Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: 9iYarF4DtNrrheyWOlDFeGJtxKXsFOu9aipMffo0cUM=
Subject key identifier: F7:15:AA:33:21:56:6A:F2:FE:0B:B6:EC:F4:61:A6:67:A1:02:F6:34
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 019D9C632BB95B4350A02E3B03845BD2D935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 1040
Signing time: Fri 17 Apr 2026 17:00:38 +0000
Manifest this update: Fri 17 Apr 2026 17:00:38 +0000
Manifest next update: Sat 18 Apr 2026 17:00:38 +0000
Files and hashes: 1: 1Hoyrylcn8m_wR_RB6kG1AoUkbs.roa (hash: i7cfjhCZOPLGdCo7zGnFGevBuRCXnZkz1NQPc21PRUI=)
2: MwxPjEKsyukIW9UgrbKug1OUrD0.roa (hash: hFFWhkDQsz4xhLvtRVUNZgMK+EMIxF7IR1hHUl7v5Zs=)
3: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: 2O5ADnFGcnNbDke+TC7sncfUHAEYStkLgmM08msRiq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:2b:b9:5b:43:50:a0:2e:3b:03:84:5b:d2:d9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Apr 17 17:00:38 2026 GMT
Not After : Apr 18 17:00:38 2026 GMT
Subject: CN=f715aa3321566af2fe0bb6ecf461a667a102f634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:42:f3:75:cf:3c:17:9f:ab:2e:a1:67:22:
37:dc:53:9c:63:0d:a9:13:df:df:7c:46:e6:09:8b:
df:bc:10:95:75:99:8c:43:39:a7:ab:1a:07:f5:0a:
84:33:75:c6:43:86:ba:9c:32:e8:27:cf:bf:ac:72:
86:53:5d:8b:0d:a8:13:89:68:a9:9d:28:97:c2:7a:
b5:e1:d7:1a:99:c1:25:e3:40:35:84:01:9e:6c:cf:
d3:a1:24:d6:49:33:2c:15:9d:2a:af:82:bf:96:a2:
96:a3:98:57:b8:e7:50:46:15:a8:04:f1:85:10:67:
f3:92:09:2e:3d:b2:9f:fe:76:1f:13:d0:5f:8c:83:
2d:a3:4c:12:b6:b0:a2:cd:97:d0:c7:52:a4:64:e1:
a3:91:20:3a:98:eb:6f:46:ab:83:1d:76:28:c8:82:
6d:90:ae:9b:55:e7:ec:57:a7:07:c5:60:e4:34:79:
59:af:d9:5b:bd:76:ee:b7:a7:53:fd:31:a3:7a:06:
76:12:d0:56:83:d9:76:fb:cc:52:20:d4:fa:b3:3a:
47:e2:9b:7c:8a:12:bb:9b:af:63:17:78:07:87:6b:
df:d0:5f:08:c5:c6:36:19:7f:78:f8:a5:ec:97:45:
9b:cd:5a:65:c7:5f:dc:c8:eb:49:de:8a:bf:24:00:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:AA:33:21:56:6A:F2:FE:0B:B6:EC:F4:61:A6:67:A1:02:F6:34
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:33:e9:8e:7a:07:64:00:c1:c6:b4:c6:e1:21:54:6e:42:bd:
32:26:1e:b3:ae:3a:f0:a7:b1:0a:3a:b9:4d:c2:6b:71:81:8a:
17:cc:77:6c:e8:a2:75:d4:97:52:81:1a:21:ed:5f:80:f5:ee:
91:c3:d2:cb:19:61:bc:74:87:25:d2:44:8a:18:1d:bd:02:ed:
23:f9:b6:39:6f:ae:f4:7b:ae:3a:ec:06:3a:ee:3b:30:b8:35:
b5:0b:33:7c:25:5e:d3:e2:7b:35:90:3e:6b:a0:ed:dd:25:ec:
4e:85:81:09:bf:5b:fe:31:99:4b:bf:b7:d6:7a:f9:43:7c:93:
e9:1b:61:4c:af:40:77:10:df:44:ca:27:63:49:5f:70:85:83:
6e:fb:be:74:54:fe:c1:ba:dd:09:ce:04:20:fd:16:cd:7d:94:
3a:af:1b:e8:c8:fe:3e:84:48:88:7d:eb:8c:86:38:96:31:f5:
62:e3:4f:35:a5:e6:8e:2e:ee:77:c8:4f:23:25:f2:77:1e:88:
be:62:59:bf:12:21:78:38:d4:40:ce:7e:f0:b1:c9:cb:aa:16:
1b:18:99:6a:1c:ec:1f:86:c0:87:2a:67:64:7e:d9:42:df:4d:
5f:a8:94:bb:5c:3b:91:31:77:8f:7f:b7:42:0f:13:08:56:cf:
d0:cc:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:57 2026 by rpki-client