Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File: tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier: +RgW8z/yYKpELOG2OBpYK2iIZqJ2LRhKzH5Lj1/+hVE=
Subject key identifier: 99:0B:2E:20:6F:DA:95:DA:DA:56:AF:AF:E9:D6:67:40:6A:72:29:82
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial: 019D9A0707F91DF1216736DC8DD673D2EC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: d8hxgCzh00P1vymqIssXJjsMEak.roa (hash: QPYQOVq2qG5TE7J3ZZxvLlE+oFxwiuDzLiQ9NHEre64=)
2: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: +57/7rcC1aSxAwIfU/vkNB/QGsNUablX3vmVIY0lkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:07:f9:1d:f1:21:67:36:dc:8d:d6:73:d2:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=990b2e206fda95dada56afafe9d667406a722982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:da:d3:b5:5d:28:df:3b:89:67:24:ed:9f:
bf:f7:33:3b:e4:4b:3a:35:15:fc:a4:b6:a0:f9:80:
bc:60:e5:89:31:d4:14:5a:e4:f8:8a:ee:4f:10:9e:
e3:31:0e:8c:16:19:54:19:93:82:f5:8a:f1:fe:86:
27:11:5f:5c:c5:c1:30:ff:1d:b6:e2:1b:07:fb:94:
58:f2:0e:cb:6c:1a:03:3a:dd:54:9d:a7:ed:72:a8:
49:2d:ce:ab:a8:68:f4:37:f2:d1:f1:50:f7:a6:b0:
13:c5:c2:78:bc:f7:4d:51:56:03:ed:33:94:4e:82:
33:f0:74:6f:12:d0:5b:27:74:9f:8a:38:02:58:4a:
ec:b6:88:5c:4f:67:17:35:32:35:82:9a:5d:21:20:
b5:a8:36:68:b7:cc:88:03:c2:e8:f6:fa:5c:0b:bd:
18:15:3c:a7:36:47:5f:cd:81:8e:ee:45:79:7a:62:
6f:c9:6a:32:ff:6b:00:2d:53:51:c6:96:62:64:c4:
a7:12:5e:de:1b:85:7b:4e:65:2d:ef:c8:7f:b7:e5:
a6:74:f5:d1:29:35:aa:19:86:39:c5:78:d3:46:c0:
66:5e:62:0b:df:d6:40:2b:2c:63:f6:c5:20:b6:a8:
19:b6:18:81:75:fa:ac:fb:5c:46:f4:a7:51:78:ba:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:2E:20:6F:DA:95:DA:DA:56:AF:AF:E9:D6:67:40:6A:72:29:82
X509v3 Authority Key Identifier:
keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:85:58:1a:4c:74:63:25:ff:11:f8:30:06:fd:20:9e:07:
da:10:d9:de:cc:72:62:67:c9:c4:70:a7:5d:b3:e4:d2:37:1c:
0d:a9:1b:ee:ab:31:31:97:44:eb:28:c2:f4:a4:ac:9e:51:71:
bc:f6:af:13:20:20:5b:83:73:50:ce:cd:63:c1:89:4e:97:92:
24:87:d2:b4:6c:12:dc:78:12:9c:0f:52:c9:6a:82:e5:21:59:
7a:1e:2b:da:e2:fd:73:3f:04:7e:50:91:1c:1b:ed:3e:45:25:
f0:76:e1:80:a4:2e:41:36:6b:7a:9d:c5:6f:bd:3b:f4:5d:23:
01:15:b9:94:56:78:c1:dd:2e:53:60:b7:fb:fb:78:72:b6:92:
f0:3c:7e:e3:89:c3:fd:e5:10:75:81:95:9c:60:04:0d:c8:db:
10:ea:5e:99:6b:9f:ae:a9:5b:89:69:56:79:14:8e:0c:16:a1:
25:36:03:61:74:d6:dd:f0:14:6e:5b:08:5d:1e:c9:c5:90:1c:
d9:ec:29:69:9b:cf:a0:8b:94:bd:90:32:ad:40:9f:7f:e3:3f:
37:7e:96:eb:cc:dc:4b:a7:25:14:3c:c7:2b:2c:fe:d7:b5:a2:
13:44:65:9a:99:ba:87:36:00:79:94:d7:c3:08:4e:cb:bf:70:
2d:3f:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:42 2026 by rpki-client