Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: CD3sOytstKGNgoiUztl5AcNVUP6vAD2kKXFbFvDPYOk=
Subject key identifier: 16:7D:9E:AE:9D:00:6E:DE:00:17:CD:FB:1B:81:B2:69:FA:74:39:7E
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019DB13374010D57233ED13E970B188FA203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 1087
Signing time: Tue 21 Apr 2026 18:00:32 +0000
Manifest this update: Tue 21 Apr 2026 18:00:32 +0000
Manifest next update: Wed 22 Apr 2026 18:00:32 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: DUQ4OZFrkCwzrmubUya0G0rv6+O5Rqlar7tdHR47wJQ=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:74:01:0d:57:23:3e:d1:3e:97:0b:18:8f:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Apr 21 18:00:32 2026 GMT
Not After : Apr 22 18:00:32 2026 GMT
Subject: CN=167d9eae9d006ede0017cdfb1b81b269fa74397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:f9:58:d0:9f:53:f0:32:0d:67:1e:a7:80:
f7:06:6f:8e:c1:92:ff:19:e2:4b:c6:68:8f:5c:f8:
d2:a5:34:6f:50:eb:b0:ea:c6:6f:5a:84:74:1c:28:
02:be:1e:7c:ec:f2:ed:b9:fa:db:36:db:2d:e6:c3:
bf:17:f7:a3:65:14:0b:29:d7:04:25:9f:a7:4c:70:
91:a1:19:41:78:02:7c:23:76:df:06:10:c7:b5:55:
63:e0:d4:40:69:ea:01:76:c0:65:17:a5:78:2c:e5:
79:ff:79:22:21:54:56:cd:b7:41:86:ca:39:88:bd:
18:e1:1c:9f:69:79:ce:50:30:3c:e1:fb:68:7b:a5:
2f:55:bb:f9:08:dc:31:a9:11:bb:78:91:e4:f0:b6:
e9:6d:43:a0:35:8d:46:ba:ae:de:7e:e0:f6:42:fc:
3a:af:c0:8d:75:b2:36:f7:ae:32:41:c6:98:e3:d8:
d1:3b:c9:73:62:0d:b8:96:7c:75:e2:92:3b:b4:bd:
8e:6d:77:9e:f3:31:d5:c0:6a:c3:06:b0:fa:36:b7:
26:d4:d3:68:b6:c8:ab:9a:e3:24:33:46:cf:af:28:
71:ad:9a:21:7e:5f:79:aa:bb:fe:64:14:14:dc:4e:
4f:75:96:a5:66:e8:1a:7c:a9:c1:b6:5a:b2:85:8b:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:9E:AE:9D:00:6E:DE:00:17:CD:FB:1B:81:B2:69:FA:74:39:7E
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:26:31:72:2a:c9:a7:7f:50:09:11:a4:02:68:4b:3e:b2:3f:
48:47:10:95:30:ed:80:a3:b9:40:33:c3:05:48:61:0a:a3:c6:
13:8c:b9:a4:d3:fe:a8:53:84:a0:4e:68:33:45:0d:c7:3e:ce:
33:6b:15:cc:b9:45:36:ba:9f:a7:34:cf:f7:80:b2:99:8f:57:
4e:5c:0b:98:61:0b:78:f7:79:e4:8c:42:7e:ed:ab:ae:e2:e1:
7f:12:1f:8c:fb:b2:f3:85:95:75:73:94:38:25:46:3c:36:10:
5b:21:a0:de:63:b0:b6:f1:f5:08:58:3b:d7:7d:b5:d2:6c:a2:
64:dc:a0:b5:c6:5c:1b:24:ad:ff:70:e6:98:a1:c9:d7:31:72:
3b:69:9e:d4:a2:21:42:6b:2a:2f:9e:45:79:e2:91:c1:ef:13:
b3:02:33:27:02:e5:ad:ec:65:57:14:69:9d:39:02:e2:4b:00:
71:e2:68:b4:ce:be:d9:01:45:48:a5:11:29:c0:06:ad:a1:ab:
6f:a6:62:29:77:8d:b8:c0:a5:fd:bf:12:ee:e2:69:06:99:52:
f3:fa:1e:9a:1e:88:b9:53:85:a5:41:3a:58:ea:21:da:0c:9f:
1a:8f:15:4e:cb:d1:67:e1:3a:54:8d:f8:4d:f5:14:77:d6:9a:
5a:cf:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:53 2026 by rpki-client