Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: 1jrdkEe58PA6xVDcVc1twlPAexVUtJv4n7XfxAAxxZQ=
Subject key identifier: AD:91:CB:6C:50:0B:3C:1E:DC:61:65:AB:22:88:9B:79:AB:C6:21:6F
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019E9B1703F7D35F7C7D6E82E4D97CDCCE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 12A9
Signing time: Sat 06 Jun 2026 04:00:37 +0000
Manifest this update: Sat 06 Jun 2026 04:00:37 +0000
Manifest next update: Sun 07 Jun 2026 04:00:37 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: XK4J4x4725FH/XQSTSvrVoZ2AcP10uRzX6VOOJ9gdwY=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:03:f7:d3:5f:7c:7d:6e:82:e4:d9:7c:dc:ce:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jun 6 04:00:37 2026 GMT
Not After : Jun 7 04:00:37 2026 GMT
Subject: CN=ad91cb6c500b3c1edc6165ab22889b79abc6216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:03:13:15:10:53:9b:7b:e6:af:86:ea:a8:
36:2e:8c:1e:79:85:94:28:ad:4c:12:64:51:19:37:
42:b3:e3:d7:13:84:eb:88:d6:07:2c:27:fc:69:db:
86:cd:f2:3d:f3:78:be:63:f3:61:9d:d3:e1:17:b5:
d2:ea:1c:8b:dd:ce:05:fd:bb:4a:3b:63:fd:5a:d0:
07:39:c1:00:6f:ac:35:39:93:6d:d4:58:f0:aa:25:
3a:85:1b:af:bd:1a:83:99:d9:a5:d2:cf:d8:b8:26:
0d:82:95:52:cd:6b:cc:4b:79:c4:2a:d1:7a:9c:62:
ca:2e:59:36:23:64:05:66:f8:ef:42:8f:51:72:04:
93:3f:60:c1:b2:14:99:49:83:20:4b:8a:88:db:2b:
17:41:b6:81:f8:57:8a:44:4f:5c:32:65:91:19:74:
03:9d:62:fb:ff:d3:19:30:c2:5a:33:da:0c:d8:ca:
ad:dc:89:eb:ed:3c:fd:46:ff:e4:39:87:e5:6c:f3:
b2:88:96:6c:ee:48:04:58:4f:4a:4d:2e:fb:23:56:
5e:37:58:1f:23:23:30:75:fb:79:29:68:3d:69:7b:
39:3e:2b:e0:4d:81:4a:7e:d0:63:63:d1:01:a1:57:
29:70:9a:bb:6c:02:6b:62:96:e9:e0:ff:60:5c:d7:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:CB:6C:50:0B:3C:1E:DC:61:65:AB:22:88:9B:79:AB:C6:21:6F
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:f9:cf:56:5a:45:16:48:9f:45:d6:30:36:30:8d:7f:3f:
c1:3f:9b:3c:6d:c0:25:6e:f2:eb:da:79:f0:7a:42:c5:2b:14:
f6:73:74:6b:c0:ae:f8:07:d5:9d:63:20:e1:8c:a9:7a:99:d8:
72:bf:07:0c:9d:29:61:e7:57:cb:c3:e9:c5:f6:ae:ca:0f:2a:
01:0f:52:27:2d:94:8d:37:15:25:3a:18:76:ab:9b:18:4b:67:
78:a0:b9:58:2f:ff:54:f0:c8:4e:9e:bb:02:66:4f:dc:e3:43:
45:d0:e5:af:28:85:50:7a:9b:af:31:c4:65:7a:9d:32:f7:77:
9e:d3:58:27:6a:f0:56:98:d9:ac:ff:2f:73:0e:84:83:dc:9b:
e7:53:58:b6:63:f1:0c:33:f7:1d:39:28:50:c2:c8:5e:ae:7f:
3b:da:89:65:29:08:52:52:48:6c:27:43:72:a7:be:31:30:c0:
d5:59:8e:9f:d2:ae:c9:ab:e1:de:4b:a4:f8:e4:34:d6:9a:64:
a7:86:04:29:5e:71:55:fa:3f:bd:eb:9b:e0:2e:b8:e2:8a:73:
28:5c:95:13:6f:a0:a9:24:7d:29:5f:ee:0a:84:e4:21:dc:5d:
bd:8f:ce:ba:f4:22:ce:0a:93:eb:3d:83:e9:37:33:01:62:e9:
36:b1:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:00:49 2026 by rpki-client