Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: njwfvxcnea7ic2rJ944Qz5IvnpqvZt25VtSMGRdO2B0=
Subject key identifier: 64:D2:63:D0:B9:81:A1:DE:E0:AE:84:0F:AF:AA:A0:C9:60:BD:E7:F2
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 019EB7A100125D8A5F69B38FE82734B60149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0BA4
Signing time: Thu 11 Jun 2026 17:00:42 +0000
Manifest this update: Thu 11 Jun 2026 17:00:42 +0000
Manifest next update: Fri 12 Jun 2026 17:00:42 +0000
Files and hashes: 1: 4rBeJt2gTE44sAknjaU9icbf798.roa (hash: ZYDnszD6TdxQH5b/70FLacYtJ5dXx4AM/j4gatDDLJQ=)
2: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (hash: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=)
3: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: hxj2zH5WPiS2G1dBFgjCVndOnZ5vpCkh/0QBf6tUhGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:00:12:5d:8a:5f:69:b3:8f:e8:27:34:b6:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Jun 11 17:00:42 2026 GMT
Not After : Jun 12 17:00:42 2026 GMT
Subject: CN=64d263d0b981a1dee0ae840fafaaa0c960bde7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:44:b5:22:31:8f:42:0c:96:89:ef:00:12:
ed:da:ba:46:ba:e7:e4:60:9e:aa:2d:39:8b:56:59:
60:ab:d6:dc:4c:69:86:34:d7:37:6d:49:4a:e9:5e:
fb:ca:c7:53:8d:3a:8f:df:08:d8:1a:04:e0:f7:bb:
21:d6:74:9c:03:85:69:9f:99:4f:90:52:d3:b9:15:
d4:a2:4a:be:56:6f:0c:b1:df:fe:44:76:d1:a1:92:
88:dd:66:b1:0c:7f:2c:14:4d:b7:41:bc:49:cf:f3:
f1:49:20:b1:e5:12:1c:f6:94:0b:3e:d9:fe:c8:18:
1a:1f:a9:eb:be:13:db:4e:07:ef:d0:ba:b1:88:88:
2d:b0:83:b6:9e:41:1a:b4:aa:61:7f:b3:f9:18:7d:
3a:f3:e8:ab:60:be:d3:46:55:a3:b9:16:e2:e4:7b:
02:d8:7d:c3:9d:f4:41:2e:14:5c:ea:47:03:de:a9:
af:39:27:3e:19:07:b6:63:f1:9f:c7:51:46:ff:e4:
dd:ac:a6:70:15:df:83:39:49:14:a0:f7:f4:ba:17:
b2:8d:12:31:0f:68:f2:ba:98:f8:df:c5:1f:45:cd:
79:bd:89:f1:f4:27:96:4e:6f:99:d9:cb:8c:94:99:
51:e0:61:57:12:61:48:3a:d9:2d:e9:0d:a6:c4:e1:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:63:D0:B9:81:A1:DE:E0:AE:84:0F:AF:AA:A0:C9:60:BD:E7:F2
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:80:aa:1b:0f:eb:7c:25:f5:d3:60:5c:93:b5:93:6c:e4:
d7:1c:71:57:3b:fb:ad:16:60:3a:30:6c:ae:dd:e4:56:24:7b:
7a:ef:04:77:99:d4:19:1e:f2:58:e6:73:97:4c:4e:20:e7:5d:
46:be:c5:be:5d:cd:c9:9e:9b:07:b4:75:a5:e4:0c:00:02:f0:
08:79:73:c9:2e:69:20:83:30:fe:86:b1:83:88:84:50:4e:21:
cb:3e:43:be:8e:97:52:c4:d7:89:e0:00:b7:0a:1e:66:1f:e4:
e7:1f:fd:55:5b:08:20:24:37:2f:be:13:d3:82:9e:65:68:c9:
fe:79:db:a3:bd:4d:b7:06:fb:81:1c:96:dd:f3:4d:f2:35:fe:
45:5f:fa:50:17:c0:49:27:04:42:ac:88:d5:18:d8:9e:4b:f8:
5a:86:fe:cc:6a:76:61:b9:43:3f:1a:1d:c1:e6:06:ad:38:c5:
29:c7:10:b5:a8:08:2a:7e:42:c4:c6:ae:bd:61:2e:ba:4d:11:
2e:13:0b:1d:53:27:4c:2b:db:0d:38:bf:06:e8:9d:7d:9d:ea:
d9:10:2e:f0:83:b5:74:d7:08:da:f8:59:29:bc:6b:ae:c4:8c:
37:58:28:59:f2:d9:a7:6c:ee:c3:eb:ee:32:8f:f4:09:a4:98:
54:e3:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:32:43 2026 by rpki-client