Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: IQWsz2dG2InVZMNG4kROHdF8cbn0ieMvmXxf+JIfUQQ=
Subject key identifier: 08:D5:EF:01:2A:BF:83:C7:30:AA:A5:44:0A:F5:88:51:49:5B:7A:AE
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019EC894EBB2D5B99D733B4F1DD52B53A3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1962
Signing time: Mon 15 Jun 2026 00:01:03 +0000
Manifest this update: Mon 15 Jun 2026 00:01:03 +0000
Manifest next update: Tue 16 Jun 2026 00:01:03 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: WAfrSeuLdQaegSQhjllqbqAQkq7eb8Z8+JIaJI7KNlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:94:eb:b2:d5:b9:9d:73:3b:4f:1d:d5:2b:53:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jun 15 00:01:03 2026 GMT
Not After : Jun 16 00:01:03 2026 GMT
Subject: CN=08d5ef012abf83c730aaa5440af58851495b7aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:90:03:33:f2:a3:3b:1a:09:d8:c6:d7:ea:
1d:07:87:6f:c2:fa:42:13:88:e7:fe:42:9d:0b:25:
81:eb:04:5a:83:94:59:8f:f7:07:c8:d1:ef:bb:4b:
0f:a0:41:80:50:8b:95:b0:9e:0d:a0:85:16:bf:b2:
e7:a6:bb:c8:87:20:62:e1:82:1a:45:ef:39:b5:60:
b5:a6:7f:44:15:34:3a:00:6a:3d:f9:d5:5e:47:bb:
f2:79:a9:ac:ab:48:75:6d:05:e2:8d:40:45:ee:1c:
9d:f4:3a:8e:90:51:65:d6:fe:8e:a5:8b:9d:d6:20:
53:75:87:1b:8a:78:68:3a:a8:a9:88:8f:c7:d5:c1:
4d:00:3b:39:de:a3:c1:a2:04:94:9d:ee:ac:b9:c8:
5b:43:12:67:f7:1b:c1:9a:9d:2a:78:ef:75:8a:b5:
8f:0e:35:17:7f:e5:7d:0b:ad:13:ba:55:2f:dc:77:
8e:d8:f3:ce:5f:64:50:16:7a:57:aa:fe:73:7e:7a:
84:0a:3d:61:27:b5:5e:7a:1e:8a:6d:3b:f6:05:a3:
c9:84:97:a4:dd:04:dc:59:1d:45:ed:16:ff:15:b3:
e0:1b:77:c4:f9:d6:b8:98:51:61:e2:1f:52:e9:01:
12:9f:c2:97:f1:d4:8f:47:aa:92:1c:fc:7c:d7:98:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:EF:01:2A:BF:83:C7:30:AA:A5:44:0A:F5:88:51:49:5B:7A:AE
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:81:43:f7:a2:8c:95:ac:45:06:27:8f:c2:05:ef:aa:2c:
ef:5f:56:60:ef:c1:f2:dc:13:89:8a:62:6f:16:93:04:3a:f7:
3f:cd:c5:95:a5:0f:4e:6a:fd:36:aa:2a:6c:a7:dc:e1:0e:81:
a2:08:b5:a9:e1:8a:03:c0:c4:35:9a:b3:3b:6e:5b:d3:b5:27:
a7:e4:eb:30:96:6c:b8:61:3f:dc:43:ea:0a:17:be:d2:12:fb:
05:a2:8d:0e:20:93:de:17:27:24:dd:97:67:f6:c5:67:4c:dc:
cd:a0:c8:5d:dc:ac:7f:01:23:9b:4b:67:f1:3d:36:de:e3:6c:
09:4a:11:3c:90:45:fa:2b:ee:ac:46:94:2a:ae:9e:35:04:74:
a0:f8:fc:c6:6d:95:29:f1:b2:96:b6:60:d0:00:b0:ff:cb:f0:
24:d0:f1:80:98:7c:45:33:81:5c:05:02:9d:ac:aa:c8:8e:b3:
e8:64:33:df:16:4d:fa:62:80:b9:c6:51:a0:7e:8d:1f:24:36:
bb:07:a4:f7:dc:c1:13:c1:c5:0b:a4:c4:6e:81:3d:86:66:87:
f4:85:d4:ac:48:ac:71:b2:90:82:43:dc:91:bf:04:10:07:a7:
1c:db:1e:c4:ac:eb:0a:a3:da:07:06:73:f4:7e:9b:ca:f5:29:
83:11:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 03:45:30 2026 by rpki-client