Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: qJnLD6G/lhEFlI/YVYcRVNl1On0+uL/a2JlEJpcW0iM=
Subject key identifier: C4:39:A7:D0:FB:BC:38:53:EC:55:5E:11:D8:2A:CA:12:B7:83:C1:81
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019D98864CF397E8024B3406E52B54E7AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:31 +0000
Manifest this update: Thu 16 Apr 2026 23:00:31 +0000
Manifest next update: Fri 17 Apr 2026 23:00:31 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: Td6khjl5eKVvZbLKm2V25ItjT0wCscBEG+a0asMPJmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:4c:f3:97:e8:02:4b:34:06:e5:2b:54:e7:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Apr 16 23:00:31 2026 GMT
Not After : Apr 17 23:00:31 2026 GMT
Subject: CN=c439a7d0fbbc3853ec555e11d82aca12b783c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:64:7d:32:df:55:d2:71:e3:20:53:e1:3f:
b4:88:7a:31:6f:15:15:6c:a0:6c:0c:51:2a:a1:4d:
8d:71:a7:ea:3e:03:1f:26:77:02:a4:26:85:aa:3b:
9a:80:6c:a3:95:70:66:bf:06:98:a1:db:2f:39:e0:
d4:a9:ce:89:94:3d:c5:aa:83:68:f9:77:00:86:94:
66:04:9f:22:fb:1d:d0:92:ce:e8:d4:c6:42:57:01:
57:9d:b6:7d:39:32:f7:ad:d4:a5:3d:29:a8:c1:a5:
5e:10:15:22:62:cc:99:90:20:dd:9c:4e:c8:ba:bb:
41:4d:95:47:5f:a3:03:22:e3:57:cb:fe:9c:9b:ec:
e8:4f:10:43:b7:3e:34:9c:b6:41:e4:1b:cb:ac:e6:
e7:c1:e2:66:c4:61:12:2b:c3:4c:45:db:47:6c:af:
fe:83:af:10:e6:f7:d6:59:b9:fb:31:3b:c9:89:c2:
0c:64:c7:b9:67:14:3a:6e:50:cb:dd:05:9d:63:ac:
9e:bd:41:70:8c:4b:9b:70:11:09:4f:42:82:f1:3f:
1b:40:c7:17:e4:ff:67:50:c8:93:03:0f:3c:26:ac:
3e:9f:3f:b5:83:46:43:3e:9c:d5:2e:b8:4d:92:98:
49:4b:24:59:cd:b0:d0:b8:92:14:05:1d:02:f7:69:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:39:A7:D0:FB:BC:38:53:EC:55:5E:11:D8:2A:CA:12:B7:83:C1:81
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:46:52:8e:c6:26:10:aa:6e:d1:1e:05:e5:c7:13:fe:37:
37:e3:a7:8b:87:b2:06:d6:49:6c:64:53:8a:18:9d:e4:2b:4f:
19:1e:e5:d1:12:d4:25:2c:fc:2e:1f:7a:77:ae:84:d3:aa:f1:
6a:3c:9e:24:d1:c0:7a:8a:23:d1:ea:f4:89:e4:0b:dc:c1:b5:
4e:49:8d:f5:c7:42:a9:52:70:8b:c9:4c:4f:8a:ca:56:66:49:
a0:de:2b:ec:b9:f9:af:03:84:ab:1a:dd:66:21:d8:af:ab:72:
98:8d:a0:36:e6:da:a3:c4:d8:0c:90:15:3b:aa:f1:e0:d9:c3:
19:be:aa:e4:74:39:f3:57:6a:91:8f:36:f3:71:6d:92:2b:b7:
72:8f:0e:c8:66:b7:ce:23:bd:5a:8a:64:1e:dc:ef:22:5b:a1:
77:bb:49:29:36:d5:b7:37:29:90:62:ec:bf:b5:ff:62:11:ae:
77:e0:de:5a:21:6d:70:33:dd:27:5d:97:7d:e4:60:ff:12:29:
eb:e5:83:2a:3a:5c:fc:af:ba:70:c4:7c:49:36:7a:73:d0:51:
5b:23:38:20:ee:e8:12:92:26:86:bd:a7:db:75:b3:fd:de:7e:
08:df:46:5d:59:4e:2d:90:c7:70:16:6e:3b:a5:f6:2e:18:fc:
f1:a3:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:48 2026 by rpki-client