Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: kribn6Pzb23B/hCV8zJ7wMCNEm3vhfdZpC0OUYPvfys=
Subject key identifier: 31:C9:33:5D:FA:EC:98:52:9D:71:B7:69:FD:87:28:B8:7B:18:20:92
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 019D99D050075057FC8AA3949F086067ED68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0F42
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: GiWYKmeuGRf6gInPRWooaQk5zFhXKdjRcmbv9LRhgHk=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:50:07:50:57:fc:8a:a3:94:9f:08:60:67:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=31c9335dfaec98529d71b769fd8728b87b182092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:2b:d5:ff:1a:20:9f:fc:1f:c3:3b:08:7e:
2e:1b:1e:71:e6:c4:40:2c:a5:33:65:b0:5b:56:36:
d2:f1:69:33:2c:c9:9f:06:75:bb:e8:0c:a1:d6:c0:
0e:1e:62:ee:bd:ec:b2:5a:9b:20:fc:7c:ff:79:c4:
5f:c9:cc:e9:5c:ed:1c:c5:e2:07:0e:10:ba:c8:5a:
d6:8d:2c:d0:55:d8:23:6d:a0:93:29:42:7f:a8:25:
f4:dd:96:20:b5:81:e0:92:49:12:95:ae:ce:3e:65:
39:af:02:81:96:37:e7:fa:70:da:a5:78:73:b3:e9:
77:f1:34:fe:b6:c1:34:73:2f:9a:18:ab:e3:96:9b:
66:7e:87:ef:1c:70:d5:34:14:f7:de:a1:28:0d:5c:
8d:84:14:b5:76:3a:e7:cf:69:d6:e1:39:05:5e:3a:
8b:65:ac:53:5f:58:cb:55:38:30:51:bf:1c:30:f7:
6f:b7:ff:07:f9:2b:a8:78:b6:4a:bc:05:a4:ee:51:
a0:fc:4c:f6:29:12:bd:85:b4:01:18:20:89:9a:fe:
65:a3:2d:01:c8:32:d3:c7:d9:43:05:01:74:34:83:
00:e0:ad:50:8f:2a:73:a4:f5:5f:5e:e3:b2:e4:9d:
18:d3:cc:70:7c:49:65:f7:77:21:08:90:d8:e7:f6:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:33:5D:FA:EC:98:52:9D:71:B7:69:FD:87:28:B8:7B:18:20:92
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a4:89:98:5d:31:3b:a1:69:80:a1:e3:ca:b2:b5:55:5b:07:
6e:de:7d:88:1d:84:4e:78:66:d3:c9:0a:d5:47:6f:22:ef:cc:
5f:0d:10:79:c6:d2:d4:28:d3:36:78:70:77:b4:e5:bc:7d:29:
70:3d:b9:f4:f5:17:a9:60:27:75:05:c3:45:29:ad:ee:79:bd:
b7:74:8a:18:ac:43:66:59:79:7e:c8:e8:63:2f:c5:1d:ba:a1:
49:c1:62:4e:f8:7b:59:20:0d:02:94:f0:87:56:42:5c:80:7e:
27:39:53:e7:d6:d4:cf:4a:04:68:b9:12:69:d7:7a:37:a4:dc:
f1:9c:a1:e3:e8:45:90:3c:fe:64:b9:85:c7:e0:34:a1:3c:eb:
ac:f4:4c:ef:2d:f1:bd:9a:ff:bf:09:db:52:26:ec:a9:d1:79:
ee:ad:e6:c3:35:4c:7a:4c:d8:49:e2:aa:91:b6:11:64:c0:0b:
ea:51:a3:37:01:52:57:c1:07:aa:2c:de:7a:c0:1e:aa:0a:be:
94:52:65:bb:09:3a:c4:25:38:a2:86:80:90:8a:47:a6:05:e0:
73:39:45:d4:53:74:89:e9:3e:7d:62:53:ad:88:63:17:95:d5:
83:aa:fd:99:a8:92:06:10:8c:6a:67:dc:20:29:a8:7f:a5:69:
55:21:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:00 2026 by rpki-client