Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: oi8yrgSOiTOgfcE9xBJTmLuNsumOPmx66gPxGg02qGw=
Subject key identifier: 9A:38:AE:B3:5E:78:67:B5:7D:A2:3B:E2:7E:CB:0D:BB:CF:33:65:26
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019EB84575B1399C5F388A5E9A621168ED10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1944
Signing time: Thu 11 Jun 2026 20:00:20 +0000
Manifest this update: Thu 11 Jun 2026 20:00:20 +0000
Manifest next update: Fri 12 Jun 2026 20:00:20 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: md5RQ4IanK1bzkTCdE5ol+tImNRumN91q0ZeR3Uc+hs=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:75:b1:39:9c:5f:38:8a:5e:9a:62:11:68:ed:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jun 11 20:00:20 2026 GMT
Not After : Jun 12 20:00:20 2026 GMT
Subject: CN=9a38aeb35e7867b57da23be27ecb0dbbcf336526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:47:1c:c0:34:71:0c:28:3a:ea:c0:70:48:
96:04:5a:2b:1f:1d:16:13:46:6b:93:a0:c9:69:cf:
d6:8b:76:93:3a:20:83:c8:a9:78:53:21:61:17:16:
48:bb:ef:8f:2b:34:a6:2b:fb:d5:8a:9b:8d:02:10:
f5:17:03:f3:ef:70:cf:70:4d:3a:d1:43:d7:1e:05:
35:f8:89:f3:f5:1f:6d:57:97:ba:65:e3:5d:5c:b1:
f1:15:5e:a4:32:06:04:80:f1:95:04:56:7e:39:67:
3b:8e:8a:4d:b9:fa:5f:9c:1f:7a:58:c6:bf:95:2d:
c1:30:26:d4:4e:7c:ab:0a:94:ca:eb:c9:c0:bc:0a:
05:6c:cd:e6:b7:dd:fe:d4:26:3f:7b:7c:59:19:53:
79:10:e2:7a:82:0c:b3:8f:d0:ef:e4:15:4a:15:cc:
15:01:1c:53:81:ad:54:4a:a4:0f:1e:39:92:9f:db:
bd:89:95:6e:4a:dc:33:d1:4c:d6:45:4a:27:77:20:
cc:f3:92:c8:a7:22:7d:a1:94:1a:51:72:45:0d:b0:
65:d2:e0:0d:6f:ea:79:e1:90:01:22:ec:86:24:39:
c6:9b:57:11:d4:99:0a:f2:07:59:c5:ee:4b:3f:2b:
1c:b1:3f:8c:42:eb:6f:ca:b3:19:64:c9:32:b5:31:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:AE:B3:5E:78:67:B5:7D:A2:3B:E2:7E:CB:0D:BB:CF:33:65:26
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:14:f2:cc:72:7c:28:e6:d9:04:76:5b:7c:1e:f7:9e:29:b6:
6f:d1:d3:94:56:74:e5:5f:ef:d8:db:7c:29:d9:d8:8b:6e:d7:
43:30:ec:a8:65:c6:23:c7:39:d2:3d:c3:c7:e9:4a:2d:82:19:
b8:9b:42:7e:cc:cf:dd:9c:51:a9:d0:30:ff:f8:ba:b1:14:14:
e4:eb:6a:df:cd:65:60:ea:09:7f:d9:24:fd:df:b7:31:99:5f:
86:a6:ef:d5:a8:0a:e7:0a:58:82:0b:f1:ef:15:7c:51:f3:9a:
33:d6:16:9c:8e:97:98:64:4f:9e:3c:99:09:25:d4:f1:43:77:
79:2a:91:50:2f:ee:b9:c6:d8:dc:8a:db:a2:4b:6c:b6:b3:8e:
bf:ee:97:1a:0f:38:7e:20:43:93:13:05:c8:49:c2:ea:6f:fb:
a7:fb:9e:30:b0:c9:94:df:1c:f2:a2:20:9c:bf:bc:d3:23:fb:
c9:ba:a9:eb:ed:b3:e5:d5:88:36:12:1a:23:4e:84:33:38:5e:
b1:9a:5c:c0:75:59:eb:73:45:f7:fe:6b:6e:fb:33:db:54:47:
87:e6:fc:1a:84:61:b2:e9:26:f8:d5:2b:0e:f4:d3:c6:9c:4d:
d8:97:91:6f:38:ed:62:d1:ce:b5:84:f0:84:12:85:0a:87:8b:
4b:b0:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:45 2026 by rpki-client