Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: Uk5mPSMwEUTChnTAJA2CVKghPuw18Q/LCqfaY3JpU60=
Subject key identifier: 95:34:58:18:72:E4:55:8C:CD:2B:AE:BB:CB:A3:08:AB:17:DB:C6:11
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019DA8310039FBAC8820A0D13E26B9B6FC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 0960
Signing time: Mon 20 Apr 2026 00:01:16 +0000
Manifest this update: Mon 20 Apr 2026 00:01:16 +0000
Manifest next update: Tue 21 Apr 2026 00:01:16 +0000
Files and hashes: 1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=)
2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: Nr25BOGzDp8ybhMntNFpZtTXJs0umfALJ9zlPhZ2OaY=)
4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:31:00:39:fb:ac:88:20:a0:d1:3e:26:b9:b6:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Apr 20 00:01:16 2026 GMT
Not After : Apr 21 00:01:16 2026 GMT
Subject: CN=9534581872e4558ccd2baebbcba308ab17dbc611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:42:55:63:a5:4d:23:af:bb:64:8e:f9:f2:
23:52:3a:f6:c3:c4:6b:20:2b:bc:6f:d8:d0:aa:b2:
fa:fc:24:7d:27:a4:91:eb:3b:3e:c0:5b:83:ce:f9:
b4:0e:94:5c:f7:04:db:30:4a:02:17:70:5a:76:a1:
19:17:e1:d0:a5:9b:83:fd:52:38:96:50:54:25:e9:
41:3e:f6:32:4a:37:62:9f:a9:bb:93:9c:0d:86:af:
90:ed:e5:4a:42:62:3e:02:65:cd:47:61:ca:de:58:
ec:ef:40:bb:6a:ed:e6:2a:db:ca:fa:a3:86:ce:86:
9a:24:a6:57:e1:31:6c:7f:d3:26:ba:46:1a:c7:58:
ab:53:6c:c1:12:cb:f0:16:15:dc:0a:a3:96:d1:86:
0b:49:05:24:8c:a5:f0:f8:bc:a3:55:77:5f:1d:bc:
0f:00:13:d5:b8:d7:3b:2c:2a:21:11:c8:f7:64:ce:
eb:b4:26:a8:ae:ae:01:74:20:7c:f3:c2:52:b6:a6:
94:ea:1a:d3:6a:97:a9:b5:50:d1:50:0e:ba:fd:51:
6c:58:53:3d:c0:3e:4e:67:c2:a0:ab:8c:6e:2c:90:
78:96:aa:0f:72:85:a0:91:0c:dc:5d:12:ae:a7:bc:
f9:62:d2:58:ba:41:be:92:e0:2a:1d:ca:2e:31:6b:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:58:18:72:E4:55:8C:CD:2B:AE:BB:CB:A3:08:AB:17:DB:C6:11
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5c:5a:e3:cd:c7:8f:2a:23:7d:e5:ce:c4:26:1d:f3:97:ec:
20:72:48:e4:35:3c:02:20:57:26:70:4f:e9:16:bb:75:36:f1:
b0:08:eb:84:2f:5d:8c:07:d6:e9:f3:98:ab:02:44:23:21:3e:
ca:a5:2f:a2:94:d4:9d:68:45:8a:91:40:48:8f:63:bb:c5:b1:
ea:63:00:0d:60:5b:06:1b:66:f5:07:7a:2c:82:4a:0d:1f:a1:
1e:db:42:1e:64:2f:5c:8a:21:70:35:72:00:f7:09:06:74:1b:
3c:c1:60:9b:b1:41:e3:dc:9d:40:9c:ca:37:49:81:1d:1a:c3:
34:a7:34:5d:3e:04:b6:1e:13:29:39:3f:e4:04:15:73:59:65:
ec:13:a3:93:5b:03:0f:09:0b:6e:d4:e0:f9:dd:29:3c:a0:c3:
ad:04:dc:79:04:44:7d:f5:e6:fd:ce:56:c1:a5:74:07:09:e8:
6c:73:5c:0d:72:46:07:30:19:b9:88:8f:31:7b:89:56:38:bb:
2c:50:71:77:73:31:0f:d2:2c:9f:a6:6c:26:80:2b:d2:ca:46:
99:30:d4:b6:4f:23:2f:9f:39:66:a6:68:cb:bf:40:7f:59:4e:
d9:89:a2:61:f2:66:10:54:1a:89:5a:de:a2:1b:14:04:b1:58:
c8:65:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:44:09 2026 by rpki-client