Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: jSRWf6GD4RhoWm5Y9qB15E5U/9e/RPDiaD/TqLOg+rk=
Subject key identifier: 46:0A:22:7E:47:B3:22:31:41:04:B8:C1:B8:C0:D4:96:E2:16:BB:09
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019DA6B01DCCA97E12E5C882A50C6C1CDD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 17:00:52 +0000
Manifest this update: Sun 19 Apr 2026 17:00:52 +0000
Manifest next update: Mon 20 Apr 2026 17:00:52 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: ClkJsmFaoBsPW9RfPt50YVJmkegDB/BSUhhzgK412AA=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:b0:1d:cc:a9:7e:12:e5:c8:82:a5:0c:6c:1c:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Apr 19 17:00:52 2026 GMT
Not After : Apr 20 17:00:52 2026 GMT
Subject: CN=460a227e47b322314104b8c1b8c0d496e216bb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:85:bf:8d:96:ef:43:4a:a2:2a:d7:ea:33:
cd:8e:4f:3d:df:e7:b6:f9:d3:21:0f:dc:1d:fb:a0:
10:a7:75:5a:aa:3a:97:52:29:61:40:ef:12:52:8c:
31:88:9f:9f:7a:b8:be:ce:ca:b1:dc:61:42:a2:48:
51:b3:64:b4:de:13:1c:5a:26:a5:a8:47:ac:6a:66:
72:24:27:45:f4:e5:3d:80:d7:54:11:cf:27:b9:d4:
11:c2:32:83:cf:a7:e0:38:84:43:88:7a:c5:50:64:
a1:4a:ea:92:4d:94:fa:b2:40:75:19:fc:f6:32:91:
f5:c7:9d:6f:93:2d:e3:42:35:d7:e9:56:c3:9e:c6:
66:a4:69:17:db:fb:ed:f2:58:35:37:09:1a:d0:3a:
87:d1:8d:4b:9f:0e:9c:e7:b7:8d:47:64:8c:81:18:
03:da:b2:e6:3b:5c:2d:db:01:28:08:fb:34:e7:ca:
3a:8d:12:b9:38:2e:5b:7b:e9:05:ad:0a:c9:3c:b1:
6f:67:ee:8f:55:63:fa:04:28:37:44:3c:c6:61:3d:
ad:7d:e3:1e:b7:9a:e3:f8:f1:61:db:73:2c:21:68:
2e:9d:31:d9:34:4c:ed:19:ee:9f:f7:26:18:be:c7:
54:71:53:6a:7b:c4:1c:0e:06:a2:78:d3:d1:ba:7d:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:22:7E:47:B3:22:31:41:04:B8:C1:B8:C0:D4:96:E2:16:BB:09
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:e8:f2:a9:64:15:f9:30:3c:e6:71:8d:eb:b3:ad:ad:cc:
a2:d9:a3:62:02:4e:b7:1b:1b:50:6e:75:1b:1c:d9:74:bd:22:
99:10:79:35:89:e5:c1:41:bb:f9:4d:f3:11:33:82:43:24:2e:
09:88:f4:0e:5a:06:96:a8:63:7a:0b:ac:ef:ee:2b:b5:8b:0b:
1b:8e:32:17:6b:16:b2:01:ab:31:b3:fe:b9:33:97:6a:30:0a:
54:92:80:e6:77:d2:70:8a:35:24:d5:9a:dd:9c:0d:f6:bc:68:
11:08:ce:92:16:db:81:e3:80:a0:3d:40:ac:b3:de:3d:4d:67:
71:42:c3:dd:c8:f7:83:ac:fb:72:50:24:f1:5e:d9:7b:8a:6a:
91:83:c6:64:5b:59:f1:b3:5a:30:b1:d3:19:65:f5:f3:02:fa:
3a:75:19:57:8d:a8:6f:c9:7f:19:63:c2:4a:1e:15:dd:09:0b:
6f:ea:20:11:10:52:34:b3:e9:c5:e4:82:8a:6d:81:1a:60:bd:
8f:a9:d8:2e:1a:1c:27:8e:68:e7:37:e8:e5:64:bc:4e:4f:33:
5a:59:d9:de:7d:7e:e7:55:7b:c9:fe:68:8d:47:6d:1d:87:1d:
95:9d:22:52:3c:39:d8:78:2a:7d:7e:02:a5:3f:93:00:c9:64:
f1:37:43:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2msB3MqX4S5ciCpQxsHN2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjYwNDE5MTcwMDUyWhcNMjYwNDIwMTcwMDUyWjAzMTEwLwYDVQQD
Eyg0NjBhMjI3ZTQ3YjMyMjMxNDEwNGI4YzFiOGMwZDQ5NmUyMTZiYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjryFv42W70NKoirX6jPNjk893+e2
+dMhD9wd+6AQp3VaqjqXUilhQO8SUowxiJ+feri+zsqx3GFCokhRs2S03hMcWial
qEesamZyJCdF9OU9gNdUEc8nudQRwjKDz6fgOIRDiHrFUGShSuqSTZT6skB1Gfz2
MpH1x51vky3jQjXX6VbDnsZmpGkX2/vt8lg1Nwka0DqH0Y1Lnw6c57eNR2SMgRgD
2rLmO1wt2wEoCPs058o6jRK5OC5be+kFrQrJPLFvZ+6PVWP6BCg3RDzGYT2tfeMe
t5rj+PFh23MsIWgunTHZNEztGe6f9yYYvsdUcVNqe8QcDgaieNPRun1SRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYKIn5HsyIxQQS4wbjA1JbiFrsJMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHPo8qlk
FfkwPOZxjeuzra3MotmjYgJOtxsbUG51GxzZdL0imRB5NYnlwUG7+U3zETOCQyQu
CYj0DloGlqhjegus7+4rtYsLG44yF2sWsgGrMbP+uTOXajAKVJKA5nfScIo1JNWa
3ZwN9rxoEQjOkhbbgeOAoD1ArLPePU1ncULD3cj3g6z7clAk8V7Ze4pqkYPGZFtZ
8bNaMLHTGWX18wL6OnUZV42ob8l/GWPCSh4V3QkLb+ogERBSNLPpxeSCim2BGmC9
j6nYLhocJ45o5zfo5WS8Tk8zWlnZ3n1+51V7yf5ojUdtHYcdlZ0iUjw52HgqfX4C
pT+TAMlk8TdDBA==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:56 2026 by rpki-client