Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: Rgt1hhIiPyNXbgu5+FqXhVy0LBNKcAKpvW1KyDtfqaI=
Subject key identifier: 9C:40:E6:2D:45:A7:4E:2F:04:B2:5C:98:F5:91:99:1A:78:F0:94:B6
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 019D9AE3876DE66760DBF2B5594BF704DFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 086F
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: 09I350KEMMvsvPe6M8I1cJsDKeU.roa (hash: BIa6ZOdxabUdYmm/UU6G7QFOkGcLnbK9+FcHW7ZlUbs=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: PBegeXQcbHbewcLECmAtIkNCsfXJOr08459/mG3zCZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:87:6d:e6:67:60:db:f2:b5:59:4b:f7:04:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=9c40e62d45a74e2f04b25c98f591991a78f094b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:f9:fd:f3:d5:46:f8:3c:29:da:3f:9a:00:
e9:18:62:a8:53:ae:e9:97:63:af:98:55:fe:80:ae:
b2:66:46:be:c2:95:b3:75:10:3c:2b:c0:40:47:00:
e6:7b:56:b0:ee:e7:7f:04:16:96:03:e9:62:1b:cc:
04:83:7d:b9:73:4d:36:c9:6a:39:a3:95:cd:95:5a:
2e:3b:3e:fa:77:bc:69:e6:ae:3d:d6:69:4b:68:8e:
69:ae:7d:1e:ca:ae:70:d0:87:6d:33:02:26:06:d3:
bc:d6:61:b3:ae:4f:d9:b7:0b:8e:dc:78:72:5d:e1:
18:18:e9:4b:07:0c:f7:5a:e1:47:8a:72:3e:64:a6:
8f:a1:95:dc:52:6e:b5:78:5b:64:0c:d1:61:35:63:
5f:6c:4a:70:82:b2:53:22:5c:6d:b2:e8:0d:2f:4e:
04:b9:56:e4:37:13:31:e8:54:12:d3:9f:4a:20:36:
a8:ee:d8:6e:06:5b:fd:f2:00:46:00:d9:e6:8f:f7:
e1:75:e3:f3:2f:41:41:89:c5:4c:c4:4c:01:cb:9d:
75:6a:f1:5d:13:08:94:39:90:7b:4e:ff:fe:99:e3:
ce:a0:32:aa:2f:c4:3f:12:ef:d8:48:4e:cf:41:76:
60:cf:5f:28:bf:54:78:1c:f3:af:72:d3:6e:5c:42:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:E6:2D:45:A7:4E:2F:04:B2:5C:98:F5:91:99:1A:78:F0:94:B6
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:05:78:27:88:05:04:75:9a:fb:f9:9c:fc:be:2a:92:3e:c3:
79:ae:3c:4a:92:2e:fa:34:72:43:6a:a2:4e:85:61:59:f7:ed:
92:17:e5:50:30:4d:fc:ae:24:9d:f1:16:3c:2e:93:5f:d8:69:
a8:ca:fe:fb:93:a2:9b:91:9a:95:8f:62:af:69:a8:36:c1:b1:
7b:d7:90:78:03:ac:48:c8:5b:f3:46:49:bd:2c:95:15:83:60:
26:55:58:f1:03:b6:86:fb:dc:3a:ab:c8:43:bb:76:e8:6f:18:
ed:bf:20:b5:32:86:10:a6:c6:22:81:a3:2d:11:71:e9:00:de:
ab:d8:80:31:00:57:5a:38:bb:d6:84:92:45:be:3b:50:1f:e2:
b0:04:bb:b5:36:c6:10:5a:ee:40:73:39:4d:7a:a1:f3:56:fe:
85:cb:bb:a0:61:f8:bf:16:27:99:3a:68:06:b2:11:d0:ef:2d:
95:ae:ab:8d:de:8b:ee:3e:18:db:8e:06:e4:d4:c6:c0:7b:cc:
08:28:50:f8:47:a3:b9:e8:88:aa:ec:48:95:a8:b5:a5:bb:1d:
7d:09:17:de:4c:e8:e6:55:e5:e6:f6:fe:91:f5:6c:27:d7:31:
03:c3:9f:d0:c6:29:04:51:36:6c:80:4a:78:5f:82:20:07:20:
e2:83:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:08 2026 by rpki-client