Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: Hh6JAZ4wYY3CEQSTODCSVEr+bj5d5AAufVUsICXH3E8=
Subject key identifier: F0:06:24:5C:50:AC:69:0C:76:A2:33:D0:CD:C7:CB:5E:90:DB:0F:88
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 019D992BA15C273078F3A31B86C8322757C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 0A0E
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: R5RdCB9jBqc-I8sQkC7bDMJCJEM.roa (hash: TI8xD7ZekXFKyUpXLrhp0xuP0vXKDHQ1CwoOHjH85AQ=)
2: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: BR4RQdWPEs2K8ym3hTcc1GW+aedAnCHpxMvA+9fZK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a1:5c:27:30:78:f3:a3:1b:86:c8:32:27:57:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=f006245c50ac690c76a233d0cdc7cb5e90db0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:16:b8:d5:b2:d3:3a:24:3d:9a:8c:45:c9:
1e:a4:d9:d2:c7:5e:73:e7:d0:27:48:c3:e6:64:7c:
00:13:26:d3:d2:47:99:83:a2:d7:4a:16:34:6d:0c:
b2:34:ce:1f:23:72:c9:23:b6:99:31:53:d5:47:6b:
08:fd:48:32:4e:91:2c:5a:24:b8:1c:c6:31:73:b0:
24:a2:ab:0c:8c:9e:39:ea:5e:f2:66:21:3f:ba:99:
c2:cd:d0:22:6f:59:35:ed:df:e9:53:02:70:1e:94:
c3:e3:e7:55:13:2e:5b:c6:a2:b0:67:6b:ab:55:7b:
22:98:f6:18:7c:be:14:85:20:b9:f0:cf:ad:1a:74:
89:cf:0b:70:d9:66:26:33:66:89:6a:0a:da:ad:3f:
fe:2b:8d:7e:44:2e:b1:25:3f:e1:eb:36:d3:da:63:
8f:67:c2:46:5a:12:34:94:b7:e6:46:a6:19:f2:3a:
24:fe:4a:06:4e:3c:ab:be:68:3b:7c:dd:db:63:b2:
1b:e4:dc:2e:37:48:f3:d0:9a:bb:6f:0b:33:1e:cb:
71:e7:d6:42:37:2c:30:17:4b:7a:25:e2:b4:70:ad:
ee:af:2e:f2:69:f3:5c:e5:78:ae:e7:4d:a4:49:ab:
07:64:9b:ed:01:fb:94:e1:9e:49:1a:cd:23:71:1c:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:24:5C:50:AC:69:0C:76:A2:33:D0:CD:C7:CB:5E:90:DB:0F:88
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b3:c1:e1:cd:9b:96:ec:73:2a:e6:62:00:83:ad:1d:1a:ee:
45:cb:61:2e:8d:6f:9e:c7:c8:04:6d:49:59:4b:af:1d:62:e3:
49:ca:6f:c2:75:ab:d2:c8:18:76:a2:ed:13:aa:9e:18:6a:df:
a2:1b:fc:cc:63:e2:1a:81:2d:94:d3:9e:f9:be:2e:60:76:42:
94:8f:e5:ba:67:6d:88:47:32:d5:36:04:98:99:d4:1c:cc:7c:
03:5c:4c:08:19:05:18:f5:b0:0b:ea:fc:c7:65:25:a7:5c:49:
0c:02:af:f7:7e:0a:b2:a6:10:e4:79:8b:31:bc:8c:17:84:f6:
78:0b:69:76:a1:40:b4:57:fd:85:33:f4:b6:00:7f:6e:d0:38:
c2:35:ba:21:19:31:f8:05:64:14:de:38:4a:4a:e1:51:76:97:
c4:d2:41:a7:4c:51:0c:1c:0f:9d:bc:58:3b:11:1a:e3:d8:8f:
04:c1:c3:b3:f7:79:10:ae:93:95:f0:a7:49:5a:a3:c2:c2:09:
9f:9a:89:af:dd:b7:5a:67:42:48:a2:d3:b7:60:09:a1:cb:da:
a7:18:83:26:c3:e4:96:14:68:5d:07:88:e5:7f:5f:8c:d9:69:
79:5f:7b:75:d0:e8:0f:cf:34:78:51:fc:13:de:10:a9:d5:a7:
c6:f6:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:18 2026 by rpki-client