Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: elGcIIls4dTbogmyiu9EO5v+HSEbXiHiJSr1Lgv7X48=
Subject key identifier: 0F:92:F8:20:9E:0D:B3:2B:A1:D5:6F:7D:9B:FA:E5:D0:A6:AB:C0:39
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019D9B5122A2C067661CE39AF82F72D7B883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0A5D
Signing time: Fri 17 Apr 2026 12:01:18 +0000
Manifest this update: Fri 17 Apr 2026 12:01:18 +0000
Manifest next update: Sat 18 Apr 2026 12:01:18 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 4Xcg2rnw3qckDVL4vtsBqVGiyXq4z4KA6M0u3AVP+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:22:a2:c0:67:66:1c:e3:9a:f8:2f:72:d7:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Apr 17 12:01:18 2026 GMT
Not After : Apr 18 12:01:18 2026 GMT
Subject: CN=0f92f8209e0db32ba1d56f7d9bfae5d0a6abc039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:cf:90:12:4a:14:22:a2:9b:91:5d:d5:2c:
f7:81:bf:c8:d4:8b:72:2e:47:b8:fc:56:ad:e8:84:
7f:d6:d4:75:06:c3:83:78:5b:7d:44:ba:c2:52:db:
2d:75:46:cb:85:89:c4:70:17:63:1b:c5:c8:d6:a2:
6b:e0:79:62:ab:65:fb:86:dd:1e:30:19:6c:f3:a8:
27:7a:a5:44:54:da:74:26:d5:3c:78:79:49:95:2f:
ec:4f:46:11:20:a9:c0:50:ea:45:4e:59:18:c5:5c:
c3:7d:21:78:ba:fb:1d:22:1a:cc:10:3e:3f:ab:8f:
49:0f:95:42:03:98:ee:50:58:db:1b:2f:a5:3c:15:
72:07:ac:b5:a8:c4:54:8b:3d:6d:89:10:a9:0a:f0:
b1:fc:bc:c8:13:a6:80:a7:59:47:17:7e:1e:bb:5a:
af:f4:23:ca:4a:d4:e2:4c:74:d3:9f:09:c5:29:70:
88:87:23:09:97:4f:62:cc:b4:c2:04:f6:40:c7:a5:
bb:03:e6:0b:5c:2d:2f:fc:11:97:cd:c5:1c:3b:14:
36:3b:1a:f4:63:7a:b7:34:8a:72:58:46:ed:38:62:
cb:f1:47:30:26:ff:cb:1f:82:f2:63:3f:49:64:0f:
3c:ac:39:ff:da:12:a6:48:a5:2d:20:69:0b:da:52:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:F8:20:9E:0D:B3:2B:A1:D5:6F:7D:9B:FA:E5:D0:A6:AB:C0:39
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:8d:b6:4e:15:15:a7:8b:8f:1b:33:24:5c:23:58:14:ae:
35:95:0d:23:a0:89:87:fc:e9:7d:c3:8e:d9:8a:2e:66:72:62:
b6:13:8f:43:97:5d:d0:c8:79:db:d7:ba:e8:74:16:07:17:84:
6a:41:ae:31:3e:5b:86:a0:97:46:52:a6:39:16:d7:7b:4c:96:
71:2b:dd:3b:00:98:92:55:07:1b:9e:f6:62:85:fa:18:21:01:
d7:8b:63:48:4b:34:a3:6b:2c:39:13:34:05:71:88:fb:be:1a:
63:94:6b:dd:7f:65:d6:1a:1b:a8:01:cb:43:3b:67:7f:5b:29:
b7:09:13:a9:62:51:95:1b:5d:f6:9d:d7:4b:2a:b8:4a:87:37:
82:e3:40:20:6f:7b:25:39:94:2b:7d:42:78:98:c2:61:af:7c:
fe:ea:9c:07:77:a4:56:28:0a:61:27:50:0e:33:d3:1d:4f:9e:
00:00:b6:c0:90:97:3b:7b:0c:84:39:c8:a6:c5:7d:20:8f:14:
f9:af:5b:4e:21:60:6f:8c:19:e8:06:ed:92:dd:cd:e4:82:60:
7f:c2:6e:fc:3b:46:05:c6:60:66:85:d4:2e:14:ea:aa:b6:70:
a9:d0:27:5b:81:e5:6a:b5:85:f7:e2:f6:a0:60:45:13:84:1a:
08:d9:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:08 2026 by rpki-client