Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: qAaL/SIUdtrOTQaFcao+U8SBbyBCwuPdxkGBooUkmSs=
Subject key identifier: 16:D5:AD:2F:F3:F7:8D:EC:A5:35:7E:AB:1C:48:6E:EC:26:8D:11:9C
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019D9A3EA8A17F75F4A9FB91DDFE39878489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0D78
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: waRDH5KU2/4IQWQ9ngDUt6eWc1DSwu+iSFaPbllbrCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a8:a1:7f:75:f4:a9:fb:91:dd:fe:39:87:84:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=16d5ad2ff3f78deca5357eab1c486eec268d119c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:6e:13:93:62:c5:28:27:d7:32:0f:ea:8f:
18:4a:ff:9e:30:e9:20:e6:23:3c:2c:6b:2c:b7:c0:
d0:ff:90:a3:75:d6:ab:bc:af:c0:4a:82:a6:df:e4:
e0:bf:42:e0:64:1b:e1:d7:94:df:88:aa:71:b4:9f:
7d:60:06:aa:87:40:33:8f:2b:dc:65:56:38:f6:b4:
50:a0:f5:9f:6c:c2:5f:a5:9c:e7:7b:63:7f:09:8c:
38:32:43:5e:60:d4:a3:f6:64:3a:1d:ad:27:e7:f6:
88:a8:56:79:a7:5d:92:48:01:f2:e3:98:78:65:1b:
97:06:fd:45:bc:d0:98:3f:0b:77:34:86:ba:0d:a3:
48:12:31:6a:6b:23:83:7e:ed:f4:6b:f3:5b:c3:e2:
11:e8:fb:96:52:90:3f:cd:7f:0a:bc:d5:e3:b6:0e:
4e:c5:b4:74:cc:e5:d5:cb:72:d1:85:3d:ac:ae:9e:
a6:0a:68:91:ba:99:a3:b8:af:da:58:c2:1b:6d:6d:
a6:de:3b:55:0b:f6:71:44:d0:89:38:a6:08:88:9e:
98:f7:c9:04:75:a8:c9:6f:92:80:47:bc:a9:7d:05:
81:60:17:4a:a0:7d:1d:d7:0f:8e:f1:dd:02:1d:2f:
a7:c8:e2:fd:9d:d0:e3:80:99:fc:36:a4:0d:d6:64:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:AD:2F:F3:F7:8D:EC:A5:35:7E:AB:1C:48:6E:EC:26:8D:11:9C
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:e3:f3:ed:bd:aa:73:1c:05:e6:b8:9f:6d:d2:ab:12:33:
ac:9d:b6:a3:15:68:38:0e:4a:73:49:61:37:d4:6e:fa:9e:85:
31:4f:b1:03:83:49:32:7f:72:23:e0:f2:be:e4:3f:56:21:df:
3c:a7:0b:ea:8a:1a:c6:65:05:13:ba:b9:3f:cc:3e:68:48:31:
77:f8:b7:fd:43:96:2a:7a:13:1c:e5:80:7f:c9:fd:f8:0c:ea:
b7:ed:96:4e:9f:95:0e:87:65:23:01:7a:05:0d:1d:ef:e6:68:
cc:f3:2b:d1:0d:45:7d:29:80:04:58:5e:ae:d9:1a:67:94:1a:
d4:cd:f8:24:35:6b:68:56:12:27:dc:ce:a2:0a:3d:02:b1:bf:
51:80:6a:18:f4:a8:a0:d0:f6:b3:a5:75:95:a3:d9:6e:6a:da:
79:5c:23:17:ec:71:62:53:c0:47:bd:e2:f6:ee:11:0a:c1:f1:
82:5b:da:df:01:f6:37:e7:2a:b5:97:b8:11:db:b0:ed:fb:2b:
57:87:28:c4:81:a7:b2:78:ad:b3:7e:ca:99:29:a6:29:aa:d7:
76:79:2e:1d:d5:39:3e:0c:92:e5:e7:aa:e7:12:35:a0:bf:ec:
a4:a2:72:83:76:52:00:84:d4:2e:34:c6:9f:07:81:7d:6e:70:
fc:e9:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:18 2026 by rpki-client