Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: /kaqDqnH+325tzrtjT5SR4PzKz9QkueUOfUTWo2qqqw=
Subject key identifier: EA:9D:1C:91:34:0E:4A:4D:4F:A2:73:C1:B2:68:68:ED:7E:75:86:19
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019D9B504CA056F73D12DBBCC938B07C81E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:00:24 +0000
Manifest this update: Fri 17 Apr 2026 12:00:24 +0000
Manifest next update: Sat 18 Apr 2026 12:00:24 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: me3ni/Nl8zY229PJvr2mYhSVNpsp2lv595YXVquHTNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4c:a0:56:f7:3d:12:db:bc:c9:38:b0:7c:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Apr 17 12:00:24 2026 GMT
Not After : Apr 18 12:00:24 2026 GMT
Subject: CN=ea9d1c91340e4a4d4fa273c1b26868ed7e758619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:ba:51:ad:7a:ef:d5:45:1d:f7:51:48:9a:
80:18:ab:74:5a:cd:1e:7b:1e:b5:d1:03:fd:88:4b:
bc:a7:fb:9a:13:44:35:ae:1b:34:ec:4b:89:ce:98:
1e:43:fc:aa:d5:42:4a:57:27:c4:fe:26:1d:f9:7b:
5f:4c:6f:a9:ad:dd:50:ec:4b:1c:9e:0e:14:0f:ba:
69:bd:64:78:05:be:e7:b0:68:c5:19:c5:aa:46:b6:
7e:8d:d5:ec:ab:8d:63:1a:bf:aa:ce:9e:5e:61:9b:
bb:a7:d0:77:25:ff:3b:62:21:5c:7e:15:dc:f4:89:
df:ed:a4:eb:06:82:13:ab:c8:ff:48:99:cd:90:c7:
ef:1f:7c:5d:ec:52:4d:14:fd:81:3c:d8:81:43:1f:
e4:9d:83:f3:b5:ab:52:69:a7:60:66:c7:54:ff:5c:
13:8a:d2:e0:14:fa:8f:d8:dd:89:2c:7f:ed:f4:b0:
5f:32:ae:ce:de:de:61:ae:13:f7:5f:1b:f7:c3:d3:
2c:b9:7e:7d:40:a7:3f:65:2e:75:29:b9:b1:29:7b:
6a:34:0f:5b:23:b0:84:d0:98:6f:6c:89:a1:be:e3:
47:48:79:8d:0c:2c:b6:bd:a4:31:1e:9a:be:cd:29:
3f:1b:6e:ab:da:7c:da:35:a3:f2:5f:5e:dc:a7:56:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9D:1C:91:34:0E:4A:4D:4F:A2:73:C1:B2:68:68:ED:7E:75:86:19
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5d:21:a8:29:99:99:28:f6:11:0b:2d:14:1f:45:64:7a:b2:
35:d7:b3:07:e6:c5:b8:07:86:2b:ec:5e:69:dc:de:4a:b8:65:
62:10:b7:bd:cb:3a:a5:63:7a:f3:ae:7b:5f:3c:01:85:c6:18:
df:09:17:a1:fe:fe:41:d1:9d:8e:a2:f3:5a:f0:91:c1:28:a5:
d5:7b:43:f1:4d:69:c7:af:1d:63:ec:2d:eb:4d:02:bd:6d:52:
17:aa:22:7b:c0:41:1c:41:6a:5e:34:25:9b:03:46:fa:3c:b2:
ab:1e:95:c1:ee:35:6f:08:e6:ef:a1:ac:c0:b3:d7:83:a0:f9:
36:1e:37:87:f4:aa:6f:a1:ac:d0:fa:10:7e:ba:75:6b:50:d5:
9c:c2:34:e6:d2:bb:6e:f8:cf:88:ef:61:99:0b:4e:f4:05:d5:
d2:5d:7f:e2:3d:29:38:b7:cd:36:90:49:eb:ec:f2:eb:5f:7d:
84:be:3a:ef:92:3f:4e:99:c1:5d:5a:0f:c1:33:f9:9f:11:b8:
a6:01:25:f0:15:3d:d4:2c:ee:e9:71:08:2b:e7:c5:ce:96:39:
cc:eb:c7:3b:53:9b:fd:41:0f:a1:46:68:4f:2e:b2:d7:96:86:
ca:42:7f:5c:c0:1a:fa:a7:0a:ca:ab:04:bf:8b:43:ea:c0:bf:
37:f9:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:53 2026 by rpki-client