Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: uBXrmUyCEn5JSW6+LviTOjkqnw9BN2MtrLOj9fuj5qI=
Subject key identifier: F8:6C:B2:2A:30:43:E5:2A:CA:F4:45:00:B0:80:28:04:E5:78:D1:14
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019DB2EBE94C7AAF18B041B9FEFDBCFD7D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 18DD
Signing time: Wed 22 Apr 2026 02:01:38 +0000
Manifest this update: Wed 22 Apr 2026 02:01:38 +0000
Manifest next update: Thu 23 Apr 2026 02:01:38 +0000
Files and hashes: 1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: JM2zvGLxrfdTeLg0SKRmNwvZ7iItVckh53Aqg3MIS3A=)
2: xE2y3RI3nuzZANWmX6fxwf9bkMg.roa (hash: SegO1prKKRLU/fQqPq9kWO/VrlLtICljHXGoFYxWh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:e9:4c:7a:af:18:b0:41:b9:fe:fd:bc:fd:7d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Apr 22 02:01:38 2026 GMT
Not After : Apr 23 02:01:38 2026 GMT
Subject: CN=f86cb22a3043e52acaf44500b0802804e578d114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:4f:20:5a:d3:0b:6e:f5:25:ff:94:5e:26:
55:ca:a0:a5:f9:75:23:a1:51:22:7b:e2:e5:4a:13:
1b:08:74:04:9d:9a:68:2f:c2:ff:ff:ef:66:3c:c0:
25:98:11:df:56:3b:a0:95:99:7f:6d:6e:81:a1:bb:
87:50:a2:90:18:6d:e6:36:76:17:48:95:6a:5d:fe:
25:a1:f5:78:56:76:5a:f3:01:fa:bd:b1:39:67:81:
db:33:63:1d:b6:f7:ad:a0:ae:61:53:2a:c0:76:87:
88:bc:cf:13:a7:55:c5:dd:f2:ec:15:32:15:01:c7:
98:d7:a9:31:64:4d:40:2e:73:c6:55:db:57:11:eb:
2c:dd:0c:0e:21:14:9f:6a:5d:aa:99:62:97:01:5e:
e5:1a:ad:8b:6f:10:cc:9d:8d:cc:ec:59:27:f8:0a:
55:c1:2c:05:0d:b9:fd:0b:48:99:9f:0f:84:4b:f2:
a7:dc:31:77:4e:1c:57:61:d4:fa:ee:2e:07:ac:80:
87:c2:c9:18:d7:34:a4:ca:fa:66:9a:30:1c:06:7d:
d0:e5:c1:39:d1:87:83:6d:e2:2a:6e:7c:64:90:27:
7a:40:c5:73:c0:8e:4d:ac:6b:d9:67:a6:ef:ed:bb:
6f:8d:76:00:89:26:9a:9b:5e:86:1d:61:8a:c0:3f:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:B2:2A:30:43:E5:2A:CA:F4:45:00:B0:80:28:04:E5:78:D1:14
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:2f:c0:2f:63:d8:1c:3c:52:cf:f2:db:0a:85:82:38:68:
8d:75:f5:62:fa:1c:fc:d7:2d:26:57:83:0c:4c:4a:bf:2a:70:
6b:01:e0:54:ed:d7:b9:a2:7c:ce:d7:32:41:ba:5a:0d:35:d3:
f6:13:e9:d3:90:e7:3b:98:9c:dc:4c:cd:37:34:a8:10:1a:7f:
e8:68:37:35:b2:d0:f3:67:1d:8e:60:d1:6b:37:55:ec:ce:45:
dd:a7:c6:e9:fb:e4:b2:b3:87:0d:d7:b3:a3:99:a0:9e:c2:ad:
a0:69:83:43:f3:8c:5e:8a:a9:e5:91:50:49:15:e3:bd:80:08:
6b:bd:d7:3d:38:93:51:6f:65:ac:3e:65:12:38:e9:cd:99:94:
d7:91:38:90:c8:18:74:2c:05:04:c7:aa:7a:ee:97:ba:50:4c:
cd:4e:e1:7b:7a:b2:8c:00:d9:fd:73:aa:7f:ff:2e:83:7c:59:
e9:65:07:06:db:0a:17:d8:75:9a:0a:73:72:c1:31:d8:5a:7f:
62:75:ad:fb:bd:61:86:84:f9:ce:cf:59:ba:26:c3:62:91:63:
7b:4a:2f:f7:29:14:f6:66:d9:05:4e:21:e9:28:9b:19:e4:76:
0e:d5:86:e1:6d:17:ca:f6:bc:ae:68:94:c8:77:82:21:25:8e:
6e:69:43:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2y6+lMeq8YsEG5/v28/X0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjYwNDIyMDIwMTM4WhcNMjYwNDIzMDIwMTM4WjAzMTEwLwYDVQQD
EyhmODZjYjIyYTMwNDNlNTJhY2FmNDQ1MDBiMDgwMjgwNGU1NzhkMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVhPIFrTC271Jf+UXiZVyqCl+XUj
oVEie+LlShMbCHQEnZpoL8L//+9mPMAlmBHfVjuglZl/bW6BobuHUKKQGG3mNnYX
SJVqXf4lofV4VnZa8wH6vbE5Z4HbM2MdtvetoK5hUyrAdoeIvM8Tp1XF3fLsFTIV
AceY16kxZE1ALnPGVdtXEess3QwOIRSfal2qmWKXAV7lGq2LbxDMnY3M7Fkn+ApV
wSwFDbn9C0iZnw+ES/Kn3DF3ThxXYdT67i4HrICHwskY1zSkyvpmmjAcBn3Q5cE5
0YeDbeIqbnxkkCd6QMVzwI5NrGvZZ6bv7btvjXYAiSaam16GHWGKwD/p8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhssiowQ+UqyvRFALCAKATleNEUMB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYYvwC9j
2Bw8Us/y2wqFgjhojXX1Yvoc/NctJleDDExKvypwawHgVO3XuaJ8ztcyQbpaDTXT
9hPp05DnO5ic3EzNNzSoEBp/6Gg3NbLQ82cdjmDRazdV7M5F3afG6fvksrOHDdez
o5mgnsKtoGmDQ/OMXoqp5ZFQSRXjvYAIa73XPTiTUW9lrD5lEjjpzZmU15E4kMgY
dCwFBMeqeu6XulBMzU7he3qyjADZ/XOqf/8ug3xZ6WUHBtsKF9h1mgpzcsEx2Fp/
YnWt+71hhoT5zs9ZuibDYpFje0ov9ykU9mbZBU4h6SibGeR2DtWG4W0Xyva8rmiU
yHeCISWObmlDcA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 10:26:26 2026 by rpki-client