Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: +nMIkUkae/QkqueuO6JoNMkjf1vkkNNxJjzYvF1sVTA=
Subject key identifier: 93:87:C3:65:1D:3E:F6:D8:1A:E7:69:35:8F:28:09:31:61:C7:64:BE
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 019D9A74E81242F82AF0ADCEE94B6AA263D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0EF3
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: dIqmIrGGl8FI-sOwGOw90e9FkJY.roa (hash: ux/S4urJBgHoaCGluZkTkGPr6Fq78RqIkr3zENS3Pqk=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: Y5J4YvDXh6jHBwXss74QlVe+EC9Wl9ooLXXDcSLbmm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e8:12:42:f8:2a:f0:ad:ce:e9:4b:6a:a2:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=9387c3651d3ef6d81ae769358f28093161c764be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:d7:87:fb:1f:ec:fb:c2:a4:ed:49:7c:df:
c8:ec:4b:f0:01:48:72:23:bd:d1:c6:80:9d:50:2a:
23:97:98:f9:18:5b:79:cf:e8:11:94:b4:56:a6:18:
58:53:42:c6:07:ce:2f:15:05:b5:ff:de:d4:98:e0:
e2:44:b8:3a:21:88:53:60:be:88:76:69:ff:76:ce:
02:e9:59:69:0d:61:3b:39:d9:9a:db:62:4b:17:28:
88:b2:a7:c2:12:9b:c8:54:4b:75:a8:f7:22:8a:ab:
44:ec:99:e1:d1:33:c7:e9:8b:ea:22:ab:5e:ba:27:
b9:6a:e7:5a:f8:c6:6c:27:e4:bc:66:43:ea:21:29:
f1:92:b6:98:e6:ec:5f:2b:b7:54:57:ec:a2:7a:71:
d0:02:b5:69:b7:80:d6:c8:67:3a:cc:51:de:9e:56:
ed:b5:c5:b9:f2:bb:a9:d4:61:74:56:1e:45:1a:63:
b4:2f:73:61:bf:73:f4:d6:4c:40:ca:7a:ae:12:2e:
99:bf:37:59:70:79:c6:7c:c1:77:fa:e8:70:c9:b4:
96:96:46:b8:58:f2:b3:4d:2d:9d:a6:b5:d9:4a:2d:
91:18:42:77:fe:b6:91:8c:3c:60:7f:2b:de:62:b7:
c0:fe:79:0e:12:8d:a9:d4:a7:b9:99:11:48:d9:fa:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:C3:65:1D:3E:F6:D8:1A:E7:69:35:8F:28:09:31:61:C7:64:BE
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:49:b6:27:fa:25:04:5a:5d:f2:64:fc:ff:f2:7a:92:cf:
b3:7e:11:6a:29:9b:01:31:54:7c:49:8d:63:d1:5a:9a:ae:ee:
51:05:2e:69:6f:02:44:17:59:79:0c:cf:9f:1a:ea:6f:ae:a0:
3b:58:64:34:77:2a:72:02:bb:79:e3:a2:3a:9b:08:0d:e0:cc:
51:d3:06:71:f5:df:67:96:24:d7:c2:65:cb:41:1c:36:25:5c:
90:2f:f4:d5:1b:dd:26:84:65:a3:c4:eb:16:3f:46:62:8d:5b:
49:25:b8:bd:93:05:7d:34:be:f2:21:bb:2f:d2:5e:9d:bd:4a:
98:3a:b9:e9:44:31:64:70:a1:2d:fb:5c:c2:31:2e:1f:fa:55:
28:d5:3e:4d:d7:21:9d:a0:02:9c:e7:21:19:0e:63:a1:e9:8b:
2f:60:f4:ed:ea:54:0c:ab:b9:21:f5:0c:5b:70:8a:0e:44:74:
49:91:b8:7a:1d:ca:2c:57:ab:74:0f:6a:09:37:67:da:27:6e:
ea:34:51:6d:af:8e:76:e5:00:d6:4f:46:48:7e:6b:fe:a3:2e:
eb:7f:8b:81:3a:14:74:c8:af:3d:42:fd:1e:df:ae:e8:bc:a4:
57:d8:c5:9e:15:fa:37:bb:2c:c8:22:7b:ee:ca:45:fb:97:51:
b9:0e:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:27 2026 by rpki-client