Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: Ypr59sTxxwRoqYvR+CozG4BUA9MR56AGeOB6m6m/zog=
Subject key identifier: AE:3D:7A:3F:EB:D9:68:56:5B:29:66:6E:CC:BD:07:D1:63:70:49:2D
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 019E91DC989169FC898A59F5B3F0453682A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 09D9
Signing time: Thu 04 Jun 2026 09:00:13 +0000
Manifest this update: Thu 04 Jun 2026 09:00:13 +0000
Manifest next update: Fri 05 Jun 2026 09:00:13 +0000
Files and hashes: 1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=)
2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: XYoD+y5mrPo6ofd5xS5OCbPesh+6HDWwq0v9yZ013vA=)
4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dc:98:91:69:fc:89:8a:59:f5:b3:f0:45:36:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jun 4 09:00:13 2026 GMT
Not After : Jun 5 09:00:13 2026 GMT
Subject: CN=ae3d7a3febd968565b29666eccbd07d16370492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:3c:cc:50:ce:90:44:d2:c6:5a:b6:b9:45:
d8:44:40:4e:a4:c9:26:b0:83:19:11:32:18:b7:5b:
74:c7:1f:0c:90:e2:37:39:d5:58:12:34:85:a0:91:
2e:b1:3c:a3:0f:cc:b8:c6:03:48:3c:d1:07:83:33:
37:95:83:eb:ac:c1:61:fb:87:c3:d9:49:e1:7e:33:
0a:00:90:94:21:7d:a0:7a:e9:a5:36:70:37:04:aa:
49:a0:14:42:46:0b:0e:f9:1c:e8:d6:ba:52:9c:d3:
66:20:c2:08:ca:cc:e9:e5:92:da:2e:df:cf:dd:09:
55:87:ca:c8:3e:b2:8b:0e:2f:eb:b2:47:ea:d3:67:
00:e0:3a:e5:30:a9:33:80:ca:16:e4:ad:a5:ca:11:
eb:c3:b8:1e:91:e7:cc:7c:11:92:9b:1d:ee:4b:4c:
67:45:40:d1:cc:49:06:eb:a1:5a:03:20:ec:05:3d:
e8:38:94:ad:29:c1:0d:2f:9d:94:75:8f:05:a2:6f:
0c:e9:a3:62:81:b0:84:44:52:4d:46:5e:04:5e:af:
91:2c:1e:3d:1c:bf:a3:0f:58:9e:0d:10:4c:59:f2:
4c:be:2e:dc:e0:a7:2a:13:b3:81:eb:43:37:f6:29:
f4:79:9e:4b:4f:bf:36:c4:b7:25:02:48:9b:a9:c1:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:7A:3F:EB:D9:68:56:5B:29:66:6E:CC:BD:07:D1:63:70:49:2D
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:21:c3:bc:02:29:01:92:11:42:b0:7d:b2:81:5c:a8:f9:
04:8a:e7:39:a2:a6:b3:5d:f6:38:5f:a8:f8:ed:52:89:4f:58:
8b:40:38:82:93:97:d8:a7:52:b5:62:b6:1c:67:50:84:e9:8f:
e9:23:44:73:6d:d6:04:0e:27:70:f1:71:ae:f8:5a:53:5a:c3:
45:67:6a:97:0f:32:f4:e3:2b:3a:48:0d:b8:78:f5:cc:07:a6:
0c:a9:17:0d:5b:60:60:42:e0:f8:fc:28:06:b0:b4:08:d2:aa:
75:e5:d7:88:95:18:25:a3:ab:4c:8d:1f:c3:85:e2:eb:56:ee:
00:63:71:51:1a:9e:c9:95:60:fe:4f:91:f5:9f:03:a8:f1:be:
e6:f3:46:3a:d6:1b:a6:b4:df:57:0d:65:83:cd:57:b5:5a:a9:
a7:79:31:60:18:51:92:a2:39:56:fb:53:cd:3c:a6:4b:e4:44:
0e:12:35:ff:7b:28:ea:35:02:1b:9d:c9:78:eb:cc:22:57:a1:
51:32:db:e1:42:3d:cf:fc:ee:4e:be:26:82:24:04:c2:81:05:
ae:5a:9c:2d:b7:6c:9e:fa:85:23:2e:c8:93:fb:1d:6f:fb:cb:
63:cd:e2:9c:8c:a0:a1:d1:c5:f8:02:1a:e1:b7:d0:0e:f3:83:
ee:7f:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:03 2026 by rpki-client