Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: aIfwSBrxv5At2o4dArIr41C9mFcQnB+HMIyItvd3OJM=
Subject key identifier: EF:F4:21:0F:FC:94:0C:91:67:A2:D3:FD:05:16:7E:E2:06:B2:12:65
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 019DCED07F675F457A0A796CB90BECB316CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 12:01:03 +0000
Manifest this update: Mon 27 Apr 2026 12:01:03 +0000
Manifest next update: Tue 28 Apr 2026 12:01:03 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: 82tA3SRCi9oz1NIa/X+1Xsez3oOK1HNd3Nf7w7ySVIQ=)
2: rYWvgBpIwofNn7aLhB0mJ0iM21E.roa (hash: my07QvKsBSoGPzx9lWKg1TKeZIOPYji+dEgnbV20gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:7f:67:5f:45:7a:0a:79:6c:b9:0b:ec:b3:16:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Apr 27 12:01:03 2026 GMT
Not After : Apr 28 12:01:03 2026 GMT
Subject: CN=eff4210ffc940c9167a2d3fd05167ee206b21265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:ad:0c:82:79:a8:0e:9f:8c:3c:e6:48:30:
b4:17:37:91:eb:7e:00:d4:9a:cf:60:cd:77:9d:91:
38:1d:8d:01:e2:92:9c:66:c4:8c:fd:f9:e4:f8:8d:
d9:4f:69:4e:03:1e:08:75:08:b3:44:63:d4:5c:44:
04:61:e7:18:88:e0:6e:60:43:28:bb:a6:39:57:c7:
90:bd:1f:15:3d:d3:6b:de:7b:df:61:18:61:4b:75:
9b:10:76:a5:a5:0e:7d:10:26:fa:16:c4:ed:c1:bd:
5b:3f:d4:1d:6b:c2:c3:b1:23:d9:62:b1:6c:53:68:
c0:c5:ec:d8:30:97:79:e0:cf:2f:00:70:da:c1:64:
a4:de:60:4b:06:be:01:62:7d:e0:53:90:9c:7f:00:
15:f8:a1:55:19:06:d1:4b:69:ce:44:59:57:e4:45:
8b:c0:6b:83:af:67:49:cc:77:f7:6e:33:1c:67:0b:
dd:db:b5:5a:f9:1b:65:3b:2c:26:df:75:4e:79:43:
f8:4d:3e:78:6b:2a:20:e6:e7:50:ed:83:a0:d7:e8:
68:a7:9d:8a:c3:8f:b7:1f:aa:fe:a5:ac:af:46:b5:
41:4b:ff:10:e3:fa:96:06:1d:59:16:bb:3d:7c:a9:
6c:e3:4e:45:d6:d2:a0:61:c8:93:78:3a:c2:33:e0:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:21:0F:FC:94:0C:91:67:A2:D3:FD:05:16:7E:E2:06:B2:12:65
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:87:fc:26:72:54:9b:93:ca:5a:3c:d9:14:64:37:d4:04:ef:
82:d0:02:ff:a9:35:f2:b7:ca:f1:23:79:ff:a7:df:5f:95:ea:
cf:53:c6:a2:dd:cb:39:31:65:68:0b:87:26:57:ec:e0:00:99:
8c:e7:cf:73:e1:a9:f2:d4:33:3f:ea:d8:55:a4:5d:3b:ca:51:
fc:ac:99:84:72:a3:fc:03:5d:79:4b:c3:32:25:13:f1:83:4f:
97:6c:5d:aa:11:16:14:b0:df:fe:da:f9:33:5a:10:e9:cc:17:
48:78:22:7b:4e:f0:18:38:3d:8d:e1:ef:49:50:3c:3d:29:aa:
0e:50:52:62:ff:95:32:fb:87:fb:8c:b9:40:04:31:ea:5e:7d:
02:ce:78:b6:7a:5c:ab:5f:19:73:0f:f7:b0:87:69:86:f9:35:
27:ac:c3:51:02:5e:58:16:99:df:42:ac:70:cd:69:48:ad:7a:
cb:36:2b:93:6e:a2:af:25:8d:93:11:27:57:39:ba:fc:8c:dc:
cf:c8:81:7d:6e:7f:1d:d6:57:36:a2:e2:94:ed:a0:40:0a:58:
49:07:2c:ea:3a:7a:a5:e7:8b:e0:d1:40:1b:4c:c1:74:7b:83:
3c:9d:f4:a1:2a:52:f4:c1:13:cb:51:a6:63:5f:07:b9:1c:15:
18:61:0d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0H9nX0V6CnlsuQvssxbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOThmZTUwMmFjMTZlOTU3Y2MzM2ViYzJlYzFiZTgzYmJl
ZDdjYzQwHhcNMjYwNDI3MTIwMTAzWhcNMjYwNDI4MTIwMTAzWjAzMTEwLwYDVQQD
EyhlZmY0MjEwZmZjOTQwYzkxNjdhMmQzZmQwNTE2N2VlMjA2YjIxMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYitDIJ5qA6fjDzmSDC0FzeR634A
1JrPYM13nZE4HY0B4pKcZsSM/fnk+I3ZT2lOAx4IdQizRGPUXEQEYecYiOBuYEMo
u6Y5V8eQvR8VPdNr3nvfYRhhS3WbEHalpQ59ECb6FsTtwb1bP9Qda8LDsSPZYrFs
U2jAxezYMJd54M8vAHDawWSk3mBLBr4BYn3gU5CcfwAV+KFVGQbRS2nORFlX5EWL
wGuDr2dJzHf3bjMcZwvd27Va+RtlOywm33VOeUP4TT54ayog5udQ7YOg1+hop52K
w4+3H6r+payvRrVBS/8Q4/qWBh1ZFrs9fKls405F1tKgYciTeDrCM+BZ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/0IQ/8lAyRZ6LT/QUWfuIGshJlMB8GA1UdIwQY
MBaAFE2Y/lAqwW6VfMM+vC7BvoO77XzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYt
Y2QwMDliMzAwYTZjLzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYtY2QwMDliMzAwYTZj
LzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4f8JnJU
m5PKWjzZFGQ31ATvgtAC/6k18rfK8SN5/6ffX5Xqz1PGot3LOTFlaAuHJlfs4ACZ
jOfPc+Gp8tQzP+rYVaRdO8pR/KyZhHKj/ANdeUvDMiUT8YNPl2xdqhEWFLDf/tr5
M1oQ6cwXSHgie07wGDg9jeHvSVA8PSmqDlBSYv+VMvuH+4y5QAQx6l59As54tnpc
q18Zcw/3sIdphvk1J6zDUQJeWBaZ30KscM1pSK16yzYrk26iryWNkxEnVzm6/Izc
z8iBfW5/HdZXNqLilO2gQApYSQcs6jp6peeL4NFAG0zBdHuDPJ30oSpS9METy1Gm
Y18HuRwVGGENdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:37 2026 by rpki-client