Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: pRlhbkgptaOnbdGYZPhASBDlwATf6WCyUrGn1wenCoY=
Subject key identifier: 36:6D:32:00:38:16:4E:E2:08:14:53:24:5B:CE:85:80:E6:B7:29:6B
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019DB1D875C64BC616FD9AC3D1396650537A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 0932
Signing time: Tue 21 Apr 2026 21:00:46 +0000
Manifest this update: Tue 21 Apr 2026 21:00:46 +0000
Manifest next update: Wed 22 Apr 2026 21:00:46 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: nSqO5vUDhnZGL0mJ/jDNolZyw9ImImXbIG4G0nOuoJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:75:c6:4b:c6:16:fd:9a:c3:d1:39:66:50:53:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Apr 21 21:00:46 2026 GMT
Not After : Apr 22 21:00:46 2026 GMT
Subject: CN=366d320038164ee2081453245bce8580e6b7296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:a5:58:59:08:51:e1:b2:a1:23:fc:61:37:
bb:6d:af:7a:5e:f4:63:07:11:15:cd:77:86:02:b4:
f5:dd:6c:f1:ae:70:a7:5f:83:eb:db:2b:45:76:0c:
f1:ef:23:30:ce:fb:24:03:6e:7b:97:c7:a4:97:6f:
c5:18:c4:2c:05:96:82:93:27:a8:f9:75:21:7a:fa:
f0:2a:aa:f4:a7:b4:e0:9f:bb:9f:af:26:0c:fa:96:
dc:9f:31:a8:c4:79:f2:63:3f:4f:25:4b:0a:6d:e9:
e6:13:5a:b6:17:a8:be:e7:c9:53:a1:ef:c4:32:3b:
16:d5:b5:45:c6:e0:df:31:df:b6:6d:4b:02:c9:27:
f9:93:e8:31:7a:c4:60:01:84:69:9e:77:ce:87:8d:
14:12:b9:de:4c:65:d3:98:2b:11:a2:8f:10:59:4a:
9d:86:26:22:0a:52:73:c0:87:11:e6:79:51:25:1d:
03:2b:f1:b9:08:1f:13:49:f1:bb:76:c2:84:02:cb:
42:d0:c5:6c:42:b2:55:ea:a9:85:88:98:33:6a:e8:
5f:1f:92:8f:cd:22:6a:79:a1:0c:cc:cc:70:81:78:
c3:46:30:db:b9:4c:02:7b:05:af:cd:3d:c4:c3:6d:
af:c5:fa:d3:03:d0:e3:bb:1d:8d:c3:6a:af:18:a1:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:32:00:38:16:4E:E2:08:14:53:24:5B:CE:85:80:E6:B7:29:6B
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:de:41:05:89:f3:f0:4c:52:01:c7:d5:99:c2:5b:83:bd:2b:
2c:d1:59:db:69:8f:6d:d9:1b:3a:c4:c7:71:dc:f3:f2:32:a9:
c8:9d:e8:3f:ef:c7:1b:47:b1:56:6e:b1:ea:c8:13:86:ea:1e:
88:13:06:46:ae:a0:f3:5d:ac:0f:b4:3d:b8:2c:fd:fe:94:7c:
8f:ca:35:c9:6e:50:12:24:dc:a7:e5:7c:ee:c6:50:18:d1:8a:
63:33:c7:8d:17:0c:15:1c:a4:63:03:5b:a6:2b:49:17:a4:63:
64:76:c7:00:10:83:59:69:c7:64:fe:f2:72:2d:40:9b:5d:4d:
7e:d2:b8:ba:b2:3c:6d:d0:8c:87:e2:3c:88:a6:a0:af:17:0f:
47:7e:a9:7d:0c:ad:76:72:51:59:25:95:be:c4:cf:9c:14:bb:
a7:d9:8f:d6:58:61:15:48:54:90:0b:4b:f1:b1:04:08:64:c2:
05:26:ae:c3:c5:0f:29:16:4c:cb:2a:11:49:7d:ee:4a:d7:97:
76:73:2f:50:c5:b9:b6:5b:7b:cc:64:23:57:b3:97:56:fd:1d:
73:f7:4b:63:81:be:76:d7:2e:51:ce:7e:4a:a9:b7:ab:ed:28:
e0:db:c6:8d:22:84:ff:6d:d1:b9:27:06:65:a8:be:c2:69:dc:
3f:51:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:33:13 2026 by rpki-client