Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: kK60mFH/+/4So6iGbxh6sx+edDRB9JkuDky52rXM0Dk=
Subject key identifier: 30:C8:20:6A:7D:40:1B:12:DF:E4:16:FD:9A:68:47:E0:88:E4:ED:3B
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 019EB6FC8AA9911A94E6CA7FFD2779F57259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1952
Signing time: Thu 11 Jun 2026 14:01:04 +0000
Manifest this update: Thu 11 Jun 2026 14:01:04 +0000
Manifest next update: Fri 12 Jun 2026 14:01:04 +0000
Files and hashes: 1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: 6Qyk78IMh22oMJrY3J9i3k98t2IcjsMZoNYqYNyNkIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:8a:a9:91:1a:94:e6:ca:7f:fd:27:79:f5:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Jun 11 14:01:04 2026 GMT
Not After : Jun 12 14:01:04 2026 GMT
Subject: CN=30c8206a7d401b12dfe416fd9a6847e088e4ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:33:75:86:83:19:3a:6a:88:4f:e4:dc:9e:
ad:f0:bf:f9:72:c8:25:9d:7b:31:de:2a:9d:81:5b:
52:22:0b:bc:f2:f7:ca:fb:eb:db:82:20:bd:ed:c1:
d7:ea:51:96:15:e3:02:2d:2b:9e:d0:d3:b9:31:6e:
d1:3e:60:1d:2b:f9:31:0f:f4:c9:cb:05:d8:5b:14:
77:18:a9:83:18:8c:bc:b4:4e:15:9c:f9:51:72:67:
8a:21:00:e2:f3:69:6a:70:49:21:39:22:09:c4:54:
5f:db:b4:9d:fc:8c:91:fe:ea:a9:9d:f4:b3:5e:41:
07:67:78:67:84:ed:3d:fd:81:7e:c6:b1:15:1c:45:
fa:24:31:1f:6f:82:44:b1:a0:a7:5d:01:d1:80:b2:
3d:44:1b:be:04:60:c7:fd:85:10:60:78:02:22:f8:
bb:c0:09:35:26:47:1a:77:7f:cc:60:e5:1f:9f:db:
0a:12:39:05:4d:54:aa:9f:ea:b2:e0:6f:fe:4b:2c:
86:57:ed:19:33:f4:0b:75:fc:2c:70:75:a4:b0:0e:
94:74:54:b0:b2:c5:58:26:0a:7d:be:d7:6d:1c:00:
74:e5:d3:c2:dd:fd:08:f4:84:4e:40:95:32:ac:07:
84:85:1a:3e:ce:f9:c1:7b:28:ab:f5:15:51:0d:90:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:20:6A:7D:40:1B:12:DF:E4:16:FD:9A:68:47:E0:88:E4:ED:3B
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e2:bc:c9:76:60:ec:86:6f:65:46:1c:c1:f1:06:76:70:b6:
7d:db:5c:1e:95:07:66:75:86:04:e1:5c:ea:db:26:fa:51:00:
3e:7d:4c:bb:70:34:c0:8e:52:55:d1:3f:12:12:d5:e1:9b:00:
de:e7:a4:76:f1:6a:8f:cd:d0:bc:1b:32:8d:85:9f:75:5f:4a:
2f:8b:72:8e:41:75:aa:a6:78:1c:b9:db:bd:58:c0:1f:0e:01:
2a:67:6a:8e:1e:f0:d8:78:8d:ec:6e:ba:f6:bb:48:ee:a5:0e:
ee:ff:d8:df:13:83:70:7a:a7:2c:7f:99:bb:91:98:2b:9c:d8:
0a:b4:9b:cb:d1:77:c3:12:e2:5c:45:0a:9e:15:fc:87:7d:ca:
2d:0d:17:a7:10:ac:7f:74:35:e2:d6:82:dc:f3:39:51:76:3f:
2a:5f:92:28:6a:3b:c0:4e:69:41:22:21:e9:e1:ec:2e:4c:7c:
ef:39:5d:e7:1d:b1:62:97:13:46:26:5e:29:3c:7e:85:f1:2c:
4e:33:99:9f:06:41:69:b6:31:c5:4d:f7:c3:31:b1:1a:30:39:
49:41:2a:20:e2:8f:89:20:46:08:2b:61:f6:82:c6:ff:72:ba:
6c:99:4c:fb:ee:49:ed:7c:3b:f4:49:91:42:16:81:94:8f:6c:
79:80:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:12 2026 by rpki-client