Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: DEoVi06td3GmlRe2MHbYWDBUWwVVm2M8ZXMkRnx8KoQ=
Subject key identifier: 21:EC:9B:95:73:2F:65:53:2E:86:E7:C2:01:BA:E8:DB:37:8D:F6:B6
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019DA943460B2B7FA7BF07EEC638FF1A8877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 18CC
Signing time: Mon 20 Apr 2026 05:00:51 +0000
Manifest this update: Mon 20 Apr 2026 05:00:51 +0000
Manifest next update: Tue 21 Apr 2026 05:00:51 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: ESj1JLaIX5kwhe3zK1zUun/NkQrUGn9xIhmcElnSmE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:46:0b:2b:7f:a7:bf:07:ee:c6:38:ff:1a:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Apr 20 05:00:51 2026 GMT
Not After : Apr 21 05:00:51 2026 GMT
Subject: CN=21ec9b95732f65532e86e7c201bae8db378df6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:b6:88:f1:0f:bf:d4:52:2e:8e:cf:9a:1a:
f5:d2:76:50:6c:b0:27:f8:4a:9b:09:0f:c5:5f:e1:
ac:90:68:52:20:27:ba:bd:29:a4:78:be:b0:ad:ce:
28:a9:cb:19:ba:e1:29:cc:6a:f5:e3:0c:c2:f7:83:
ea:0c:f0:3a:08:ed:43:10:45:0a:c3:51:0b:92:24:
20:40:14:d8:4b:76:f1:9d:3a:8a:29:64:ff:c5:ad:
8c:f5:00:de:2d:92:d0:97:17:bf:73:6e:73:d1:b2:
eb:4e:d4:57:9f:b9:7d:04:52:51:10:27:1a:d7:39:
e4:d6:b3:a5:fa:f8:84:85:47:cc:c9:db:33:0f:41:
1a:c5:ec:32:fd:55:06:6e:85:43:c8:2f:4d:b3:d8:
b9:a4:7f:02:12:2c:cd:ca:f3:d2:6e:62:8e:64:f6:
04:cc:14:25:3c:20:7c:22:bb:3f:42:69:81:dc:40:
f6:d9:b3:11:07:6c:d0:46:1b:cd:4e:82:d5:d5:8c:
12:8e:0a:71:d9:7b:c2:2a:f8:eb:fb:b4:63:9b:98:
26:4b:db:93:27:a3:c8:6b:b4:da:9f:ad:d9:ac:5e:
65:bf:2f:68:37:bf:e2:30:32:ca:ba:cb:a5:8d:d8:
5b:3b:2b:73:d6:3a:c5:58:e3:bc:cc:49:ac:65:6d:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:9B:95:73:2F:65:53:2E:86:E7:C2:01:BA:E8:DB:37:8D:F6:B6
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:bd:ec:b6:58:db:e7:c2:9a:c7:4c:c4:c8:82:fa:80:4e:
fd:ed:ab:ef:46:15:3c:7c:4d:ec:22:92:3f:6a:d1:b9:4b:dd:
cb:84:4e:fb:44:ce:e8:1b:55:ad:93:c4:db:38:3e:27:ff:9a:
14:64:92:39:3e:c4:7a:9b:a6:7a:92:bd:09:36:06:cc:1e:49:
2c:0e:ff:ab:d3:e2:05:2f:70:a2:21:fb:22:a9:ba:44:46:63:
5a:4b:54:e2:ce:3b:01:98:55:f0:81:27:d8:36:99:9f:9a:8e:
d5:0d:f1:63:44:63:2f:64:43:24:5e:62:62:4a:2f:e4:d7:30:
4a:45:93:40:96:b7:d2:61:19:57:e6:40:e6:f0:bc:e2:d8:95:
75:17:0f:85:39:18:1a:6a:5b:21:48:6c:47:6a:58:d3:02:09:
96:4c:14:a8:df:13:5d:c2:da:91:c1:9e:ce:f6:20:1f:b6:e3:
f2:f1:a9:a7:02:55:0c:54:78:ea:6f:c6:57:20:57:b5:c6:16:
24:27:27:42:03:70:47:61:ca:44:cf:6e:c1:38:06:c5:cc:74:
83:cc:94:b7:3d:25:36:d7:1f:98:62:2a:21:03:2d:8f:da:d3:
7a:63:cc:1d:58:a5:ef:69:8c:5c:55:38:2b:f2:f2:cb:aa:b4:
25:62:9b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2pQ0YLK3+nvwfuxjj/Goh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx
ZGUxMWMwHhcNMjYwNDIwMDUwMDUxWhcNMjYwNDIxMDUwMDUxWjAzMTEwLwYDVQQD
EygyMWVjOWI5NTczMmY2NTUzMmU4NmU3YzIwMWJhZThkYjM3OGRmNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oi2iPEPv9RSLo7Pmhr10nZQbLAn
+EqbCQ/FX+GskGhSICe6vSmkeL6wrc4oqcsZuuEpzGr14wzC94PqDPA6CO1DEEUK
w1ELkiQgQBTYS3bxnTqKKWT/xa2M9QDeLZLQlxe/c25z0bLrTtRXn7l9BFJRECca
1znk1rOl+viEhUfMydszD0Eaxewy/VUGboVDyC9Ns9i5pH8CEizNyvPSbmKOZPYE
zBQlPCB8Irs/QmmB3ED22bMRB2zQRhvNToLV1YwSjgpx2XvCKvjr+7Rjm5gmS9uT
J6PIa7Tan63ZrF5lvy9oN7/iMDLKusuljdhbOytz1jrFWOO8zEmsZW2qjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHsm5VzL2VTLobnwgG66Ns3jfa2MB8GA1UdIwQY
MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et
ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm
LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPS97LZY
2+fCmsdMxMiC+oBO/e2r70YVPHxN7CKSP2rRuUvdy4RO+0TO6BtVrZPE2zg+J/+a
FGSSOT7EepumepK9CTYGzB5JLA7/q9PiBS9woiH7Iqm6REZjWktU4s47AZhV8IEn
2DaZn5qO1Q3xY0RjL2RDJF5iYkov5NcwSkWTQJa30mEZV+ZA5vC84tiVdRcPhTkY
GmpbIUhsR2pY0wIJlkwUqN8TXcLakcGezvYgH7bj8vGppwJVDFR46m/GVyBXtcYW
JCcnQgNwR2HKRM9uwTgGxcx0g8yUtz0lNtcfmGIqIQMtj9rTemPMHVil72mMXFU4
K/Lyy6q0JWKbog==
-----END CERTIFICATE-----
Generated at Mon Apr 20 09:40:48 2026 by rpki-client