Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: rJYfEUq3CgZaq1ghMhy9lO5L4fdL47PNDZ+AA7vSEQ0=
Subject key identifier: 38:07:26:F2:D6:5C:55:8A:48:4E:7C:4A:3C:25:51:48:5D:E8:CB:C1
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 019F19E84ED6A002DE612EEB6BD3E3730F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 19:01:22 +0000
Manifest this update: Tue 30 Jun 2026 19:01:22 +0000
Manifest next update: Wed 01 Jul 2026 19:01:22 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: pd8txWhfRNR4Ud5EwLeHkEIFFBJBlwqAWQACtQmCFiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:4e:d6:a0:02:de:61:2e:eb:6b:d3:e3:73:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Jun 30 19:01:22 2026 GMT
Not After : Jul 1 19:01:22 2026 GMT
Subject: CN=380726f2d65c558a484e7c4a3c2551485de8cbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:05:e5:9e:ca:cc:d8:34:ba:1a:2c:6d:79:
89:cc:85:50:6d:aa:a7:65:a4:44:b8:57:52:a2:23:
21:96:6d:de:1f:e0:8b:30:b1:55:9e:a8:c7:5c:1a:
3d:c2:62:55:74:65:77:c3:ba:8b:88:67:e5:36:85:
c6:df:16:fb:d8:3e:0a:df:45:dd:9f:e8:89:31:79:
73:09:d9:a3:66:9a:94:f8:97:2f:b7:80:00:07:0d:
b0:94:c2:e2:8d:a3:68:64:8d:23:06:4d:cd:7e:4e:
40:8c:d4:11:d1:a5:37:de:9d:a9:f3:19:4f:e1:3c:
2d:77:81:a8:5b:6b:05:93:03:8a:64:88:ee:85:70:
52:e7:c0:1f:6e:91:56:dd:31:8d:63:f9:4d:1a:49:
64:b4:38:47:c5:8a:47:cd:c5:9d:2d:c6:bc:39:c3:
71:16:5c:1e:d3:37:7b:c8:81:df:a9:96:5f:b9:38:
a9:af:77:e6:30:b8:9a:ab:f5:bc:ac:5e:e2:0c:6a:
b9:86:b1:a9:32:34:ed:82:da:d3:7c:69:9b:8b:1c:
cf:0d:b3:4c:a6:aa:d2:2e:ac:7d:ab:cd:f7:09:1e:
e3:f4:6d:f5:f1:30:4a:a7:73:31:22:6b:ff:a6:ce:
5c:54:85:b1:d9:ef:db:e0:74:6f:8f:10:ab:d8:73:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:26:F2:D6:5C:55:8A:48:4E:7C:4A:3C:25:51:48:5D:E8:CB:C1
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:89:76:b3:8b:f5:70:13:f6:ab:50:32:b4:63:09:06:25:
f7:9b:7b:de:74:1b:9b:73:04:f9:c4:8d:35:06:d8:2c:9a:70:
1d:19:66:76:cf:7d:e1:97:50:bf:bb:cd:95:69:dc:da:43:4d:
37:83:e4:ee:61:18:21:62:ed:a6:be:a0:32:24:10:2e:46:56:
bd:ed:ea:ff:80:19:43:95:f0:9b:46:cf:52:d2:4a:3f:3c:89:
90:dc:d8:69:b2:61:67:2d:c7:6f:c9:e0:68:d3:9a:a8:84:70:
d0:5d:ae:7d:5e:34:99:6d:87:bf:d0:73:e4:58:2b:02:3f:f7:
22:c6:26:d0:54:81:93:50:ac:0f:aa:b6:c5:46:3e:69:2e:df:
bd:3c:c0:3f:e7:c3:03:2f:99:da:0d:78:cd:43:92:50:68:f5:
26:2d:50:ff:1c:fb:e2:35:03:8d:21:f7:c1:dd:49:d2:92:91:
d6:07:82:d6:62:82:11:79:94:f1:e2:c5:61:c8:84:47:b4:05:
3b:55:d8:2f:9b:63:f1:c6:d3:7f:99:f0:d8:c7:6f:0e:fa:d4:
2a:29:42:52:31:50:80:17:58:d6:e5:19:cd:82:26:f6:89:7b:
92:c8:65:ba:59:34:18:2a:83:1e:75:a0:33:e8:21:a7:64:a8:
25:8c:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:45 2026 by rpki-client