Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: /MbctlmotVoCUVZ2UVjhBEXlU0gaIjGZR/pTBmEULWw=
Subject key identifier: 33:A1:B7:77:7E:18:C7:B4:31:6D:54:D6:3C:68:FF:B5:86:2A:56:C9
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 019DCE99B4C3E2129AE37B7AA6F4AE1F612F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 11:01:12 +0000
Manifest this update: Mon 27 Apr 2026 11:01:12 +0000
Manifest next update: Tue 28 Apr 2026 11:01:12 +0000
Files and hashes: 1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: bmuSvhE5qCeV0tZpSUeMeK+bWtNSJ4vmWre1+XfQpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:b4:c3:e2:12:9a:e3:7b:7a:a6:f4:ae:1f:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Apr 27 11:01:12 2026 GMT
Not After : Apr 28 11:01:12 2026 GMT
Subject: CN=33a1b7777e18c7b4316d54d63c68ffb5862a56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:31:5e:23:38:5d:52:a9:1d:6a:a0:c3:ba:
a0:c3:e9:d6:7f:de:f7:72:0a:9c:7c:5b:10:bf:a8:
64:81:0e:77:bc:fc:eb:e3:6f:2e:ab:6a:fc:c6:4f:
82:a6:7b:74:7c:f2:93:68:89:ba:b6:52:36:08:a4:
b2:df:88:5e:b7:18:d5:13:1d:f9:4c:71:e7:a7:5e:
72:33:06:77:8e:8a:bb:f4:b5:e0:6b:1b:4e:9a:a7:
7e:49:02:fc:ba:1c:8d:da:c4:51:00:6f:07:0a:71:
b3:6a:60:cd:3f:79:da:9a:53:a5:09:4a:5d:8d:7d:
fc:71:ee:48:76:5c:bd:28:5b:07:f6:67:99:86:0c:
8c:c2:aa:95:86:73:43:53:01:ec:b0:77:06:76:31:
00:c9:f7:65:ef:71:4d:ad:51:c2:5d:78:b8:12:7d:
00:29:6b:ef:a5:4f:ee:33:16:7f:e1:9d:0c:d8:56:
d2:e4:29:05:30:15:2f:d2:b7:14:34:46:2e:60:2f:
78:66:9f:d0:c6:7d:1f:84:28:b2:9a:e9:49:bd:80:
f6:c3:77:75:e3:12:92:3d:2a:57:7f:2a:9d:2f:60:
3e:bf:6d:b0:55:3c:bd:f4:86:6f:b1:6b:15:36:13:
0b:14:e3:d6:01:c2:62:69:44:d6:54:89:84:4d:93:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:B7:77:7E:18:C7:B4:31:6D:54:D6:3C:68:FF:B5:86:2A:56:C9
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:ac:ed:90:a0:ea:09:c9:d7:8a:e0:33:04:a6:05:0c:e8:
e4:d7:4e:fd:18:73:e8:85:ff:4c:88:bb:a2:7c:d7:75:03:af:
df:ff:35:b5:1e:cd:2a:91:60:42:d6:dd:d0:d2:11:a9:24:e8:
d5:78:4e:42:3e:8c:e7:08:04:22:aa:99:40:52:59:cf:3b:3f:
83:c8:80:59:7b:5c:a9:73:a5:bd:a8:29:e5:31:b7:26:23:22:
3e:51:9d:1a:52:03:cd:4e:57:77:dc:ac:e2:8e:1c:ee:d1:96:
d4:1f:ea:17:00:72:06:28:de:16:d7:43:19:6f:c0:fe:40:ba:
c9:fa:40:e2:88:28:cc:c2:6a:6e:48:c4:54:d8:d9:78:82:2f:
37:91:f4:3b:bf:73:3b:36:48:0a:5c:86:a5:ab:0f:a6:02:b9:
fc:11:a9:69:90:ee:da:18:c7:c2:75:75:f8:98:ac:c2:4a:2d:
46:2d:e4:b1:bf:86:88:c1:39:d6:45:5b:c2:51:7f:01:22:d7:
38:8a:81:67:61:6b:3c:a9:b2:f3:26:a5:3f:18:19:99:00:b6:
ca:98:b8:4a:42:9f:eb:aa:03:8c:74:be:32:59:5c:21:c1:06:
b3:32:25:d0:1f:ba:77:a6:37:03:ff:38:25:20:9a:90:96:55:
db:73:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:35 2026 by rpki-client