Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: K/xWejVCvkPOl7WU++qoyWFwmil0ygGWcPfPpeQ86YI=
Subject key identifier: 1E:19:4A:6A:00:B7:8C:05:17:50:6E:6C:07:97:51:56:2F:35:04:46
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019E905C6C54AFF9D119820AD2F08F7D1186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1945
Signing time: Thu 04 Jun 2026 02:00:36 +0000
Manifest this update: Thu 04 Jun 2026 02:00:36 +0000
Manifest next update: Fri 05 Jun 2026 02:00:36 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: ooX3SYq/Utn9gPglgJkaFGVO4QUKdMb0qekJSy1yUrQ=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:6c:54:af:f9:d1:19:82:0a:d2:f0:8f:7d:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 4 02:00:36 2026 GMT
Not After : Jun 5 02:00:36 2026 GMT
Subject: CN=1e194a6a00b78c0517506e6c079751562f350446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:97:cd:07:c9:54:0b:f4:7c:bb:d3:8f:72:
d3:13:84:fc:d7:a0:a6:91:6c:d6:bd:a8:41:51:73:
08:47:36:96:09:12:64:82:5f:95:11:b2:f5:c1:f6:
a4:fc:c0:71:67:60:27:9c:3c:75:81:1e:99:10:2e:
b0:08:3f:8b:f4:bf:09:1e:ff:7c:f7:06:8e:69:cc:
25:52:61:73:40:78:1e:3b:c5:a3:a6:91:8c:0f:c2:
a0:51:36:98:75:42:e8:7f:55:22:2a:15:37:af:fb:
e4:13:f0:af:97:24:af:dd:20:ed:53:66:e3:5f:45:
bc:7a:30:b1:61:6e:da:d7:3b:da:5a:11:97:37:d7:
7d:fb:0e:c8:c7:a3:70:ec:af:90:e0:64:cd:e6:fe:
88:91:b3:d6:aa:90:c8:55:f6:51:e7:4f:ff:6f:c5:
a9:fb:78:84:ab:05:13:f3:bb:4e:36:c3:48:f5:74:
80:32:7b:28:cc:11:91:ed:aa:bc:66:39:b8:c3:59:
1d:56:7f:87:5f:39:42:9e:35:d3:2b:ef:25:c5:7b:
a4:c3:92:62:fc:68:62:44:ac:71:07:2e:3b:c9:02:
aa:fb:34:35:2f:f8:0a:49:e0:29:f6:ab:0a:91:68:
27:cd:e0:e1:fc:db:55:be:c7:75:b4:2f:ee:3e:e7:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:4A:6A:00:B7:8C:05:17:50:6E:6C:07:97:51:56:2F:35:04:46
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:53:b0:d0:b3:35:28:cf:c1:19:c5:f2:ee:5b:f5:d8:b6:
9e:29:b5:2e:00:80:2c:9b:a7:d2:36:1e:0d:59:55:08:45:f2:
62:88:e5:f0:09:14:7a:16:3c:a0:a1:48:d6:a8:f1:54:69:84:
cb:80:f1:60:42:4a:18:96:0c:cb:28:ef:2b:46:dc:2f:db:71:
e0:20:48:69:bc:b1:43:69:e6:ba:25:88:30:2f:e0:2d:e6:a1:
2e:61:1a:09:e7:45:a0:f6:17:ad:2e:98:55:2c:36:60:4e:13:
88:f9:11:24:b9:93:60:a7:c4:b4:df:00:95:6d:db:1a:d2:88:
9c:1e:1e:3a:51:ca:07:4e:72:07:be:60:79:19:eb:0c:22:8f:
da:9e:6f:d8:3e:96:b3:23:bd:70:d9:aa:7e:c8:6a:80:06:d2:
0c:bb:5a:d9:63:e5:9d:19:a4:1c:33:4a:62:00:92:de:1f:8c:
82:0a:ad:50:97:54:95:34:43:e4:75:15:99:2c:a5:96:37:4b:
44:8d:8e:4c:d7:6f:b4:8e:09:7e:ca:48:31:00:cc:50:d4:68:
e1:54:24:a8:39:88:00:cd:48:e3:d6:c7:c5:ff:73:6b:fc:54:
42:e1:03:02:81:a2:a8:6c:03:7c:7a:75:2a:53:88:24:ad:9f:
0b:54:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:49 2026 by rpki-client