Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: MTifOr69cHUUV1qQVr+iEXFs3Xoui09kw1YV+SC56nA=
Subject key identifier: C4:36:2F:B0:A3:56:6B:09:6C:4B:2D:20:8A:41:27:46:00:16:31:C2
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019D97E2598D8AFB6DA63E4D2EE81FFA5B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:01:26 +0000
Manifest this update: Thu 16 Apr 2026 20:01:26 +0000
Manifest next update: Fri 17 Apr 2026 20:01:26 +0000
Files and hashes: 1: 6fkc9vbG8GlJ-ztun97m-zUYfg4.roa (hash: zRY0m0UC6TjY6n8pP6oxYqs0avAat2u0qcFHm3tj6MI=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: fO87Pt7jNWb/mxELOs1rz17yZN4i2kAPUkgedmjd6vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:59:8d:8a:fb:6d:a6:3e:4d:2e:e8:1f:fa:5b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Apr 16 20:01:26 2026 GMT
Not After : Apr 17 20:01:26 2026 GMT
Subject: CN=c4362fb0a3566b096c4b2d208a412746001631c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:43:15:57:8d:17:12:47:a6:19:6a:e4:10:
ab:b5:a1:26:2c:6f:d2:58:08:dd:a4:3f:ac:2c:2d:
52:b4:44:42:39:f1:b1:c2:d2:c0:92:c1:7d:cb:80:
21:4b:eb:50:c0:48:51:d2:5a:4b:6d:95:52:44:54:
6a:7c:da:17:9a:83:7c:02:e5:ad:8e:88:75:fd:69:
05:c6:e0:06:60:79:d3:93:be:90:92:b6:ed:c9:49:
11:af:97:82:2d:70:f7:9a:b3:d9:ff:40:5b:d7:93:
e6:60:f2:0e:1f:64:6b:3a:45:ca:eb:17:fe:65:d6:
6e:88:5e:44:5f:f0:23:74:c5:2e:5e:83:e2:36:00:
31:d2:26:1e:54:ea:2e:ba:91:7b:78:01:e4:6b:f3:
2d:37:e0:2f:d0:63:61:bc:06:a2:73:8e:9e:c0:73:
4f:a0:a7:49:c0:12:80:ce:cd:7b:d3:32:72:01:fb:
37:37:98:54:f7:96:40:7c:77:79:f5:b1:b8:c1:5c:
ec:fb:87:37:9e:3c:1f:be:56:33:dc:dd:a6:f7:05:
fa:08:08:e9:c7:94:e7:44:7d:4a:7d:4a:1e:b0:60:
ad:9c:72:f7:fe:60:9a:4a:c2:b5:6b:5c:5d:61:09:
8b:ce:87:ea:a6:13:6e:9a:08:ed:6f:d6:77:f9:00:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:2F:B0:A3:56:6B:09:6C:4B:2D:20:8A:41:27:46:00:16:31:C2
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:27:68:92:89:5d:85:f3:f6:e7:02:5a:4f:39:46:ab:12:
8c:92:a9:c0:cd:95:83:50:75:1e:d7:d9:89:4e:bb:84:64:0d:
83:2d:68:9b:58:93:ff:36:5f:a2:69:b8:6f:f4:e8:69:2e:26:
1d:18:2c:e1:94:b7:8b:d5:12:18:9c:d9:b9:b3:48:55:49:6a:
8e:c7:50:06:02:23:bf:07:02:45:61:bb:90:8b:ed:3d:44:9e:
c3:dc:22:5b:33:1d:30:93:0a:dc:3c:d0:c3:ec:0f:79:a2:cc:
3d:8e:a0:4e:de:a9:63:9c:99:dd:c5:3e:77:c8:39:ef:78:b2:
ae:83:77:51:e1:72:0b:34:6a:d1:f8:23:cd:1d:1a:b1:b4:1e:
69:80:ba:50:18:60:2f:44:a7:8b:d6:b7:df:f8:4d:f9:7d:fd:
18:86:ab:b8:e3:1d:9c:11:38:3d:ec:fc:47:8b:07:c1:97:e6:
b7:ef:ff:0f:ed:eb:86:4d:0d:18:ac:8c:46:07:36:0a:32:2b:
d6:e0:b7:af:e5:1b:a2:a1:8b:09:1f:80:06:73:e4:d0:6a:64:
67:ea:f4:8a:4a:5c:ff:6c:05:f4:7d:56:c7:9f:9d:70:49:28:
db:18:f4:e0:b0:aa:63:28:cb:1e:e3:49:e1:bb:ac:90:30:02:
14:5c:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:37 2026 by rpki-client