Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: 1bPk8ETy7zkTyAqCoN5tWOoKV1NX3bsS+qpPkHL9YeA=
Subject key identifier: 5B:2C:83:DD:03:44:42:02:D4:FA:56:02:16:DB:32:41:15:D7:C3:7D
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019EB6C5724F062B8D6FCF9A7356BE5E3226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: 0137
Signing time: Thu 11 Jun 2026 13:00:53 +0000
Manifest this update: Thu 11 Jun 2026 13:00:53 +0000
Manifest next update: Fri 12 Jun 2026 13:00:53 +0000
Files and hashes: 1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
7: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
8: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: IKjz5VYu0gY2aEO4hZOMzLWtyDwxHPeLYjjDHTZp3U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:72:4f:06:2b:8d:6f:cf:9a:73:56:be:5e:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Jun 11 13:00:53 2026 GMT
Not After : Jun 12 13:00:53 2026 GMT
Subject: CN=5b2c83dd03444202d4fa560216db324115d7c37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:c1:be:47:a9:3a:50:c4:7d:a6:a5:da:0e:
0b:a0:83:2d:55:e8:a9:93:d1:dc:2e:37:36:51:f7:
9f:37:8d:ac:47:ea:64:99:a2:9e:7a:55:f1:54:44:
9c:59:6b:6e:9b:5e:88:57:f3:fb:6f:88:fa:4a:e6:
cd:e2:7a:c4:d8:36:18:2f:f4:4b:27:22:67:0a:00:
92:d9:54:5f:74:5a:74:b8:df:e7:8b:27:c8:57:63:
89:75:69:2c:43:cb:fc:35:18:0b:24:65:27:e1:af:
50:33:15:bf:77:c0:bc:b4:dc:0b:7c:85:b7:ae:40:
9f:29:ea:77:f3:ec:3f:44:68:3a:80:da:4b:bb:55:
79:17:3f:bf:40:37:ca:91:86:de:ec:05:2e:d0:48:
44:2c:ae:96:77:ca:fa:78:17:e9:60:d0:65:b6:de:
27:12:85:f9:21:61:18:ab:59:22:2c:fc:37:af:aa:
ad:42:3b:e2:17:3f:ce:b8:d2:a3:09:ff:9c:63:0c:
8d:fe:d5:74:74:3f:2e:d1:89:36:9a:39:ad:a3:90:
93:d6:1e:ae:38:01:96:f6:c8:18:49:40:77:ae:5a:
89:07:a2:41:7b:79:60:75:d0:2b:3f:de:14:fe:39:
6a:a6:a1:46:03:a0:1b:f9:ae:85:e7:95:19:f9:76:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:83:DD:03:44:42:02:D4:FA:56:02:16:DB:32:41:15:D7:C3:7D
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:75:a4:08:46:07:2a:55:ec:71:f3:8a:18:d0:2e:0d:cf:bd:
fc:61:c8:3e:1e:f5:17:bd:0f:05:25:d6:13:42:33:5f:c9:fb:
6d:76:03:54:ba:95:74:a6:7b:dd:bb:51:f0:ed:45:75:df:d4:
45:24:dd:57:f6:4b:94:fb:d7:82:9f:21:ef:8a:e2:01:c3:2b:
99:63:c0:9a:50:42:bb:9e:f1:a7:96:38:ce:5e:50:96:de:f0:
48:40:7c:35:ee:b3:68:fb:38:28:0f:2d:32:db:0d:fe:68:7c:
21:65:06:fa:5c:37:33:41:5d:57:b5:ab:03:ec:c2:b9:23:5e:
9b:48:54:4a:d8:bd:d3:5b:85:f3:20:b6:a0:e9:54:0b:65:7b:
14:e2:46:b4:dd:5b:ca:32:df:11:75:b4:74:07:64:cf:18:48:
9b:8d:43:1d:c4:1f:aa:0e:01:db:28:b0:f8:0a:b4:9f:e1:c1:
af:6c:fc:b6:22:cd:a5:16:f6:3e:85:62:e9:63:b7:1d:c4:7b:
70:f9:d1:7e:22:52:24:cb:de:34:35:72:4e:ef:0b:3f:1d:3f:
bf:2c:fa:60:8e:d3:75:04:9a:2a:11:61:f8:12:3b:47:15:41:
0c:92:ae:3b:51:58:30:d7:21:24:fe:c4:06:87:18:9b:f4:b6:
3b:0e:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:53:36 2026 by rpki-client