Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: PZyMiW9y2qPo94GibigpathqmCjcMsipT1tXopX8cUc=
Subject key identifier: 24:41:40:27:7A:1D:A6:8C:AB:CB:C4:59:5F:B1:42:3D:65:35:BD:EA
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019EB8EA3442BC10FEA97FF17E37B24F8D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 18EA
Signing time: Thu 11 Jun 2026 23:00:16 +0000
Manifest this update: Thu 11 Jun 2026 23:00:16 +0000
Manifest next update: Fri 12 Jun 2026 23:00:16 +0000
Files and hashes: 1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: pltos1CzulTkhCFos8qDOVw4nv71/PECp3HQcYVZfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:34:42:bc:10:fe:a9:7f:f1:7e:37:b2:4f:8d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jun 11 23:00:16 2026 GMT
Not After : Jun 12 23:00:16 2026 GMT
Subject: CN=244140277a1da68cabcbc4595fb1423d6535bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f8:af:08:f2:a4:ea:4d:44:ad:6c:55:16:4a:
8b:31:18:5e:92:d5:8f:bb:da:5e:bd:d3:84:0c:1e:
73:1d:2e:df:a1:4e:cf:4c:e2:c0:15:e4:4d:86:c7:
12:f0:db:c6:32:6e:27:10:be:b7:e6:fd:74:b8:05:
2d:84:56:4e:00:a0:f7:ea:cf:c8:80:38:96:d3:3e:
66:e8:32:18:98:8e:13:56:61:45:e2:27:16:2f:a4:
ce:d0:bb:7f:17:96:63:0c:a9:52:e1:79:df:54:ac:
b0:cf:5a:e8:55:64:9c:d9:04:4b:82:5d:52:4f:d5:
c3:76:a4:4c:db:f4:e4:17:bd:e8:5a:ec:1f:55:d4:
1a:38:c9:b2:fe:df:fe:4f:e6:ca:d5:0b:b3:d2:33:
e1:7e:de:f9:c4:30:ec:92:5e:d6:f6:7d:2e:2c:54:
8b:df:eb:60:53:f3:e3:ad:e8:c3:7c:0c:b7:a0:32:
12:2c:84:28:49:94:28:2a:08:b8:5d:d8:9c:6b:33:
46:7b:c8:a2:ba:15:ae:18:a1:4d:9e:90:c7:49:fe:
1c:e0:93:60:d2:49:37:e2:be:0b:4b:1a:a2:fa:d3:
9e:71:80:a7:67:a2:66:01:dd:d4:89:0e:23:44:bd:
a1:93:91:f0:2c:30:d1:89:a5:68:9c:22:b4:36:a1:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:40:27:7A:1D:A6:8C:AB:CB:C4:59:5F:B1:42:3D:65:35:BD:EA
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7f:79:03:4b:98:b6:7d:80:6c:77:c7:e4:6e:85:ba:43:e4:
9c:96:67:0e:bf:66:ba:63:f9:2b:ed:04:92:ea:cb:6e:fa:f1:
c8:6f:ea:f6:d8:71:9e:c9:bf:0f:d0:99:94:31:4d:57:12:38:
34:a4:5f:70:5f:03:f0:46:4b:9f:ec:42:ed:95:c3:e1:a3:35:
14:20:88:c6:da:07:b8:22:1a:83:57:5f:18:de:2a:e2:e6:28:
0a:7c:ea:54:67:c6:23:bf:e0:fc:ae:dd:81:79:8b:a7:4c:14:
7b:10:9b:26:90:13:9a:03:fe:36:fc:7d:51:53:c3:d3:8e:ef:
03:08:d2:4d:c0:07:5a:f2:c3:78:ec:6c:87:c5:f8:68:f5:02:
7f:8c:b5:10:8e:f8:ca:80:70:cf:28:3a:3a:14:04:f9:27:54:
13:b0:3d:64:1b:ff:04:18:11:b2:d1:21:aa:12:8b:b2:02:cc:
2e:d8:38:c4:32:ba:0a:a4:3e:1e:6c:88:4f:01:90:ef:a7:6d:
2c:54:2f:21:7c:12:bb:2e:9f:c9:b9:a4:d7:f7:e9:de:a5:b0:
5c:b2:2b:5a:3d:39:00:c6:a3:da:e3:0a:28:79:4c:d2:da:f3:
f8:ba:42:94:69:8e:f6:6a:ec:06:c0:f2:b0:3b:27:f6:3c:95:
d9:a5:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:16 2026 by rpki-client