Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File: ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier: tPaJunXJ5ZG6Tt70lobFzF7W+koDf8wx7SybsbisWxk=
Subject key identifier: 49:BC:1C:E0:C2:5C:70:74:8E:D3:E8:F7:E8:A6:27:D5:39:85:D8:3F
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019EE6D6D794A1B8ACF83D212416BED42B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number: 0A0F
Signing time: Sat 20 Jun 2026 21:01:39 +0000
Manifest this update: Sat 20 Jun 2026 21:01:39 +0000
Manifest next update: Sun 21 Jun 2026 21:01:39 +0000
Files and hashes: 1: KGtAb2AW0M0YASRqB3QhsbsdLzI.roa (hash: qiwS5fFaCXqMzeOtWduxw1//aM7SqgaRPEME58iPEIM=)
2: ORQAJS6Q5Jt_jAwh9WWu0sDYr2k.roa (hash: 5rDPzl0Z4Rz08WqSG+JqqO1ImUCxDtxn9ewcE7FC19Y=)
3: SnnndrI5I4HacAA38zXR4nk9Ylg.roa (hash: UEvNUkkd4Bm+dpT6itn8psZdStwpVneMoWnf8LbtGH8=)
4: ZsX0X8j83nFRfqZL9IrfnwTMxLg.roa (hash: X4nHEceCDxp75N1VWD8XfrlsC2PNim++24YcWl4Dids=)
5: kvIzttk50ypIvqgfMfZSFIXct9U.roa (hash: CPJdiTd4yiPmDnbfp5PHDpiZmVQZeyBl1ypSYm3eBYc=)
6: mdkFOAwMWkblGp-2mwbEq419z_I.roa (hash: CE2MgK18UC9X5aZF3fSj7NZCbOTDD1izqKPMKawtpc4=)
7: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (hash: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4=)
8: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: 3kcpwXV6EDf+ZP8esyqXpR26AuzoFDkGMCWwQrHX2l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:d6:d7:94:a1:b8:ac:f8:3d:21:24:16:be:d4:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jun 20 21:01:39 2026 GMT
Not After : Jun 21 21:01:39 2026 GMT
Subject: CN=49bc1ce0c25c70748ed3e8f7e8a627d53985d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:65:77:3c:30:bd:5d:72:8f:c4:8c:7f:15:
1b:4c:c2:64:72:4d:a5:2d:8a:3d:3b:7a:60:1f:e8:
7c:63:1e:77:1a:33:28:5b:e7:50:bc:ac:7e:58:95:
c0:94:a8:44:50:2e:bc:84:9e:7e:1e:fe:99:88:c1:
b6:47:ad:89:2b:10:77:5b:53:16:3f:01:a1:d2:a9:
4c:c9:82:b1:83:73:cc:82:4e:1d:b2:34:5d:7f:29:
64:eb:68:ad:ee:52:b2:bb:0d:d4:d3:09:66:d4:bb:
b0:7c:ba:17:cd:2a:92:07:37:19:58:fe:25:63:2e:
55:80:97:8f:e5:62:d5:44:23:ec:33:86:a1:2e:92:
cf:d1:16:f7:0d:fe:f7:c0:59:07:04:4e:ba:68:21:
82:bb:b6:21:84:69:5f:3a:06:7c:54:4e:1d:1e:cc:
10:61:67:2d:63:36:4a:44:2a:52:f0:ff:07:f0:b9:
ec:de:8b:82:4f:d6:18:f8:24:f2:b6:ae:d6:ed:eb:
2a:d1:bf:67:a6:a1:e6:e6:fa:d3:8a:33:e1:09:cd:
fe:49:f6:9c:c6:e1:28:22:e4:1c:0d:d2:e5:81:f1:
08:0f:7b:dd:36:13:68:f4:18:4f:51:2c:9e:af:34:
93:81:2d:27:a2:38:6d:64:c2:e5:c9:c3:6f:ac:84:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:1C:E0:C2:5C:70:74:8E:D3:E8:F7:E8:A6:27:D5:39:85:D8:3F
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:22:06:91:70:aa:1b:69:2d:49:5f:e3:ad:3d:65:a6:1f:
c1:95:be:6e:83:9b:d8:af:a7:29:5c:1e:51:66:dd:c7:9c:2d:
9d:34:71:a8:b3:e2:e3:ee:56:ca:22:17:34:44:e0:31:b9:5f:
24:06:5b:20:83:b6:de:b7:bd:08:c9:38:22:5b:c6:eb:88:53:
b9:ee:43:88:35:38:d7:d1:71:b7:d9:8d:20:69:ff:80:d7:d1:
1c:97:3a:32:81:f2:e9:b6:54:87:0c:b3:51:02:6b:f2:51:c0:
0e:02:98:61:d1:74:05:5b:9e:62:e0:ed:9a:c9:6b:ff:f6:3b:
83:70:11:22:fd:2f:e3:68:b0:f7:de:99:c8:eb:40:fa:9d:a0:
43:9d:6c:20:89:e6:da:db:51:89:d9:0c:ba:f8:c4:a8:b0:ea:
85:68:37:3e:e7:f6:01:a0:b3:3e:cd:fa:29:0f:46:79:82:a0:
1a:38:45:94:6f:4f:e4:46:a3:d6:fd:4e:cf:ce:5b:75:f4:76:
d4:51:31:61:03:4d:91:42:2e:56:32:26:c7:3a:17:c6:f2:45:
ef:15:3a:a3:b0:df:8f:32:8d:0c:17:d3:bd:0a:5c:d4:2d:1c:
11:8b:1c:af:6b:ea:5d:0c:69:3d:8a:44:31:a8:ea:02:2d:e4:
07:15:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:26:39 2026 by rpki-client