Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: 4v8QAExG5oPzXHI6bmZcZFPb6oLc9w7WK5N95mC15uI=
Subject key identifier: A5:6C:14:E0:1A:98:E2:A1:25:58:8D:97:0C:0C:E6:32:09:ED:5B:CD
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019DDA2FD991BC145B9C3F7E8C0B29EB31C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 0409
Signing time: Wed 29 Apr 2026 17:01:02 +0000
Manifest this update: Wed 29 Apr 2026 17:01:02 +0000
Manifest next update: Thu 30 Apr 2026 17:01:02 +0000
Files and hashes: 1: BrEn8Ll6xu0ChcaE3vSi9IymY14.roa (hash: NNxrHTmgvweqwRH2WYDaRBvMbTQvhCqzhXCgDcQp9hU=)
2: dJzuUQdUvbJK7ApuLpV6Tk_tQMQ.roa (hash: xDU3oB6soulsXEg0wveHXPe21+ZwGXL0i23r4rN7i40=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: LAm+7zOj4EZ9aMz4inCtcR7G1JrrzIlNWAqP6hfGwOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:2f:d9:91:bc:14:5b:9c:3f:7e:8c:0b:29:eb:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Apr 29 17:01:02 2026 GMT
Not After : Apr 30 17:01:02 2026 GMT
Subject: CN=a56c14e01a98e2a125588d970c0ce63209ed5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:03:39:9f:62:7d:b9:d1:0f:f7:84:76:3e:
6d:28:bf:15:44:f8:33:00:c7:43:31:20:8f:83:81:
b6:de:09:85:aa:2e:99:27:d7:b0:e5:78:e0:5d:97:
47:d4:81:7a:6a:d9:a5:b2:e5:d4:60:27:10:08:2e:
24:8c:fa:19:a1:d5:9c:ab:90:8b:55:71:62:7a:54:
2f:9e:de:fe:f8:99:32:af:3b:d6:2f:25:65:10:f8:
bf:16:9a:4d:b8:91:b0:fe:d7:b0:0b:94:f9:a4:25:
92:9b:75:5f:c9:0d:4c:5b:19:5b:be:5e:92:e0:d1:
d1:3e:db:23:4b:5e:1b:dd:7d:38:4c:41:94:78:b5:
54:9c:13:f2:63:ef:27:5e:46:e8:2b:40:26:4e:d2:
5c:da:4b:60:34:0b:ab:e6:8d:c4:50:fb:2d:29:c9:
1b:ec:5a:19:46:ad:bd:d8:ad:6c:c1:03:78:93:86:
7b:65:03:b6:af:33:3a:45:83:8a:e8:40:0a:5e:e7:
6e:9a:2c:f6:04:21:8a:3b:7e:49:8d:d1:0a:26:28:
f3:6e:39:8f:78:f8:4c:53:ce:57:46:12:54:2d:09:
84:4c:3f:35:9a:0d:c4:1a:70:4b:47:af:95:d5:43:
32:2c:d4:3e:1b:b8:cd:fa:19:78:b2:87:7b:92:73:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:14:E0:1A:98:E2:A1:25:58:8D:97:0C:0C:E6:32:09:ED:5B:CD
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:b2:36:ef:93:e0:ee:61:00:e1:07:6f:94:e7:4f:60:ac:
04:68:ab:e0:f8:ef:e8:35:10:4a:99:7f:4e:78:da:93:6e:c0:
bb:d3:1a:c4:24:e2:9a:1d:c9:9e:97:29:80:8c:79:63:6c:5a:
20:de:86:fe:e8:21:60:49:7d:9d:7e:19:df:be:7e:e1:37:30:
8b:27:1f:ec:af:ec:32:db:f1:41:f3:fb:c6:9a:b7:12:85:08:
a0:80:68:9e:ab:68:41:13:64:ab:71:e7:cd:33:45:89:f0:9a:
94:e6:40:9f:32:46:20:19:bc:93:60:6b:a5:85:14:32:b4:54:
64:f9:62:01:fc:cb:ba:32:2d:7d:d6:3a:a0:f0:5a:51:32:4b:
3d:9c:3b:8d:27:bf:03:61:49:d3:1f:e0:ba:b4:4a:9d:82:68:
31:3d:4a:d5:de:03:e1:84:10:a6:9a:1b:39:61:8d:5e:fa:f0:
5d:a2:57:96:1a:43:aa:ec:ea:c1:25:7a:97:9a:8d:34:4e:93:
a1:af:31:08:b7:37:1c:51:f8:36:7d:d5:12:1d:fd:23:39:9a:
3e:1a:be:c0:26:3c:86:80:f4:72:57:f9:3c:81:e8:b8:1f:b8:
13:db:14:9f:50:35:03:ab:75:66:f3:8b:e0:62:7d:a6:9d:74:
c9:9e:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:14:49 2026 by rpki-client