Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: knPUo5wGWCeFULMTybCcRuyLLA++nGfPhIBkZmRCGZc=
Subject key identifier: CF:3B:D5:E7:BD:6A:FD:F8:66:24:4A:33:38:E6:20:A5:A5:58:93:57
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019DDCFAAC76982AFE47F92DB0BF9DC5078E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 0149
Signing time: Thu 30 Apr 2026 06:01:48 +0000
Manifest this update: Thu 30 Apr 2026 06:01:48 +0000
Manifest next update: Fri 01 May 2026 06:01:48 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: WHAHtJf+1aUmCdEADDHJdKQjo0JQHXDHjJ0hvlMygmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:ac:76:98:2a:fe:47:f9:2d:b0:bf:9d:c5:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Apr 30 06:01:48 2026 GMT
Not After : May 1 06:01:48 2026 GMT
Subject: CN=cf3bd5e7bd6afdf866244a3338e620a5a5589357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:ef:22:1d:1e:fa:49:d1:72:3c:00:06:2c:
3e:e3:a3:3a:24:eb:c5:ea:cb:2d:a4:77:bd:68:60:
ec:e8:ac:a2:5f:0d:df:1d:12:ec:2e:7d:c7:3f:65:
1d:d4:d3:7b:8e:3b:5f:fa:01:ae:a7:2d:40:22:8f:
16:09:e2:78:99:07:ca:b0:94:d2:12:10:8d:9e:b4:
69:b3:9b:09:99:e1:aa:0b:52:71:a9:5f:14:4e:0e:
aa:78:a2:ba:ee:20:6c:be:78:95:19:c1:25:90:9d:
7a:f9:bf:15:8d:1f:29:a2:ee:a8:c4:6e:68:0b:4b:
90:27:eb:a5:e7:0b:2d:f3:74:0c:c3:8c:5c:fe:01:
f7:be:43:60:d8:d2:a9:e5:28:9d:1d:cc:ce:ff:6d:
6d:4f:e5:99:a4:0d:7b:d3:7b:67:ab:f5:52:d9:80:
12:41:fc:7a:79:f9:86:24:26:33:f4:43:12:86:83:
17:fa:13:fc:ac:db:3f:ae:03:1c:7d:4d:44:71:f3:
2f:fe:2a:c1:b9:7f:6a:63:37:75:26:8e:29:57:49:
cb:c5:9e:ef:91:17:19:68:36:d1:ca:c6:08:14:9e:
9d:17:6d:f8:64:33:7e:b1:7d:e9:30:e2:c9:b1:09:
d9:9c:13:a8:05:10:04:7c:f9:29:50:5f:74:3e:32:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:D5:E7:BD:6A:FD:F8:66:24:4A:33:38:E6:20:A5:A5:58:93:57
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c2:a6:73:0a:16:9a:06:d0:27:0c:eb:2b:8c:c0:cd:8a:0b:
24:15:22:c5:bc:06:0c:ea:ea:28:28:23:b4:c7:4f:1b:be:34:
2d:d0:6f:71:c0:d6:84:04:60:a3:7f:52:ee:2e:ea:e6:90:1e:
3b:53:46:af:8a:b6:73:5b:4b:b4:72:08:44:a4:0d:52:26:22:
87:9a:fa:a9:5d:c0:6c:11:fa:73:f8:fb:f3:23:fe:ca:45:1f:
c7:06:95:3d:22:bd:e4:e4:ee:96:87:f2:1b:b3:94:cc:c1:32:
2a:03:ad:7a:92:83:7b:9c:f4:5b:72:64:00:7e:a0:d7:b0:27:
2a:ca:62:f1:a5:fe:4b:b0:39:50:d3:47:db:18:a0:56:01:b8:
28:f7:27:18:6f:ee:a3:22:08:ee:44:de:a5:d4:aa:32:f8:30:
d3:e2:92:ae:92:84:c0:34:7a:37:96:40:7a:f4:d4:cd:3b:04:
42:b0:8f:de:36:a8:7d:ef:22:bc:a6:a7:ce:ef:19:c9:a0:da:
33:ad:54:f3:af:fc:83:c0:61:4d:dd:0b:3b:49:56:57:25:3d:
58:8e:6f:d4:9c:66:53:67:fb:16:19:0d:fd:9e:1a:52:fe:bb:
57:ca:de:35:6e:68:f7:30:55:ed:5e:e1:f3:3e:1c:5d:ab:00:
c5:5f:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:02 2026 by rpki-client