Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: NRJlkKlnChdtGdiw49Axl3oQ1qHQten96F3IayHisZg=
Subject key identifier: 70:7B:CC:07:D8:06:96:49:5D:23:0D:CD:AA:B3:29:A3:C3:0C:AC:4F
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019DD12C784B5C21360F829E42A418F069CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 23:00:45 +0000
Manifest this update: Mon 27 Apr 2026 23:00:45 +0000
Manifest next update: Tue 28 Apr 2026 23:00:45 +0000
Files and hashes: 1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: Vdgz9o52SbB1oQw2ii+Qf4MH859lt7+4U4i+ktC0McM=)
4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:78:4b:5c:21:36:0f:82:9e:42:a4:18:f0:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Apr 27 23:00:45 2026 GMT
Not After : Apr 28 23:00:45 2026 GMT
Subject: CN=707bcc07d80696495d230dcdaab329a3c30cac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:8a:06:02:7f:0d:8d:eb:33:3f:4a:93:b8:
84:de:c9:98:16:78:f1:d9:b0:ef:fe:b3:c7:54:21:
b0:83:26:32:f6:67:64:f2:0d:22:07:89:0e:e6:34:
19:8c:63:c9:e1:d1:7d:a7:b3:a4:c4:30:2d:f4:cd:
83:7f:dc:be:49:fb:54:ce:d7:83:cf:96:98:c1:b1:
03:b4:54:69:11:6b:87:99:b1:37:f8:ef:c1:8e:77:
79:44:6c:d4:c1:2c:6c:7e:5c:f6:51:4e:1e:ba:ec:
09:52:68:b8:0e:00:fc:e7:d0:54:37:41:63:f5:75:
73:4c:71:e5:3d:cd:25:2a:dd:1d:44:70:00:2d:18:
91:8e:14:97:e1:43:34:e5:3f:cf:0c:92:7d:e3:f7:
c1:fc:b4:35:a2:43:98:e6:e1:1b:57:38:a0:a3:47:
2c:3e:d4:8f:e4:6d:f4:3e:49:b4:20:f4:fb:ed:63:
49:c9:59:42:9f:20:2c:d1:19:0a:00:49:2a:a5:17:
7a:61:98:cd:39:bf:30:08:51:4a:13:b7:cb:bd:35:
3f:c0:c1:a5:05:2a:df:81:51:94:1d:67:ce:ab:e1:
7d:a8:0f:e0:80:a8:64:ca:dd:0c:82:e9:cd:99:28:
52:dc:ab:59:5e:d6:59:f7:3c:ac:b1:1d:57:1b:41:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:CC:07:D8:06:96:49:5D:23:0D:CD:AA:B3:29:A3:C3:0C:AC:4F
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:18:a7:50:dd:f1:62:69:3e:68:30:c2:0d:f6:4c:17:58:c2:
7c:90:f7:92:65:eb:b0:0b:43:5f:4e:e7:82:80:d0:cf:7c:40:
79:f0:41:ae:b4:ac:96:8c:f2:71:b7:64:b7:bc:02:24:9c:30:
a8:c0:a8:59:d2:8c:70:8e:8c:d1:4a:8a:d6:b3:0b:58:6b:5e:
b1:f8:69:52:93:62:61:21:00:71:aa:2c:60:29:61:39:83:65:
7f:f8:17:78:bb:2e:2c:f5:68:64:d6:7a:0a:13:3a:bc:8d:12:
5e:95:de:2e:fc:8f:2a:4f:f1:71:1c:e6:0a:1f:e1:54:1f:de:
7a:e8:f9:21:60:a8:6d:42:75:97:9f:8d:f5:50:13:fe:0c:e0:
63:ea:c0:29:c8:14:2d:ff:90:13:5e:e2:51:e3:a6:7c:2c:23:
05:8e:e7:a7:2e:f5:42:73:ea:17:37:1a:38:55:48:da:07:d5:
20:9a:44:5c:d9:1f:af:84:94:d8:a0:22:aa:20:48:7c:47:d0:
fc:3f:a8:af:92:41:7d:c7:10:93:00:cb:b7:41:19:45:bc:ad:
41:e1:eb:ef:61:af:6a:ed:a3:87:a3:31:5d:12:11:fd:23:01:
53:18:2c:1b:ef:38:1b:31:f4:20:f8:d8:92:27:66:50:fa:c5:
1d:6c:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:52 2026 by rpki-client