Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: V7pdMKSW1sWGC7l6XEKsJxy7DMH2OsFjPt2xLkebrPA=
Subject key identifier: F1:31:A2:EC:BA:91:2A:2F:7B:5E:AD:E6:F4:5A:A0:88:94:34:43:94
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019E909392D0C14008EFD75688763ECFADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0BA2
Signing time: Thu 04 Jun 2026 03:00:50 +0000
Manifest this update: Thu 04 Jun 2026 03:00:50 +0000
Manifest next update: Fri 05 Jun 2026 03:00:50 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: C5njkfHXYIQ19WlShb3AIkdaUsRoPJ9zjaOh6enzWes=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:92:d0:c1:40:08:ef:d7:56:88:76:3e:cf:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jun 4 03:00:50 2026 GMT
Not After : Jun 5 03:00:50 2026 GMT
Subject: CN=f131a2ecba912a2f7b5eade6f45aa08894344394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:4d:7e:b5:d1:95:3a:f3:7a:8e:24:6a:58:
b4:26:7c:77:c4:17:61:26:4a:25:e8:69:c1:e8:51:
b1:ca:e4:6d:03:96:36:03:cc:3a:90:74:d4:fb:cb:
bc:50:54:44:64:c5:30:f4:d1:1b:cb:69:32:23:e1:
bc:83:57:63:09:6e:21:be:26:00:ae:74:b2:87:f0:
00:9d:70:1b:64:2f:42:1e:ca:6e:5f:45:8e:56:df:
30:be:b7:cf:19:f8:d7:7e:e6:68:74:f6:b6:d8:3a:
eb:c1:d5:93:f2:93:ac:a7:8c:29:22:c4:02:7b:34:
26:86:fe:3c:e5:93:a6:23:36:11:19:69:c0:4a:d7:
9c:21:dd:ab:60:b8:ad:52:f0:bb:88:a3:82:ed:10:
15:ff:62:3f:40:d9:64:16:49:b3:4f:e4:34:cf:97:
e8:d0:b4:c2:72:43:1d:f0:ae:c2:4d:90:e1:2b:9c:
c5:13:f2:15:16:cb:3d:ad:0b:7a:b7:57:90:25:82:
23:64:7b:9f:53:76:74:49:27:e8:2e:37:26:b3:bc:
46:93:97:cf:07:7f:62:94:3f:ba:24:0e:5e:bf:47:
0a:8c:c5:af:dd:d9:1c:51:27:bd:3f:81:04:d8:77:
98:a0:20:f1:ea:40:75:57:3d:81:4c:e4:a3:82:78:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:A2:EC:BA:91:2A:2F:7B:5E:AD:E6:F4:5A:A0:88:94:34:43:94
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:b1:e0:18:bb:6a:bf:c5:c2:50:13:d7:d3:9c:1f:2a:8e:d6:
3e:50:46:38:3d:7a:bf:10:06:59:59:cf:bc:d9:33:64:62:2d:
9d:b5:27:45:f7:c9:92:75:f2:8a:ea:a2:c3:a3:d0:db:9e:41:
88:07:1b:4b:78:81:86:51:ff:7f:31:58:70:aa:70:fc:d1:b3:
54:c7:20:58:92:6b:fe:0b:df:5e:ad:12:93:01:bc:ac:0a:6c:
5c:38:31:e1:64:1f:d4:e2:b2:d3:45:e4:6c:0f:df:77:7d:da:
87:66:98:1c:15:63:2b:28:a4:ed:8d:dd:d8:86:fb:46:0f:45:
17:3d:60:74:fb:33:22:33:20:90:c3:b0:e3:ea:19:8d:4a:33:
4a:a3:2a:e5:b2:71:4b:8e:e8:d6:57:36:fe:75:ab:a9:f1:9f:
a6:36:42:60:4b:5b:62:f6:81:68:b1:d3:5c:c9:03:34:e3:2a:
b0:cb:b7:e8:bd:b3:ec:ad:91:25:32:ef:34:9e:17:6e:3b:19:
05:8b:8c:3c:cf:df:c6:65:76:3e:34:c4:00:42:83:9c:15:41:
18:34:0d:7d:20:47:e8:68:e0:88:fe:54:2d:05:71:44:61:b0:
1d:37:23:5f:a4:e9:c0:22:71:c5:26:d3:36:c5:b5:9b:cc:9b:
f8:e1:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:08:05 2026 by rpki-client