Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: Ns+PycXsw1DWScm8lXJJy7yowmD2MBzSa4WSM2nldVM=
Subject key identifier: CD:2B:99:F6:BA:26:D8:DF:22:4C:B9:6A:13:D7:8B:F9:4B:D5:31:E4
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019EC0DBA467AB59BD7C58E2D0578308910A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 12:01:20 +0000
Manifest this update: Sat 13 Jun 2026 12:01:20 +0000
Manifest next update: Sun 14 Jun 2026 12:01:20 +0000
Files and hashes: 1: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (hash: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: V1bolWKFOxk5JoLpc5HfN5nMBWD/XaXmFWcXwpfgpaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:a4:67:ab:59:bd:7c:58:e2:d0:57:83:08:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jun 13 12:01:20 2026 GMT
Not After : Jun 14 12:01:20 2026 GMT
Subject: CN=cd2b99f6ba26d8df224cb96a13d78bf94bd531e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:20:81:1b:5e:99:69:43:3e:70:54:39:75:
79:c2:0a:ac:c6:c3:63:69:4e:82:27:84:0e:df:e8:
28:b0:62:50:52:4e:e7:d1:36:30:c9:68:39:a7:52:
56:2d:0a:9b:67:c4:c6:0c:e5:6d:cb:a0:1f:ec:bb:
5f:c1:cd:b5:07:4c:a4:74:a3:56:9e:17:e2:b0:d1:
4b:dd:e7:bb:f1:12:a3:bb:01:1a:a8:d9:6b:48:f8:
cf:3a:b2:3e:39:62:99:ec:9e:10:ce:a2:af:ea:e1:
e2:ac:fe:19:54:b6:76:71:3b:df:fb:91:be:bb:db:
0f:d5:32:b7:fa:7a:f1:6c:1e:55:41:b0:40:80:b6:
c6:28:13:06:ea:0d:d1:1e:13:d4:96:80:c1:f6:c5:
9c:dc:a8:ba:00:24:8a:99:03:37:70:e9:0d:80:e5:
df:c5:e1:46:fa:7f:d4:9e:95:b2:35:9e:14:90:81:
6e:85:6c:fe:ab:4d:bf:75:88:ec:90:6d:8a:b2:42:
fc:75:10:0e:27:f2:71:28:c0:15:eb:10:f1:47:86:
62:dd:21:b7:fb:5c:bf:84:2d:98:c8:ed:c4:aa:45:
7c:7b:f4:90:48:af:70:e3:ea:1a:de:92:ce:79:d1:
94:ae:9b:2b:6d:47:04:b0:1c:e2:85:69:71:7e:eb:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:99:F6:BA:26:D8:DF:22:4C:B9:6A:13:D7:8B:F9:4B:D5:31:E4
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:18:8f:72:02:a9:de:dd:ee:77:74:23:37:42:5c:be:de:28:
d2:3d:05:ff:dc:20:be:1d:58:5c:b5:39:4d:ef:1a:88:ef:1f:
89:a7:06:31:48:fc:87:80:b9:d8:26:94:83:a7:dd:84:da:e7:
e5:4f:9c:66:a6:11:dd:bb:57:9a:fd:93:aa:c2:31:6b:76:3c:
a2:73:2a:fd:d3:b5:4a:83:06:07:0b:c1:92:bd:69:49:f4:bb:
c6:6d:2e:f2:c3:1d:14:17:d6:d9:a4:3b:7c:7e:5d:2e:63:34:
69:b1:e3:69:92:8b:14:d2:7f:5c:e4:b3:a2:e8:1d:83:6c:64:
9c:11:91:79:a8:00:35:6c:4a:37:99:89:37:67:52:dd:92:34:
91:5d:1f:43:9d:df:04:dd:58:2d:c8:a8:5c:a7:47:fd:b5:6d:
2a:de:d7:26:37:ce:46:71:66:5a:13:a7:08:c5:24:b3:18:ef:
fa:70:e8:7e:2b:ab:57:c6:6c:9c:ce:72:aa:ed:12:ff:fb:10:
d2:0e:20:b4:0c:46:51:8e:7a:9b:81:ab:a8:3e:ac:2a:e3:d1:
69:f1:99:60:74:46:97:1f:34:a3:c2:a2:50:4a:fe:d8:9d:8f:
ad:7e:a7:61:1e:a7:b4:a7:30:07:5b:68:98:ff:1a:dd:f4:7d:
8c:45:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:39 2026 by rpki-client