Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: 1VaqxgYEPxZsDLdAnLHeRkbqfRzPheMYV0gbvdmlVKA=
Subject key identifier: E7:36:72:7D:CC:D4:41:B0:C3:36:66:4A:D8:37:85:6D:7F:38:F0:80
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 019DD0BE956CC317C2819B22038A6258C7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 15C0
Signing time: Mon 27 Apr 2026 21:00:44 +0000
Manifest this update: Mon 27 Apr 2026 21:00:44 +0000
Manifest next update: Tue 28 Apr 2026 21:00:44 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: PdJDEn6zpQY5Pu+ls2NtdHzdiZOYU42eziThvjA5itQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:95:6c:c3:17:c2:81:9b:22:03:8a:62:58:c7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Apr 27 21:00:44 2026 GMT
Not After : Apr 28 21:00:44 2026 GMT
Subject: CN=e736727dccd441b0c336664ad837856d7f38f080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:95:35:e8:f1:94:99:69:fc:f5:5e:ac:98:
d1:4c:4c:71:e7:a3:2a:22:2c:9c:0f:37:cf:0f:b2:
ba:9b:af:73:bf:48:45:00:79:95:ff:60:f8:03:68:
3f:80:2b:35:2f:77:2a:21:09:6e:85:eb:91:46:ca:
38:31:b2:90:9c:21:8f:ca:b2:72:13:6f:b9:dd:61:
10:21:6c:aa:af:b6:28:03:94:35:78:5c:18:48:40:
3b:bb:75:dc:97:81:6e:33:d9:1b:92:f8:a6:e6:b2:
1d:dc:f1:a4:bd:ba:57:32:a9:6a:0a:88:c0:29:fe:
09:61:0a:d8:62:a8:92:ad:6d:1a:a0:2a:2b:3d:6a:
6c:94:95:93:26:16:fe:5f:89:12:df:82:07:34:53:
fd:9a:54:56:e0:f1:84:2e:fe:5e:ba:68:5b:25:2a:
21:64:ed:a8:3a:97:3a:31:99:62:60:29:3f:e6:64:
a0:2b:80:4e:f1:bc:3f:e8:2d:a8:b9:0f:ca:1c:79:
a3:08:d0:61:a6:61:36:12:21:f4:ff:80:64:8d:4b:
fa:67:9f:a4:27:73:c0:68:d4:97:c0:6a:75:7f:21:
a2:91:dd:56:ba:d2:f2:ba:84:ec:de:12:82:ba:3a:
b8:68:b1:b8:15:ab:9a:b8:80:dc:ed:1e:3a:6f:2c:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:72:7D:CC:D4:41:B0:C3:36:66:4A:D8:37:85:6D:7F:38:F0:80
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:34:0f:c6:ec:6c:e7:d1:56:d1:49:b1:37:8b:2b:28:30:
14:a1:0b:1b:c0:6c:ba:83:4b:77:c5:8a:67:56:75:a8:17:ce:
a8:6e:8c:8b:46:b8:a3:bc:c2:03:cf:00:8f:c2:ba:93:16:f7:
e3:63:48:2e:01:44:24:d7:34:c1:bd:c6:a5:4d:04:5e:99:79:
81:a0:a8:8d:46:38:e9:02:38:4c:f0:3f:61:91:ee:76:9e:4c:
0e:8c:b3:6e:e1:e6:55:13:db:1f:9d:6a:ee:c5:e9:f2:7a:26:
51:b5:ef:f5:1d:be:d1:ad:c9:59:d2:d1:4a:39:95:07:d5:97:
61:00:a1:f4:28:6e:de:61:60:24:e3:3a:6e:09:2c:55:a2:6e:
8e:0f:33:ad:9a:4a:7b:42:fe:45:3b:ad:de:cd:ac:19:6e:ae:
0f:77:8d:54:11:04:96:f0:1b:b1:34:ff:57:d5:34:71:c5:a2:
b4:1f:3f:57:3e:6e:f4:9d:3c:b0:4f:69:2d:f8:57:e4:ff:8d:
17:05:c7:f1:01:d1:18:42:43:6e:71:dc:12:d2:91:68:9f:be:
05:53:46:be:03:c1:39:fe:70:eb:df:a6:82:be:a2:88:50:8d:
f0:f0:0f:60:e9:76:80:f3:9b:2b:ed:9c:3b:ef:df:46:75:ee:
24:d3:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:51:16 2026 by rpki-client