Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: PrPmnjLgEKNu8kdFXwNq8ws468wDN76MxibuiYCz1ac=
Subject key identifier: 86:F6:8F:B0:D3:4D:92:0E:66:55:88:CC:40:E1:84:FC:59:7D:40:40
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019EB732C3BDB5A3CED52B6E16070DA37CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1642
Signing time: Thu 11 Jun 2026 15:00:17 +0000
Manifest this update: Thu 11 Jun 2026 15:00:17 +0000
Manifest next update: Fri 12 Jun 2026 15:00:17 +0000
Files and hashes: 1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: ZLnB8dHAH5l+L/unF8VsZ7NIB3hdJvt6zPr7Ion1OpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:c3:bd:b5:a3:ce:d5:2b:6e:16:07:0d:a3:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jun 11 15:00:17 2026 GMT
Not After : Jun 12 15:00:17 2026 GMT
Subject: CN=86f68fb0d34d920e665588cc40e184fc597d4040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:a4:d0:c4:5f:25:f0:77:66:83:f2:b9:63:
73:46:f7:a9:a6:b0:ec:16:01:ba:a7:9e:4c:db:77:
7b:f2:9b:17:25:df:c4:77:24:5f:90:ec:a8:71:d5:
50:8e:d0:93:9a:9f:77:66:45:0f:26:aa:b9:d2:bf:
d7:30:86:57:e9:24:7e:ec:86:ca:2f:a9:3d:8a:8c:
c5:d3:9e:ac:35:f2:e0:47:9f:b5:a6:99:02:c9:5d:
5e:c8:ee:02:4b:65:5d:13:ff:7a:c3:a0:2f:d9:55:
f2:bc:da:23:04:3f:3d:be:ab:e0:43:f3:62:fd:04:
5e:b1:c4:76:8b:ae:fd:97:7f:fc:4c:e1:e2:1f:7e:
3b:4d:1c:18:1d:ad:3e:f1:38:e1:d4:e2:d9:d0:51:
05:cc:e1:1b:35:15:0e:9b:36:9e:0e:04:7d:73:7a:
e5:fc:5a:fa:fd:55:81:0c:d8:ff:2a:d3:e1:d4:72:
36:bf:07:fe:69:76:d0:37:1f:33:eb:7e:b0:b0:96:
43:58:89:d0:53:c9:ae:fa:a3:63:c6:82:79:62:ad:
31:4e:ca:4b:5f:e8:00:b5:ac:77:52:22:83:32:49:
46:b0:f9:c8:a3:ad:86:be:16:96:ae:1c:f1:5b:fe:
99:5d:71:1d:ce:72:c7:68:e8:0d:a9:14:e1:3c:c3:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:8F:B0:D3:4D:92:0E:66:55:88:CC:40:E1:84:FC:59:7D:40:40
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:80:e6:60:f0:2d:18:c0:1b:7b:9a:e2:b1:15:a9:2d:af:
e7:39:b0:99:f4:f5:ae:a9:d6:ed:29:f4:7e:2f:2f:d4:d3:ce:
42:a7:d9:6f:d3:ab:a6:46:50:c6:c6:ea:cb:ce:46:0d:27:0d:
f5:1c:99:1d:8f:c0:80:38:0d:20:d1:a1:ed:de:9c:c9:04:22:
5f:95:ac:c6:48:5d:b6:dd:e4:45:d2:be:c0:33:35:c3:13:5d:
68:6a:52:f3:e2:a4:fa:49:7c:9e:26:88:75:ea:75:ff:9c:1a:
71:d6:fd:18:de:b0:b7:b6:f4:f1:52:3e:fc:72:f9:d2:68:a4:
01:9e:63:ef:79:66:a1:e6:66:01:15:b7:f3:84:d0:eb:7c:b0:
e7:09:f1:58:32:b1:17:e7:06:8a:fc:bb:1d:16:98:59:8f:00:
49:79:d4:fa:7d:64:b7:f2:c6:28:5d:ce:1c:f8:e8:a9:bd:8a:
a4:09:75:e1:a8:c4:c0:6e:c4:5f:56:92:ea:50:ef:c0:9c:c7:
8e:4b:c0:b2:08:f1:f7:d9:4f:eb:60:8d:c9:16:28:46:3a:0a:
19:93:c7:41:56:66:c2:10:26:74:c1:77:f5:ff:5b:3a:c1:58:
f0:34:13:9b:9d:04:14:0f:51:d2:58:46:fb:f6:d3:71:46:94:
3c:6d:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:32 2026 by rpki-client