Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: aDAYfAAqKBv1PgAy2p/1Dfm8e3K45ODxIFpH9n3MpqA=
Subject key identifier: FB:D3:86:F7:E1:4A:9D:E4:01:C6:90:BE:F6:FA:E5:99:A3:AF:89:B7
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019DDCC37AD9708264A2C2A4682A8AA90CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: AF
Signing time: Thu 30 Apr 2026 05:01:31 +0000
Manifest this update: Thu 30 Apr 2026 05:01:31 +0000
Manifest next update: Fri 01 May 2026 05:01:31 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: LS3LwgdJjW9GC/BsjTM767Ka+3XTLowCYo9DeSBx1J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:7a:d9:70:82:64:a2:c2:a4:68:2a:8a:a9:0c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Apr 30 05:01:31 2026 GMT
Not After : May 1 05:01:31 2026 GMT
Subject: CN=fbd386f7e14a9de401c690bef6fae599a3af89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:7e:0c:61:e6:a2:fd:a9:2e:e4:09:11:50:
7a:82:af:bb:8e:04:d9:6c:ce:b3:b5:32:45:63:8b:
13:74:11:48:f7:37:02:23:7c:fd:46:7f:0d:a2:16:
a0:cf:52:c1:e7:4d:57:fe:61:e1:f0:d9:21:a0:51:
13:91:76:37:23:49:42:bb:e1:16:6c:53:22:8d:a9:
4d:7f:15:94:f5:c1:52:34:0e:5b:d1:cf:fb:96:0f:
df:4d:2e:4c:97:76:9d:2e:05:fb:2a:fd:d5:6b:93:
96:ec:d5:44:d7:8c:28:93:a8:0e:e6:c7:6a:13:c0:
0c:3f:f7:77:bf:5b:b5:21:6d:f3:5c:c6:e9:18:5e:
8f:a7:ac:b9:1a:b4:3d:4b:7b:7b:a8:f6:3a:3d:99:
45:e5:72:4f:57:2b:0b:65:e1:dc:2a:b7:c3:7f:64:
66:2b:3f:5b:84:00:25:0b:7d:6e:48:b6:64:38:10:
ba:35:b3:6b:69:38:c4:e1:64:ba:1f:16:cc:3d:23:
ba:a9:db:b3:ab:38:e0:71:3b:c2:65:18:19:b3:85:
a7:96:69:b4:90:04:33:7d:75:5b:b1:70:ef:d7:7f:
a5:58:9a:86:0a:4d:b0:a6:76:06:d6:03:53:b0:91:
97:1c:f2:9f:25:db:71:4c:81:47:c1:32:7a:82:1b:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:86:F7:E1:4A:9D:E4:01:C6:90:BE:F6:FA:E5:99:A3:AF:89:B7
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:87:44:b0:92:44:f5:59:76:66:78:cd:36:15:96:82:1f:
04:e1:5c:02:9c:b6:1d:57:cd:8c:5f:c6:dd:5d:ca:84:ed:62:
6c:5c:21:25:33:48:0a:91:3f:62:9c:8a:7d:8b:62:39:2f:92:
4f:18:cf:a9:7c:a2:b5:82:c4:62:11:55:d9:bb:e9:7b:5f:e6:
d1:06:76:37:a7:3a:a2:41:5f:16:bb:8e:ed:e3:1c:80:cc:98:
61:77:02:d0:12:7c:11:57:82:95:b6:e7:2a:0a:a6:3c:6e:3d:
c9:bc:cd:37:3f:6b:d1:5b:87:9e:9c:05:d2:b0:fd:6d:c2:81:
57:24:6d:bc:04:c0:ef:da:7c:1c:c8:c4:6f:bd:3b:5a:f7:77:
b8:29:05:68:83:24:56:0c:57:30:22:3c:7f:d3:27:dd:b0:03:
36:fe:bf:f0:51:39:9a:7b:7a:31:f4:98:5a:e6:7d:80:b9:c8:
22:3b:38:61:59:ef:6f:97:65:88:dc:04:71:57:45:dc:6a:79:
75:93:2d:7c:07:93:01:fa:08:f7:6d:e8:88:88:8a:64:45:20:
5d:5e:7e:83:ec:92:79:20:76:3d:d1:92:dc:d7:e7:00:c9:10:
f0:82:25:f9:4c:24:1d:a1:77:fb:f9:b0:b6:05:88:9d:8b:46:
bd:3f:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:05 2026 by rpki-client