Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: c5JoPVjBIzSaeXnWPddkJ+m4E7CUAzgA7U4MKl3NGJU=
Subject key identifier: 96:C7:E0:2A:8F:69:B9:85:8B:48:5D:05:BB:0F:A7:DF:ED:20:39:68
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019D91AA126FDE438B4F6A37AB35C1E6EE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 18BD
Signing time: Wed 15 Apr 2026 15:02:15 +0000
Manifest this update: Wed 15 Apr 2026 15:02:15 +0000
Manifest next update: Thu 16 Apr 2026 15:02:15 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: xePR9N4bVw6LeRY0of+luBSutjCZ2ZOH6bLR251gnLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 15:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:aa:12:6f:de:43:8b:4f:6a:37:ab:35:c1:e6:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Apr 15 15:02:15 2026 GMT
Not After : Apr 16 15:02:15 2026 GMT
Subject: CN=96c7e02a8f69b9858b485d05bb0fa7dfed203968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:fb:ce:c5:02:a8:13:cc:d2:e8:0b:60:8c:
5e:00:ff:f6:16:2c:62:ae:96:d2:97:84:97:68:e0:
08:9b:a9:84:78:72:32:63:cc:ec:85:60:7e:8d:2e:
c1:c2:08:09:20:1f:a2:fe:a9:56:f1:89:4d:9c:2a:
8e:be:be:fb:63:4b:ed:b4:ba:d6:cc:b3:e5:df:dd:
66:a3:a3:20:ab:29:8e:58:2e:c1:75:56:d5:4d:2a:
b1:39:d7:0e:9b:a9:e6:01:27:d3:c8:9c:9d:eb:f3:
3a:26:49:14:0d:27:3b:24:2f:b1:06:5c:ef:c5:cd:
cc:ba:dc:6c:37:71:96:cd:be:77:8b:2e:73:31:f2:
c0:f2:25:1a:bb:de:ac:ca:04:01:c9:b6:33:04:18:
de:c6:1d:5a:eb:50:65:c5:8a:ba:77:a4:b0:79:f4:
9b:c1:99:a7:f8:30:27:f1:18:97:46:c6:37:b7:fc:
29:a3:30:eb:eb:ec:07:ee:7f:00:21:56:7e:3e:7e:
68:84:ce:97:33:81:d4:a1:f6:72:9a:d5:77:0e:55:
fb:18:ed:cb:18:cd:a5:56:a9:ae:e2:54:9a:c9:ea:
c9:80:71:34:c0:95:b7:6a:ed:4f:96:99:48:48:0f:
96:6f:60:03:7c:d5:85:a2:68:24:b0:d4:ec:65:a5:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:E0:2A:8F:69:B9:85:8B:48:5D:05:BB:0F:A7:DF:ED:20:39:68
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:08:d6:f7:a1:5a:a1:02:8b:74:e5:0c:29:0a:0f:57:94:19:
56:55:59:ba:f1:67:ca:33:3f:da:3b:41:93:42:80:18:10:49:
cf:a8:48:a4:fc:a0:88:61:fe:b9:35:66:f1:90:bb:78:c4:9b:
1d:e3:90:b0:33:59:3c:9e:be:f8:3c:f1:6a:30:f2:a8:51:ac:
a0:4c:08:5a:0d:b5:5f:f9:ef:f9:d8:58:f5:c9:a1:da:bb:b4:
a3:20:a6:4d:9b:f8:e2:99:c0:88:a0:92:f6:e4:68:b3:a2:0e:
6c:a0:c6:45:7b:3f:f9:e8:2d:c8:f4:53:86:10:59:41:ba:43:
b6:1c:13:e8:7e:92:1d:fa:71:a9:5e:5f:65:e6:30:3f:35:76:
a9:67:1d:d9:41:d7:40:b9:cf:a1:86:22:73:02:bd:66:58:a6:
eb:96:59:52:82:43:2b:59:0f:91:7d:3d:a1:f5:8f:6a:7c:52:
43:57:7a:1d:41:7c:ba:f2:e6:0e:cf:0e:d4:17:7f:29:25:b0:
4f:92:03:b8:15:80:a5:47:d5:a6:37:c0:4c:77:7c:84:82:6b:
ac:f5:bb:e4:0a:16:d4:97:a2:1d:0e:7f:e2:f7:1c:51:0e:8c:
5b:31:24:7d:ef:7b:62:d3:96:1d:1b:75:68:1a:14:ae:8b:2c:
9f:38:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 20:48:03 2026 by rpki-client