Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: mzPKUI/kMpDIMtsouHDco+2nSlUZKMw9D9hTNr0pLGQ=
Subject key identifier: 97:17:53:8F:7E:C9:7F:C3:93:D7:F0:2D:26:32:AF:A2:A9:BB:5D:17
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019EB6FC7928B44C2217E04414D7A0866364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 14:00:59 +0000
Manifest this update: Thu 11 Jun 2026 14:00:59 +0000
Manifest next update: Fri 12 Jun 2026 14:00:59 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: o/ZVnCbwtw/XvLypu2/oXy143s0evtHAf7U2q9gqQJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:79:28:b4:4c:22:17:e0:44:14:d7:a0:86:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Jun 11 14:00:59 2026 GMT
Not After : Jun 12 14:00:59 2026 GMT
Subject: CN=9717538f7ec97fc393d7f02d2632afa2a9bb5d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:75:57:a9:3a:41:c4:2f:f0:93:77:1e:a5:
f8:55:f3:eb:16:20:87:ca:bc:a1:ec:af:2d:4c:a1:
6a:af:95:5d:a1:24:53:69:a9:2e:aa:7b:31:c1:ff:
b3:8a:9a:09:ce:19:b2:a9:8d:fb:1e:f3:ca:50:5c:
d4:63:d0:a5:d3:08:ff:51:c4:c7:8c:77:70:52:15:
19:73:85:00:b2:75:ed:f8:ee:64:b9:09:5c:92:8a:
88:ec:91:96:f5:f3:8a:44:a6:94:56:27:86:97:ed:
41:9f:a8:1e:6c:70:05:81:72:88:d8:c8:d7:18:ae:
5b:ee:bb:ea:78:73:e5:4b:8b:6b:e7:bc:a5:ab:50:
ce:45:89:3f:b1:4e:cd:88:a5:21:c1:4c:b0:ff:c4:
05:3e:ec:b5:08:ab:00:79:13:e2:bb:aa:a7:a8:24:
30:09:f0:fe:b7:63:db:ac:f6:04:98:c7:2c:ef:6e:
cf:bd:52:fc:0a:bb:ba:86:12:6f:c7:e5:55:5d:46:
4b:80:c5:65:26:3e:b5:b5:07:50:67:36:1a:52:ce:
62:f0:6f:27:e9:b5:96:92:ad:36:1d:ac:ab:b0:4e:
c3:31:12:ba:0a:df:4b:6a:32:5c:2c:51:b3:51:af:
74:b8:34:8a:25:43:3d:e5:af:47:23:05:c3:58:89:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:53:8F:7E:C9:7F:C3:93:D7:F0:2D:26:32:AF:A2:A9:BB:5D:17
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:e0:be:ba:30:41:a6:cd:a7:e5:a7:cc:86:90:b1:05:4b:
b9:9e:f1:15:f9:eb:22:ba:40:2f:02:c7:04:37:f6:b9:39:31:
91:d0:3a:89:56:2a:ed:e9:39:2b:f7:ca:01:3c:40:60:ba:d8:
77:6e:95:3e:c2:83:08:ea:6d:92:ad:7c:80:5c:1b:39:19:3a:
9e:64:59:b1:ad:ea:0e:bc:59:b0:05:5e:66:82:bd:28:e7:4f:
7a:ab:41:16:37:31:56:57:79:bc:55:f6:c8:c9:56:a8:7b:81:
78:44:3f:d9:90:1c:6b:a1:f1:d9:ce:e0:d4:e9:50:92:ee:53:
75:11:c0:84:85:2f:b1:9e:e0:5a:17:5a:3a:70:4b:e9:a2:34:
61:f3:df:e2:5c:bd:e3:c8:08:eb:13:63:e8:5c:14:eb:74:1e:
07:3d:d7:77:99:81:d2:91:99:64:5a:04:34:dc:2d:22:43:53:
78:3c:d2:dd:d4:58:40:3d:41:24:49:79:d0:3a:45:06:61:6d:
46:a7:2d:63:f5:3e:04:ba:a4:18:3a:3b:34:f2:f9:da:f2:9f:
36:19:fb:96:5f:0a:89:5f:47:f8:a5:da:4b:82:0c:94:d3:9e:
54:b1:81:6c:2b:2a:25:86:5a:b2:23:17:6d:4d:c5:94:47:7c:
1a:00:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:22 2026 by rpki-client