Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: uLKEvmHy4+pUFwMHoYMvMFOT28MZ1YjqlbjstJr96JY=
Subject key identifier: 66:31:C8:7A:1D:DE:8A:D2:05:D1:8B:F9:54:D6:23:CA:24:A5:8D:09
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019F129C2EAF34190876A2A34493D8FDD9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0232
Signing time: Mon 29 Jun 2026 09:00:53 +0000
Manifest this update: Mon 29 Jun 2026 09:00:53 +0000
Manifest next update: Tue 30 Jun 2026 09:00:53 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: t4HjfG6eZKqXLJ1kAoyez48wDnc.roa (hash: w/ZlHvwsuOBr7+Ux+UZvLFbXnBLp7Oaw4HBnlqwDp7E=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: +VOAgJ+f12+mpECku3JJIttXH0XWeHQ2oCgUMDmuK8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:2e:af:34:19:08:76:a2:a3:44:93:d8:fd:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Jun 29 09:00:53 2026 GMT
Not After : Jun 30 09:00:53 2026 GMT
Subject: CN=6631c87a1dde8ad205d18bf954d623ca24a58d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:00:b4:83:fc:69:e8:f0:4e:60:7f:47:8b:
df:1d:77:86:42:b0:4e:b3:91:b7:e4:c6:00:ef:1b:
32:c1:2a:6b:2c:33:56:d1:75:ce:cc:48:67:da:e5:
e6:5c:f5:bf:f4:9c:2e:38:e3:34:25:89:4d:5f:61:
cf:0c:39:7d:15:bc:6f:fb:94:03:48:55:52:04:35:
79:a1:04:95:ee:db:73:50:2b:9c:13:b6:e5:d0:4f:
c9:bf:a4:78:54:0d:af:35:10:a0:a9:36:0e:b2:a0:
cf:72:8f:60:51:47:12:7d:33:db:0b:8f:31:e4:f5:
10:4a:db:aa:fe:2f:a7:b3:04:e3:9a:8a:1d:33:70:
27:08:13:16:3e:cf:d6:f8:d3:21:20:b8:f2:11:2a:
06:c6:dd:96:22:1a:c6:ae:17:dc:b3:ea:9f:61:f9:
36:54:df:26:dc:4b:78:9d:26:40:f7:ae:62:af:5a:
5f:fb:ea:cc:ad:3e:0b:f9:aa:83:1e:14:97:98:8e:
bd:e9:09:0a:de:84:cf:45:e3:b2:64:ea:6a:55:47:
cc:a5:8c:4f:f9:d1:c7:0f:55:62:92:d9:7e:1d:00:
88:6d:27:a9:6b:75:f2:9f:3e:c4:ec:46:ea:db:51:
9e:65:29:df:a9:92:48:b2:12:1e:4e:92:5e:17:19:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:31:C8:7A:1D:DE:8A:D2:05:D1:8B:F9:54:D6:23:CA:24:A5:8D:09
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:db:5e:92:0a:a6:b0:18:b5:f0:08:ca:91:96:9e:24:74:a7:
b5:cf:36:b0:e9:4c:51:62:59:51:1c:44:8f:3b:67:cf:be:4e:
5b:ab:c5:2b:10:02:8d:f7:56:3b:4b:0c:36:ef:59:4b:a6:79:
42:52:17:4f:13:ee:de:68:d5:b9:50:4d:9b:3e:be:ba:06:61:
13:2f:ca:00:b7:2c:7a:eb:31:47:ab:b1:fb:f6:30:cb:b7:43:
90:b4:a3:3c:eb:ab:cc:7c:fc:15:8e:d5:d7:46:ab:79:a7:40:
8d:26:3b:93:8f:a0:b8:73:75:fe:69:74:31:27:32:58:a9:f3:
1f:f9:96:29:78:dd:40:53:d3:6e:d3:13:48:d6:b8:67:2c:60:
dc:40:0c:13:97:08:c2:ac:3f:ba:5b:e9:60:6a:d2:86:47:8c:
48:d5:d7:24:ad:e2:c1:0c:3d:20:f0:2b:e0:7c:a5:8c:4e:2c:
2b:a2:d2:e3:37:ed:0c:7a:d2:af:87:76:3a:01:7b:78:a4:69:
60:25:0d:89:c3:d0:be:a1:87:a7:76:dd:13:61:52:f6:0b:aa:
f5:9b:7d:f7:b2:c7:f7:8a:53:70:72:ed:51:9e:6a:2d:12:cb:
5d:a7:4b:32:f2:47:e0:08:52:da:bd:aa:bb:fd:d4:73:51:bd:
b3:27:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:28:48 2026 by rpki-client