Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: NAIAEm4rYkf4G41PM3RBBbepMGUHVarWS9Va5SKJ+uw=
Subject key identifier: 90:F8:8A:7B:EA:0F:A2:7E:09:B1:0F:5B:AE:A8:E1:B6:F0:22:4B:1A
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 019D981876D1C72726F3675DB8CA43118671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:33 +0000
Manifest this update: Thu 16 Apr 2026 21:00:33 +0000
Manifest next update: Fri 17 Apr 2026 21:00:33 +0000
Files and hashes: 1: Som9pdt2cBfqpNs_uoKUr5V86tc.roa (hash: Er0ATXdFVQI+dlPzaVCGDkbogKEk2cw3WoLgdwrv/rM=)
2: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: TdGwxSJX/VJHsJguqnshqp4y2W5vgu18DtO0tO0bjnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:76:d1:c7:27:26:f3:67:5d:b8:ca:43:11:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Apr 16 21:00:33 2026 GMT
Not After : Apr 17 21:00:33 2026 GMT
Subject: CN=90f88a7bea0fa27e09b10f5baea8e1b6f0224b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:87:d0:97:a6:3b:f4:d3:c7:b5:b7:c0:61:
20:13:21:17:49:a9:f0:f6:23:56:10:ef:f7:95:a4:
c4:63:17:26:84:75:ec:a8:e3:b8:76:5c:98:c3:6b:
f0:4d:48:d1:c6:45:25:14:57:d9:88:3d:8e:e8:39:
9f:2a:e0:f4:5e:0d:70:fb:79:8d:78:d2:6a:3a:de:
b3:ec:4c:78:26:8d:1f:7b:e7:25:56:9f:fa:1f:bf:
9c:25:ee:da:a4:9f:3d:d4:51:84:5a:d9:91:99:60:
cf:39:c5:19:86:93:92:4d:3a:3a:6a:a3:5f:18:4a:
f9:06:92:4f:98:f6:92:85:08:67:8e:45:4a:1f:62:
80:c3:c1:6a:a7:4b:54:2a:8f:40:de:40:19:d7:3f:
d6:69:c6:01:cc:30:99:93:f3:66:8e:72:6c:a0:64:
11:b1:d1:7e:b6:0d:ae:1e:8f:17:f9:25:56:24:d9:
20:73:01:43:0c:44:12:f9:15:69:a6:0e:be:b8:c1:
eb:7c:c5:05:74:e2:73:c8:e5:33:1e:67:57:0f:0b:
5e:19:3f:fd:f4:9a:c7:68:f9:60:9c:a2:26:20:6a:
e9:69:52:ed:29:a2:b2:af:63:6a:39:9a:1a:b5:fc:
00:78:ac:a1:8a:fe:64:76:c5:68:bb:df:ae:08:eb:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:8A:7B:EA:0F:A2:7E:09:B1:0F:5B:AE:A8:E1:B6:F0:22:4B:1A
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a1:77:9c:00:f3:5e:b7:0b:32:9f:72:ab:a2:af:6e:06:03:
87:3e:c0:b2:7d:d8:aa:be:1c:d3:06:0c:8d:e2:d7:a1:c7:52:
86:e7:22:2c:76:dc:7a:bd:37:26:f6:70:f5:75:68:b8:fb:ac:
13:64:71:ed:6a:65:63:8d:74:85:99:33:13:33:c3:a1:cb:18:
e8:87:45:14:bf:e2:49:6f:22:4c:61:85:38:4f:73:17:bf:53:
0b:f7:65:ae:cb:75:e7:81:08:87:d4:04:f5:e1:1c:10:e4:9a:
8e:e1:6a:2d:56:ab:c4:0a:9a:b5:93:2b:b9:84:50:32:1b:08:
8e:2f:75:6d:80:d1:1c:f8:52:38:7f:d6:7d:2b:95:73:71:3c:
98:f2:e2:e2:6d:25:85:46:16:2a:1c:a5:bb:db:85:6f:4f:7b:
df:71:93:4a:f3:e2:b7:72:37:5e:35:2b:ac:99:de:b2:ae:fa:
af:59:f4:cf:ff:82:85:94:f9:b0:6f:08:bf:62:32:a9:9a:a3:
16:78:0f:af:ea:c6:85:9d:04:9d:f5:44:3f:e8:ef:ae:41:af:
8d:94:ea:75:94:7f:32:e7:0b:d2:2e:85:8c:96:1c:a2:8a:90:
ef:28:43:0d:cc:8b:93:c9:c5:ea:e4:ac:43:08:29:99:da:ac:
45:ea:c6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:22 2026 by rpki-client