Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: ZWS30vYF61f2NA9yxxyCRYB54dF4/AXtsBPcRzRfASI=
Subject key identifier: F1:81:97:3B:6E:00:70:D9:45:EB:86:DC:35:15:D0:A7:A0:6D:F6:BB
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019DCE2BE315AA4462F8155A4C21417E824E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 0182
Signing time: Mon 27 Apr 2026 09:01:15 +0000
Manifest this update: Mon 27 Apr 2026 09:01:15 +0000
Manifest next update: Tue 28 Apr 2026 09:01:15 +0000
Files and hashes: 1: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (hash: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: KIbTEskhIyXl1BB7+i6LO2pRB1RV9giASsCKTMc2AU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:e3:15:aa:44:62:f8:15:5a:4c:21:41:7e:82:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Apr 27 09:01:15 2026 GMT
Not After : Apr 28 09:01:15 2026 GMT
Subject: CN=f181973b6e0070d945eb86dc3515d0a7a06df6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:26:36:c2:74:a3:fd:97:c4:26:7b:53:4b:
51:82:0c:52:20:3f:c7:e9:41:da:1e:df:c6:93:8b:
ed:4e:a8:71:37:26:eb:a0:f6:db:4c:6c:b2:d0:c5:
15:cd:32:fc:20:6f:99:81:aa:f1:5f:4e:b2:51:32:
9d:2b:eb:c5:9d:43:4a:e1:13:bd:74:63:3c:f2:c8:
dc:1c:25:37:5f:df:8f:48:87:ef:eb:b8:be:63:73:
e3:7e:e4:f9:0b:a6:40:13:3c:da:de:23:c0:fe:e8:
8b:1b:e9:df:73:a0:13:f1:80:eb:f9:20:2e:4a:7a:
ee:66:ef:f9:43:2c:c8:94:86:29:78:eb:4a:f3:ba:
b9:a5:8d:cd:c9:d5:c6:4a:ad:09:d8:e3:74:1a:45:
de:73:56:39:ed:33:34:e5:00:d4:e9:28:7b:f3:12:
a3:d6:ab:39:05:02:82:e7:89:40:b7:94:0b:08:83:
3c:67:96:43:be:5d:ca:9b:03:92:2e:1e:74:27:8b:
38:a5:b6:2b:d1:ff:12:a2:69:7e:74:47:7d:81:78:
24:7b:bb:22:18:c9:66:bb:4d:21:1a:e8:7e:16:a3:
ce:c9:aa:5f:42:bf:0e:ca:9e:33:78:16:61:a1:b2:
38:59:95:aa:d8:83:b3:2b:c9:dd:5a:51:3a:d7:31:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:97:3B:6E:00:70:D9:45:EB:86:DC:35:15:D0:A7:A0:6D:F6:BB
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:42:cf:39:f8:84:3a:24:e5:dd:d4:76:f7:ec:a7:46:43:d9:
fc:76:3e:d9:c3:8b:5f:f2:67:d7:e2:24:70:3e:5d:9c:16:43:
d7:60:07:77:4a:f0:d3:44:6f:56:57:3e:22:84:70:5f:1b:fd:
8c:a0:a0:9a:7b:8f:13:96:e9:31:e8:f6:4d:8b:2c:78:8e:6b:
1e:16:9f:d3:08:03:4b:07:6d:c7:3d:93:79:d1:1f:00:d1:29:
49:d3:84:b0:32:ea:3c:e4:91:45:1e:4f:ca:ed:d0:91:22:34:
90:6c:d4:9e:f6:14:94:31:8c:43:4e:8f:9c:54:c4:dc:bf:7a:
6a:ca:21:12:f9:61:b8:80:bb:45:49:c5:b1:95:c6:d3:fe:d9:
3c:d8:e6:8b:a8:7e:25:98:8e:c7:98:c2:d6:68:f2:13:b2:f9:
92:40:6f:51:2a:b4:91:67:75:f0:72:31:91:f5:39:3c:cd:7b:
1a:fd:bb:66:9e:dc:53:62:43:a9:70:51:f3:b7:5f:14:27:b5:
fc:d6:3b:d1:6d:37:00:3c:ee:46:2a:e3:36:66:65:10:bb:e2:
80:0e:a2:e5:ad:92:73:3f:22:80:a5:c9:1a:8d:38:32:df:33:
63:bb:88:d7:01:8d:2d:67:a0:60:e3:a7:66:fe:8d:08:5e:3d:
21:ef:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:49:28 2026 by rpki-client