Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
File: tGZGB9tMTT48FWLyjSDPuSMkGBA.mft (raw, json)
Hash identifier: zgFwbwOieePpOLPCrOpB6r+nYs0tMdeeaZXrgFszNVo=
Subject key identifier: 19:A9:FF:16:09:15:1B:E1:CD:2C:CB:54:F1:FC:38:57:CF:63:D7:28
Authority key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Certificate issuer: /CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Certificate serial: 019F1867B8CB6C4B4DAEFEF845A277967F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
Manifest number: 28
Signing time: Tue 30 Jun 2026 12:01:18 +0000
Manifest this update: Tue 30 Jun 2026 12:01:18 +0000
Manifest next update: Wed 01 Jul 2026 12:01:18 +0000
Files and hashes: 1: tGZGB9tMTT48FWLyjSDPuSMkGBA.crl (hash: ILt5wPJ6fq0LhLP3/OChW5t67NpV3Xcz/rpsUKNm3Bk=)
2: ziWW6n1B_UZcXiD6pfKzphrsK3A.roa (hash: hLVr8gy4usgiH3/VrSF1XURRYPhpaPisnOC7F4Eq2L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b8:cb:6c:4b:4d:ae:fe:f8:45:a2:77:96:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Validity
Not Before: Jun 30 12:01:18 2026 GMT
Not After : Jul 1 12:01:18 2026 GMT
Subject: CN=19a9ff1609151be1cd2ccb54f1fc3857cf63d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:7d:42:32:60:4d:13:1b:cb:f2:ac:f8:2c:
78:ad:ae:54:dc:61:16:89:ed:cc:bd:7c:3f:ff:0b:
69:63:5a:74:e1:bc:44:c8:7f:e0:d9:80:f5:f6:cf:
94:d4:34:6f:19:74:53:e0:d1:1e:38:fc:bc:dd:3b:
5a:b3:f2:6c:29:f2:85:b9:93:57:37:7d:79:fe:00:
71:c4:f9:a5:a7:ea:8f:9f:70:e8:30:60:af:0b:cb:
ea:46:98:97:3d:22:2c:f8:ec:14:2d:eb:8e:5a:22:
f3:39:bc:33:c3:5f:34:ff:c8:99:9c:c9:6c:d2:96:
01:4a:24:4c:4c:ec:fe:ef:d8:23:30:23:81:ff:73:
bf:aa:57:0a:54:93:af:95:ba:65:0b:71:09:7f:0d:
e1:01:90:fc:2a:e0:5d:09:4f:f0:99:15:d5:3f:93:
a6:fa:5b:c9:34:33:cc:c9:de:9b:a6:57:85:16:92:
f3:4c:33:29:35:57:2a:b5:1d:f2:7f:56:ca:8a:32:
37:19:e4:1e:3d:a3:db:6f:d5:97:c8:82:cc:44:6b:
0f:46:65:e9:e7:f5:4e:77:0e:25:a1:f5:1b:b7:0e:
97:6d:63:93:9a:e2:49:a5:d2:e2:13:8b:91:9e:a4:
86:16:b8:95:34:a0:bb:53:70:4d:1d:1b:4f:d9:df:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:FF:16:09:15:1B:E1:CD:2C:CB:54:F1:FC:38:57:CF:63:D7:28
X509v3 Authority Key Identifier:
keyid:B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:45:11:15:19:17:a4:76:94:3f:08:b2:17:9e:41:36:9b:
22:d4:3a:bc:17:01:2c:bf:3d:6a:e1:b2:d7:4a:92:57:4b:e4:
fa:6d:5e:b8:c8:82:c1:9b:f8:25:88:ec:da:92:05:68:32:11:
f8:5d:03:62:ec:b0:c1:c0:2a:a5:71:3b:d4:ab:05:58:d6:70:
f0:9e:2d:f7:ed:97:4d:86:cc:6b:da:d6:8e:c1:6d:c1:b4:5d:
b9:6a:ff:e2:c6:15:cc:26:78:18:6c:51:b8:71:95:7d:cf:9d:
69:18:dc:b9:ab:88:ae:8c:2c:4b:4a:17:fe:ea:18:d8:dc:ad:
74:a9:21:70:4c:00:e1:59:e6:3a:55:15:9e:ec:1e:a1:b1:72:
d9:28:1b:da:a0:51:b2:d2:d3:09:38:ae:b3:d4:b1:cf:fe:35:
57:64:d1:b3:d1:54:15:f6:b5:91:23:4d:00:1a:22:d5:df:a6:
cc:9d:28:17:9d:8c:8e:c3:05:b8:0c:92:e9:df:26:48:b6:15:
a6:d7:a1:a1:42:32:ef:b4:e9:06:d7:a9:04:bf:ab:da:e8:9b:
71:e1:75:d9:b0:ef:c5:fd:b6:d0:3b:d7:45:fd:7a:5d:d9:cf:
be:82:e3:61:6d:89:0c:68:03:63:d9:dd:59:4f:b8:64:64:62:
a6:8a:99:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ7jLbEtNrv74RaJ3ln+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjY0NjA3ZGI0YzRkM2UzYzE1NjJmMjhkMjBjZmI5MjMy
NDE4MTAwHhcNMjYwNjMwMTIwMTE4WhcNMjYwNzAxMTIwMTE4WjAzMTEwLwYDVQQD
EygxOWE5ZmYxNjA5MTUxYmUxY2QyY2NiNTRmMWZjMzg1N2NmNjNkNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhx9QjJgTRMby/Ks+Cx4ra5U3GEW
ie3MvXw//wtpY1p04bxEyH/g2YD19s+U1DRvGXRT4NEeOPy83Ttas/JsKfKFuZNX
N315/gBxxPmlp+qPn3DoMGCvC8vqRpiXPSIs+OwULeuOWiLzObwzw180/8iZnMls
0pYBSiRMTOz+79gjMCOB/3O/qlcKVJOvlbplC3EJfw3hAZD8KuBdCU/wmRXVP5Om
+lvJNDPMyd6bpleFFpLzTDMpNVcqtR3yf1bKijI3GeQePaPbb9WXyILMRGsPRmXp
5/VOdw4lofUbtw6XbWOTmuJJpdLiE4uRnqSGFriVNKC7U3BNHRtP2d+UVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmp/xYJFRvhzSzLVPH8OFfPY9coMB8GA1UdIwQY
MBaAFLRmRgfbTE0+PBVi8o0gz7kjJBgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zMzYwODQtZDJjZi00MzQ2LWE3MjAt
YzQyMzY0NjVhMTBiLzEvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zMzYwODQtZDJjZi00MzQ2LWE3MjAtYzQyMzY0NjVhMTBi
LzEvdEdaR0I5dE1UVDQ4RldMeWpTRFB1U01rR0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ1FERUZ
F6R2lD8IsheeQTabItQ6vBcBLL89auGy10qSV0vk+m1euMiCwZv4JYjs2pIFaDIR
+F0DYuywwcAqpXE71KsFWNZw8J4t9+2XTYbMa9rWjsFtwbRduWr/4sYVzCZ4GGxR
uHGVfc+daRjcuauIrowsS0oX/uoY2NytdKkhcEwA4VnmOlUVnuweobFy2Sgb2qBR
stLTCTius9Sxz/41V2TRs9FUFfa1kSNNABoi1d+mzJ0oF52MjsMFuAyS6d8mSLYV
ptehoUIy77TpBtepBL+r2uibceF12bDvxf220DvXRf16XdnPvoLjYW2JDGgDY9nd
WU+4ZGRipoqZNA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:09 2026 by rpki-client