
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: 0Ap1kYfKaVHuo6JFSR3esk25YKXmn7DXRF/tSeOypjE=
Subject key identifier: 52:01:64:5F:31:8B:BC:63:A2:02:6D:31:44:D3:11:59:14:AF:0C:CB
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019EB68E289C1DF302A90A881D349F460B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 0359
Signing time: Thu 11 Jun 2026 12:00:30 +0000
Manifest this update: Thu 11 Jun 2026 12:00:30 +0000
Manifest next update: Fri 12 Jun 2026 12:00:30 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: vEyfFA6hTWJUiuFeM+937BPlM9WtGbHmZ1JJjs1yl6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:28:9c:1d:f3:02:a9:0a:88:1d:34:9f:46:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Jun 11 12:00:30 2026 GMT
Not After : Jun 12 12:00:30 2026 GMT
Subject: CN=5201645f318bbc63a2026d3144d3115914af0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:35:c4:6c:2f:3f:13:b4:1d:78:ab:66:7c:
58:b9:22:3f:b7:66:23:50:32:d7:bb:08:37:fa:85:
3f:0a:1e:d6:21:37:81:36:63:ab:f6:dc:10:da:25:
fd:13:0b:c4:e6:b3:84:a6:61:33:a2:6d:f2:12:6f:
52:72:05:ce:32:99:65:85:d4:bd:a1:36:74:e9:74:
3f:5f:d5:88:32:45:52:19:e2:eb:65:33:d1:62:c2:
bf:49:07:b2:be:f1:c0:75:15:69:89:6c:35:3b:6f:
fc:c7:f5:39:30:56:36:bb:5a:f7:e6:1b:3d:4c:6f:
21:5b:a1:ba:58:8a:f7:9d:00:10:84:ad:ac:eb:b4:
90:59:d4:84:33:6a:c7:5d:a9:af:be:df:02:d5:a9:
84:c5:0c:8b:3e:f4:9b:5e:c2:7d:99:5f:d7:8c:5b:
d7:9f:bb:b5:db:00:d2:16:1a:36:33:db:2c:6e:2b:
ea:7c:e1:1e:85:26:d7:3c:d1:f6:20:79:57:24:8a:
d5:77:5b:be:bb:56:8b:a0:b8:a5:38:7c:b3:e8:3f:
4d:83:97:40:b5:d2:72:7c:95:18:e0:1c:d5:09:88:
a5:b0:62:82:ca:6d:0e:25:40:dc:b6:9f:cc:54:67:
21:d4:8d:b0:5c:da:70:fa:d2:7f:16:07:89:d2:00:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:64:5F:31:8B:BC:63:A2:02:6D:31:44:D3:11:59:14:AF:0C:CB
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:54:4a:68:08:ce:30:06:cb:d3:b9:48:f2:11:10:ae:1e:d0:
fa:5b:58:94:3b:e2:46:be:0c:c8:72:db:de:ce:de:cf:4a:8d:
72:88:b8:2c:66:55:f7:31:8a:69:cf:09:08:1a:a6:7a:49:e9:
b7:26:c7:7a:bc:a6:87:64:34:db:d1:ef:32:cf:34:4f:c2:12:
4c:e3:65:9f:bf:41:eb:98:06:1b:eb:21:58:c0:0e:f6:e6:b3:
8b:81:9d:a2:20:bc:65:14:9a:30:79:f1:e7:c6:68:ce:14:64:
1d:31:fb:6b:53:44:67:36:97:2d:a2:ad:ad:94:36:a9:df:0e:
43:fa:a1:ad:f7:e8:e0:ad:f4:d6:3e:44:ee:56:b1:07:87:d0:
89:0d:b0:34:03:e3:23:6b:58:76:96:e1:b2:42:1b:d8:bd:08:
4b:a6:21:d7:bf:bf:77:87:57:6a:22:f7:68:42:b9:83:09:38:
b9:6c:4e:2a:1b:f0:37:17:fe:22:7a:7c:e3:3f:27:75:b1:2b:
95:ad:37:82:22:e2:34:8a:15:3b:84:0c:8b:32:20:80:7d:62:
fc:f2:7e:17:2e:21:33:e2:9d:68:ef:07:42:8c:d8:a7:09:da:
e6:e8:4d:80:9a:4d:e7:3c:38:c2:c5:a3:cd:56:0e:5d:bd:d1:
26:e2:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:41:04 2026 by rpki-client