Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: EdEXTJUzZDFxBJEi3KhN2vau2mCZ7ZPJPYR5TVE0oS4=
Subject key identifier: E8:79:A6:AF:28:D1:0C:DE:D0:88:82:8D:8C:A0:D5:68:27:40:87:E4
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 019EB87C624D3F39A436698A725B2478361A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 128E
Signing time: Thu 11 Jun 2026 21:00:19 +0000
Manifest this update: Thu 11 Jun 2026 21:00:19 +0000
Manifest next update: Fri 12 Jun 2026 21:00:19 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: eHUvTki39bhSF8/qRJddA1bi+MMwszx87zMu/UPROy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:62:4d:3f:39:a4:36:69:8a:72:5b:24:78:36:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Jun 11 21:00:19 2026 GMT
Not After : Jun 12 21:00:19 2026 GMT
Subject: CN=e879a6af28d10cded088828d8ca0d568274087e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:d9:a0:9d:aa:6d:99:4b:74:ab:65:65:b8:
bf:7b:b7:d8:06:af:5c:4f:d0:6e:ee:ca:de:2c:6d:
b5:cc:bc:bf:df:50:79:57:9f:b6:62:eb:e5:82:4f:
ca:04:14:7b:94:82:27:32:ff:19:ea:db:78:ba:67:
b6:8a:90:d2:6d:df:6f:27:3e:f6:0b:1b:e5:c7:ae:
35:65:df:1b:fa:cc:95:f0:bc:9f:7c:5c:5e:d6:bc:
85:9a:74:a3:87:21:9e:aa:06:c2:e4:11:1a:37:be:
3b:38:80:e4:09:3a:12:c1:1f:1f:5c:79:12:96:5a:
06:37:f7:9b:b7:6f:6a:cf:7b:8c:35:7f:32:e4:2e:
e3:10:b2:8e:a7:cf:19:bf:a6:4c:b7:84:93:94:54:
cb:53:fa:fa:fd:32:a9:a1:96:46:bb:6e:a2:72:27:
19:2f:e2:d8:8a:51:4c:a3:a1:9d:2d:4b:3f:8d:e7:
a6:88:45:54:c9:69:cf:72:96:c9:86:61:93:8e:93:
08:f1:b3:b9:db:4d:0d:75:fa:db:48:bf:bc:9e:8e:
33:7b:cd:14:50:dd:4d:e2:7c:ce:38:d1:37:ed:64:
3f:68:59:cc:d1:e2:4b:c1:28:ae:dd:ac:52:52:a1:
25:2a:06:56:1d:23:0d:44:2a:3f:c5:bd:59:e3:29:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:A6:AF:28:D1:0C:DE:D0:88:82:8D:8C:A0:D5:68:27:40:87:E4
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:2d:28:3d:4e:cd:22:ae:bf:1f:d0:cc:a6:1b:33:c4:50:
97:a6:49:d5:8e:f2:e8:98:eb:55:2c:c6:00:e2:e2:c5:6e:6a:
05:c1:4d:32:05:62:d6:89:16:ee:0f:a2:51:03:cc:be:59:fa:
fb:82:e2:21:a1:cc:98:75:30:24:f2:2b:cc:cf:a3:b8:ae:5d:
59:ec:3f:82:ca:bc:12:0e:03:d7:25:d8:75:04:85:d7:05:22:
44:34:25:b7:12:73:a1:91:dc:39:3c:33:f3:6e:b8:88:59:6c:
cc:2f:0f:cf:bb:f9:a3:6c:fa:77:a6:0c:c0:c1:c5:f9:16:36:
55:c8:cf:0d:80:61:c2:22:b1:d9:19:72:26:b2:27:10:89:94:
b8:0b:2e:26:2b:4a:77:96:b4:cc:bb:d1:fd:d6:60:c9:75:f0:
3f:21:26:5f:2c:50:81:2a:26:2c:3a:5c:92:0c:1f:9a:5d:6a:
b1:5a:6c:23:a3:0b:5c:30:d4:e9:12:b9:59:e3:e5:b8:e5:9b:
40:b9:0e:b0:38:bd:0f:6a:0f:a5:38:e3:20:ac:5d:e8:b6:6a:
51:52:7b:fd:8d:08:ea:1e:5e:59:b4:6d:ed:8a:eb:64:6c:68:
fc:da:09:02:4a:04:e1:a0:a1:83:30:9a:ad:60:9b:7b:d5:d0:
d4:0c:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:39 2026 by rpki-client