
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: WFIOmJ/SS+u5WkV7QQD2G9SlFyA3dmu/RWN0j9GU5kE=
Subject key identifier: D5:B3:03:4F:A0:9F:A8:08:C2:11:65:D7:E1:51:84:1E:5D:72:5C:C0
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019D9999AF206D8CE6F2B70BACA8AF2C39AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 0992
Signing time: Fri 17 Apr 2026 04:01:18 +0000
Manifest this update: Fri 17 Apr 2026 04:01:18 +0000
Manifest next update: Sat 18 Apr 2026 04:01:18 +0000
Files and hashes: 1: Ipu1qUGfEU4g8Xm4HjOemR3yWWY.roa (hash: R0D/+J37ZrEsRH10sv5tmqRZhv8lgKjFyvvf+xRetHk=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: PdtVr6htuK2kIEV5+GkN7sP7k/0pPccarfdxHGnvhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:af:20:6d:8c:e6:f2:b7:0b:ac:a8:af:2c:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Apr 17 04:01:18 2026 GMT
Not After : Apr 18 04:01:18 2026 GMT
Subject: CN=d5b3034fa09fa808c21165d7e151841e5d725cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:35:bc:f8:b8:18:66:1c:2f:e3:0d:54:ae:
4a:b4:5a:13:22:76:7e:50:b1:f1:11:9b:c5:2b:63:
cf:7f:a5:78:34:81:e7:13:c3:c8:94:53:71:5b:82:
80:d2:e2:44:23:d8:79:22:4d:11:37:68:22:39:5f:
60:cc:d9:aa:7d:a4:a7:1b:b9:f4:50:15:74:b5:55:
bb:96:2d:4d:79:48:db:e3:20:86:bb:03:35:71:8a:
1d:9a:e4:76:e2:32:4b:14:61:d4:9b:a4:b2:cd:ee:
3f:85:c4:70:3e:0b:7f:c3:ee:c3:3f:2b:4e:59:2b:
5c:64:38:7f:60:ec:43:e7:7b:a9:f8:f5:0a:89:9e:
0b:44:5b:e2:df:13:6d:50:be:47:11:d0:ed:26:02:
0d:91:18:fc:fd:b0:7a:71:92:5b:00:13:0b:2e:4f:
ab:f5:9c:eb:a3:86:8a:3b:ed:25:08:53:dd:7f:a5:
aa:e7:97:a0:7e:f8:dd:fe:58:c8:45:87:96:69:b6:
fc:21:f6:02:15:6b:81:d1:b6:12:07:3e:7a:da:95:
34:53:c2:82:09:50:8b:6d:58:25:bb:20:7b:a0:84:
ee:0b:9e:03:47:62:a6:4e:29:e7:36:7b:9b:8b:1e:
ce:0b:45:7f:cb:81:55:59:23:97:19:bb:36:e8:d7:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:03:4F:A0:9F:A8:08:C2:11:65:D7:E1:51:84:1E:5D:72:5C:C0
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:f1:53:97:b8:f2:d1:13:00:ee:72:b3:4a:28:0a:53:5a:
f7:0d:31:8d:69:44:13:37:40:8e:1f:fa:82:fa:0d:01:4c:4d:
ae:c6:9f:46:a9:2b:24:a6:74:36:7b:1b:3d:67:2a:aa:11:49:
c3:26:4d:37:7c:b6:d1:af:3c:1f:4a:16:b7:b4:55:db:41:dd:
a8:20:10:39:c7:61:48:bb:8f:eb:1b:96:0f:86:2c:fb:43:2e:
ca:43:cc:b4:73:a8:57:31:69:95:7a:3b:da:13:3c:cc:7d:db:
88:cb:ff:43:31:c7:d3:31:30:b2:89:b8:43:f1:c8:d0:be:da:
f9:8a:8d:23:d6:cf:79:71:f6:62:7e:c9:b4:13:65:39:7b:c7:
49:2b:23:9e:c9:58:eb:71:68:ea:96:c8:c2:0a:65:6c:b7:38:
0c:69:10:85:84:60:1c:de:27:af:2b:30:23:67:31:e5:5e:95:
29:45:c8:92:13:1a:d7:f0:03:8e:f5:28:29:9a:9f:e9:f4:58:
c8:06:bf:66:f2:68:d0:4c:4b:58:e2:ce:b8:ef:04:33:4e:a9:
b1:a0:20:b4:1c:cb:a4:ce:4b:79:80:56:14:f1:f4:b1:c0:75:
36:1a:05:b2:2f:db:a9:41:43:b9:ba:0c:85:49:31:b2:f0:ea:
09:81:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:00 2026 by rpki-client