Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: tlwvk8mZReTjiS2P41UDRcj0+X3UIggNeq5N2USDGnM=
Subject key identifier: CF:71:21:FB:EC:09:99:34:69:13:B4:DB:63:50:90:AC:80:47:C6:97
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 019D9A74B5F3EA7AAAA2D51D14D145D9D527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: C5Z-09c-UNKANhS9Y8455wChPaI.roa (hash: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg=)
2: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: 7stRtnQz8lwa89c6UlK8owo+jsU8PDq14ulvEa5gVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b5:f3:ea:7a:aa:a2:d5:1d:14:d1:45:d9:d5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=cf7121fbec0999346913b4db635090ac8047c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:b0:d2:36:38:fd:30:01:24:5a:a0:58:47:
1d:d0:f6:7f:81:6e:d3:02:8c:b8:3b:16:06:2b:39:
2e:7e:81:af:68:bb:f6:f8:5f:4b:fb:d9:ac:22:c7:
6e:8a:31:b0:cf:db:29:31:51:8e:70:ec:8a:30:3c:
78:76:a9:bf:cf:54:9e:80:a0:38:26:42:37:1e:71:
82:c1:b6:bc:6d:a3:7b:83:a8:54:d0:29:22:0e:39:
d2:d7:4e:65:f4:af:75:96:59:16:10:8a:ba:4e:5d:
5a:f5:13:80:c2:70:03:9d:64:64:de:f4:83:b0:af:
6a:b2:aa:55:21:84:47:d9:bd:ba:0d:e2:f1:9d:0f:
30:e9:24:69:b5:49:a3:9b:18:3e:0c:de:62:97:58:
d7:e7:02:c7:4a:61:b0:77:fa:82:35:4f:c9:10:4e:
b5:d2:06:93:c8:0f:38:9c:9b:37:cf:ec:d5:ae:d9:
76:7e:16:b3:a9:dc:52:2d:11:0b:00:ad:23:8a:3a:
b7:d0:1f:d4:b6:b5:32:27:00:9d:63:90:8c:72:06:
b8:6e:d7:28:11:9d:34:b7:5f:92:c4:29:08:6f:54:
1f:9b:e0:be:9d:42:58:b0:90:6d:a2:07:68:54:e3:
2f:b7:e8:89:81:0f:e9:d3:21:12:bb:dd:a4:34:90:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:21:FB:EC:09:99:34:69:13:B4:DB:63:50:90:AC:80:47:C6:97
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:16:25:46:4d:d7:a7:0e:45:a4:3f:a7:4a:dc:3a:41:c3:
15:c4:ff:66:ef:3b:0b:ac:29:05:73:93:9e:d7:db:cd:f0:aa:
95:68:2c:ee:e2:c7:4a:3d:19:91:78:0e:1b:32:c8:e1:4c:f4:
7e:b8:b5:a1:d4:89:3c:e0:4e:26:4b:1f:48:a9:75:d9:03:5c:
dd:e4:f8:fb:36:5a:7f:0b:36:e2:24:3a:5b:be:fb:0f:a4:59:
e8:66:c8:92:db:99:47:34:21:ec:4e:f0:43:9b:df:66:b6:22:
64:55:07:69:25:e7:92:ed:44:ca:9e:b6:19:e9:bc:ea:4b:25:
cd:1f:6e:42:eb:a0:d5:ed:85:3d:8b:04:66:f2:25:86:56:7d:
13:43:a1:17:e6:16:82:09:59:08:fd:cc:c0:21:8c:d0:1c:7a:
2b:b7:a6:ed:f4:25:ea:9a:7f:f3:d1:02:cd:4e:f5:db:87:c3:
20:ce:d7:38:99:d4:54:01:d6:d2:1e:99:5a:b0:d8:12:f1:db:
3a:67:6b:ce:b6:83:63:d1:b3:86:4d:a2:97:f6:f6:56:28:33:
3e:34:9c:cf:7b:5b:12:9a:fb:e9:1f:be:46:5f:ef:8d:5e:4a:
a4:12:aa:0e:f9:e1:8b:65:a8:37:4a:59:c7:2b:57:ff:38:ce:
29:db:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:11 2026 by rpki-client