2e:8a:3a:b9:68:03:92:
bc:20:72:35:ed:9f:94:8d:b9:44:17:8f:09:11:8c:7a:d3:9a:
e1:d8:75:e9:74:92:ef:b4:dd:a3:bb:48:10:0b:42:f4:90:11:
dd:bd:32:1a:1f:6a:3d:7e:12:b3:99:b7:e3:4b:b1:af:b9:84:
a5:19:f4:4a:8f:dd:74:20:75:2b:31:37:3a:e9:2c:3f:85:d7:
9a:cd:b6:f7:b4:de:1c:8d:bd:2a:9a:97:d6:05:c3:05:9d:47:
98:73:48:ad:2e:ce:9f:b9:08:ee:b2:0a:54:90:87:f0:54:b6:
dd:41:84:01:a0:1a:f6:ec:7d:25:dc:ae:e8:aa:0b:07:52:81:
d0:fa:f0:9c:52:17:bc:cf:a0:f4:5a:c8:3c:07:a0:02:26:40:
80:2f:2a:54:71:f0:c9:87:d5:f8:2d:fe:2e:ed:0d:e4:49:a2:
9d:0b:04:ef:2e:c2:5c:e3:24:71:e1:28:88:f3:9e:1d:b4:3f:
6c:31:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:25 2026 by rpki-client