Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: WLB+FgAAKxeqGoL5N9t1K/tCFwTX/dFgGi/0YnJt3qQ=
Subject key identifier: 8E:5A:C3:A1:DA:0D:88:96:20:A3:DB:BD:AB:AE:C5:4E:95:E2:8E:CA
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019DA867628D5AF7C57F186F715BA1CB1C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: AB
Signing time: Mon 20 Apr 2026 01:00:40 +0000
Manifest this update: Mon 20 Apr 2026 01:00:40 +0000
Manifest next update: Tue 21 Apr 2026 01:00:40 +0000
Files and hashes: 1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
7: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
8: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: lvCtmaQIMfHOldlku+N7ZTdRbl2RVnIH46T7aTyzc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:62:8d:5a:f7:c5:7f:18:6f:71:5b:a1:cb:1c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Apr 20 01:00:40 2026 GMT
Not After : Apr 21 01:00:40 2026 GMT
Subject: CN=8e5ac3a1da0d889620a3dbbdabaec54e95e28eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:13:8b:9a:c7:8c:9b:aa:22:d2:1f:af:0b:
96:89:fd:04:cf:b9:60:d4:46:84:c2:e0:c6:51:7f:
20:0c:f8:b5:dc:90:bc:c3:00:6b:aa:42:21:c5:54:
a6:dd:42:a4:fa:ad:e7:78:23:e4:ad:58:b5:95:e1:
66:01:19:c3:56:a7:31:89:a5:27:37:de:0b:f8:fa:
f4:9a:f5:d0:d4:b0:27:9b:e3:95:ce:05:ff:d4:13:
18:84:bb:40:9f:ac:4a:a1:93:68:8d:21:d7:78:5e:
47:f2:cd:83:0b:aa:5a:6f:38:91:5b:1c:d0:f5:4d:
65:04:a6:13:78:99:76:c2:a3:7a:ed:1b:03:38:ed:
6c:ea:6d:8d:42:84:d4:24:dc:96:03:c7:96:73:92:
d2:c1:c7:a8:de:ab:a9:e1:ce:d2:0b:7e:1c:7d:8c:
77:1f:ea:b8:ee:0f:9c:0b:b6:dc:dc:a1:3c:6c:58:
b9:29:1e:5b:21:05:05:25:cc:45:08:f9:40:c4:1a:
fd:f8:5b:40:8f:8c:fe:f1:d7:9b:61:bc:f8:ea:04:
db:10:f3:5e:bc:e4:42:d6:ea:ff:b9:ce:f2:82:c5:
3c:96:5b:67:d4:ac:35:2a:54:7f:cd:56:b9:d4:7c:
35:13:99:a4:88:8e:a0:af:de:74:c7:fb:69:4d:5f:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:C3:A1:DA:0D:88:96:20:A3:DB:BD:AB:AE:C5:4E:95:E2:8E:CA
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:37:16:f2:90:60:bd:ca:d2:a8:52:2e:b8:76:df:3b:05:
3c:87:de:b4:aa:f2:65:b7:37:f2:93:e3:8f:c9:b3:d6:e0:3e:
79:52:f0:d5:e8:27:3e:9e:66:0b:ca:06:c7:7d:03:88:c9:0a:
21:37:35:9b:2e:c1:5d:32:5f:89:30:29:24:7d:ef:c6:9f:24:
6e:2b:93:fd:c8:b9:19:3c:1b:7a:0b:0d:5d:86:d2:52:01:e0:
7f:f3:10:2e:74:c0:1c:65:1f:88:7f:91:fc:04:4b:b4:e2:1e:
00:3b:ec:ab:e1:dc:ad:3b:a0:b5:03:12:99:78:51:b5:11:a2:
38:86:a1:0f:b5:cf:02:d2:78:87:cb:fc:be:f1:54:c3:dd:42:
3b:59:36:fa:9b:c3:28:b2:29:54:5b:17:d5:b6:37:0c:ef:11:
54:21:f1:15:38:bb:d3:75:03:9f:df:c1:27:35:ad:8c:19:e2:
b7:f3:1e:74:9d:69:a6:31:f0:a5:f7:72:2e:4f:69:7b:9d:e8:
6f:c8:db:d8:16:27:27:08:b7:a2:a0:6e:ee:05:06:4f:de:0f:
84:db:31:e9:01:3d:87:89:fa:12:23:4f:f2:39:65:83:eb:d4:
77:a4:14:f1:d9:e7:e3:b3:3a:0c:83:10:6e:3c:24:bc:b3:01:
ef:dc:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:51:00 2026 by rpki-client