Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: EVDnqAR2mNgNjMUNusrkL6/Fgu+UPzZhdDPx7h0BJWo=
Subject key identifier: AF:8E:93:CA:76:DE:86:E3:FD:C6:D4:31:EE:4C:4E:24:C2:1B:BE:82
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019EFC8407A2667C12609E7F3AF519759DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 0144
Signing time: Thu 25 Jun 2026 02:02:51 +0000
Manifest this update: Thu 25 Jun 2026 02:02:51 +0000
Manifest next update: Fri 26 Jun 2026 02:02:51 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: SJlDZO1AClkeSB1uLWlw9dmk441NoQLfvBB/0KmuTfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:84:07:a2:66:7c:12:60:9e:7f:3a:f5:19:75:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Jun 25 02:02:51 2026 GMT
Not After : Jun 26 02:02:51 2026 GMT
Subject: CN=af8e93ca76de86e3fdc6d431ee4c4e24c21bbe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:e8:bb:90:62:1d:13:7a:e2:c7:0c:b3:eb:
85:a6:d8:0d:08:82:7e:6b:47:a5:18:d2:dd:85:c9:
0e:63:d4:e8:0a:04:63:0b:b9:9b:c2:6f:70:7b:ef:
90:1b:3f:42:d2:a0:1c:79:2e:77:b2:36:8b:67:4b:
df:c8:9e:4d:f6:7d:17:06:bb:c2:ee:d2:14:bd:66:
79:58:54:a2:09:8e:98:b3:c9:2c:0c:9b:ec:8a:a3:
56:d3:ff:f7:ed:fb:b8:3a:3a:d9:1d:41:2c:ed:48:
34:ee:27:3b:4a:29:6d:45:0c:f6:53:82:57:0a:ad:
29:fd:72:97:10:6c:92:90:2a:be:86:21:87:41:1e:
f1:df:a2:eb:f9:0b:b4:1f:f9:a7:ea:47:66:88:45:
8a:d5:68:4d:ee:91:b2:2d:ba:a2:bb:8f:bd:21:a9:
dd:e2:bc:dd:3a:05:e3:13:ca:5f:ba:ef:b9:28:af:
8e:35:6a:ec:c2:df:eb:e1:c7:87:9c:f3:2b:f1:c3:
ce:cc:b4:65:27:72:38:b9:07:c8:38:ca:65:88:a0:
f4:dd:93:11:4a:68:cb:10:78:a9:b8:d2:d4:66:e3:
05:c2:1f:66:4b:90:21:0b:da:a3:02:be:b4:e3:96:
05:39:f0:6b:b0:18:6c:c1:ad:9e:25:05:7b:91:24:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:93:CA:76:DE:86:E3:FD:C6:D4:31:EE:4C:4E:24:C2:1B:BE:82
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:cd:ed:a7:77:06:72:21:07:1b:c9:fd:b0:1e:a2:f8:71:
06:d2:87:ec:e8:33:2b:d5:ca:c7:6f:83:a0:21:27:3a:14:bc:
4e:48:64:ae:15:f1:57:ca:38:11:b1:26:f8:88:89:c2:00:2d:
ca:45:d1:78:6f:cb:5f:40:32:39:f5:4c:9c:c2:e7:4b:51:f3:
bb:a8:4d:2c:5f:cc:06:55:c8:57:4a:1d:5c:d3:8b:96:07:9b:
f4:e5:fc:fd:df:09:9f:fc:35:0c:d6:09:f8:46:57:7b:c7:b9:
92:23:da:43:f5:48:5c:db:e7:3d:c6:1f:3b:f0:1f:02:4f:bc:
cc:ea:41:41:bd:f1:eb:02:cf:b7:cc:3d:73:f2:ab:38:5d:65:
f1:9e:f6:4b:ce:53:02:8c:ad:34:cb:0a:52:a7:4a:09:e8:7a:
2b:fc:7f:ab:81:61:c8:14:17:6f:54:06:10:f0:ce:50:b9:f6:
fe:45:15:64:81:51:21:56:09:06:6f:de:64:ed:a7:53:26:40:
1c:13:d1:85:08:b3:31:0e:fd:fc:d5:ce:ff:19:7b:bf:5d:6f:
f8:9e:85:f8:1f:a0:db:25:f2:e2:79:b4:c6:a3:a7:c3:c4:d9:
c1:1f:1e:cd:03:cc:9c:d1:0a:03:c6:5d:d0:a6:be:17:df:5b:
a7:98:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:37:19 2026 by rpki-client