Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: GGmyMQhsVfvJzKb4kEe2TvGPg9PEI1u/X4SycP3oRb0=
Subject key identifier: 2F:BE:CD:D6:EF:42:5E:9B:A2:5F:04:01:0D:0D:A2:99:5A:BF:5E:4B
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019DCE2BAC17CDD3E36BF5F4592250D6BCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 09:01:01 +0000
Manifest this update: Mon 27 Apr 2026 09:01:01 +0000
Manifest next update: Tue 28 Apr 2026 09:01:01 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: AwKDFXlAXbPjwO5n1PnOUmDgUWmDSrMFdNTbCI6e9Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:ac:17:cd:d3:e3:6b:f5:f4:59:22:50:d6:bc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Apr 27 09:01:01 2026 GMT
Not After : Apr 28 09:01:01 2026 GMT
Subject: CN=2fbecdd6ef425e9ba25f04010d0da2995abf5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:fe:21:1d:17:95:dc:46:9c:94:09:03:da:
53:62:6e:2e:d3:1a:21:83:80:f8:f0:47:29:ea:4a:
fa:76:ad:56:15:76:7c:3d:6b:03:bd:39:6e:f1:03:
bf:71:34:95:ca:bf:79:58:48:7e:23:de:ce:1d:38:
d9:9b:c8:1a:16:f2:a0:6f:eb:e8:5f:56:43:b6:7f:
bc:5e:3b:8c:47:68:d5:df:f5:d3:86:38:a4:21:ce:
5c:6e:e8:d2:df:40:89:ae:75:73:f3:c2:e6:2b:6e:
a1:4b:d6:74:e8:44:dc:0f:a5:98:8f:39:81:1a:70:
80:3d:8b:ad:19:16:c0:60:1c:ab:a0:9d:80:9e:db:
05:0e:8d:df:bc:5e:e1:7e:5a:7b:a5:0e:a7:1a:2b:
bd:5e:77:1a:4c:e5:71:00:e2:7e:79:6f:df:85:ad:
7c:aa:fc:71:ed:67:e2:dd:33:9e:14:2b:28:c6:9c:
64:00:15:c5:b1:b0:87:d6:ba:33:f2:7e:b1:30:9f:
f7:55:16:b1:fb:a8:a7:7a:03:8f:06:22:c3:f5:20:
06:59:6d:7b:5b:e5:5e:a8:3b:01:1e:52:d5:4b:04:
48:78:bf:4f:b7:dd:a5:f5:c0:90:1a:85:67:e0:23:
42:b5:27:57:60:82:b3:3a:f8:b2:7c:53:99:51:b3:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:CD:D6:EF:42:5E:9B:A2:5F:04:01:0D:0D:A2:99:5A:BF:5E:4B
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:8d:e5:26:48:23:e1:64:79:23:a5:06:6a:e7:b9:16:a1:
59:31:7c:5e:47:ab:8d:c3:b2:7a:3b:98:ef:72:c4:5c:d2:64:
fc:4e:74:64:55:94:82:5b:77:dd:17:a1:1d:45:04:9e:b1:86:
55:f3:71:2b:53:48:c4:94:68:88:eb:9f:94:a9:f3:80:99:82:
36:45:03:e6:96:63:95:0a:de:80:88:21:65:03:e0:1a:64:59:
82:00:9f:e9:a8:c8:c7:93:fd:5e:35:91:77:b9:a4:eb:24:4d:
db:ef:11:be:0e:fb:83:05:bb:4f:ee:b6:4f:d4:01:0e:19:69:
49:d1:7f:be:6d:d8:e9:e3:20:9f:42:a4:16:a0:7e:d4:9d:89:
25:79:ea:34:f0:52:51:44:b4:e9:5d:aa:6c:da:c0:56:b6:00:
ff:1d:b2:9a:21:77:92:75:e5:24:c1:99:19:fb:da:80:d2:62:
79:74:ae:e2:9e:30:0f:b4:14:bb:fa:98:2a:93:62:b1:72:9e:
ae:d8:69:45:26:ad:d8:87:a8:bc:6e:ee:6c:54:05:7b:c7:92:
0c:c2:f1:2f:96:91:f8:6c:ea:39:92:c1:82:a9:12:39:ed:f4:
1f:e5:ce:95:53:72:7f:3a:b2:b1:ff:21:7a:5e:1f:ab:d4:0e:
db:0c:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:40:53 2026 by rpki-client