Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: TKbu32K5r5w6kOqVlLfSNMwEP7+boTIgodXlL7jvivU=
Subject key identifier: 5D:AE:75:1B:6B:9B:BD:34:7D:C0:7E:13:A0:C9:7E:50:A1:1C:96:C7
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019EB9C6A3AC4EDB3BA0153144A1BF8CC503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 03:01:03 +0000
Manifest this update: Fri 12 Jun 2026 03:01:03 +0000
Manifest next update: Sat 13 Jun 2026 03:01:03 +0000
Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=)
2: jZrCbTqva_be0rB3oAO4Wrl5ILU.asa (hash: BKm/bFSkAYx4jWBv2MfEwkAGa++5I1rT7LtmalyyzRA=)
3: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: zpNEIR7ha33AHe4szMRNvqyYS36xXxvwYcLBdnc/VXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:a3:ac:4e:db:3b:a0:15:31:44:a1:bf:8c:c5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jun 12 03:01:03 2026 GMT
Not After : Jun 13 03:01:03 2026 GMT
Subject: CN=5dae751b6b9bbd347dc07e13a0c97e50a11c96c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:24:d1:11:aa:c6:0d:d8:58:ab:3f:d7:6a:
43:44:d7:4f:6c:c0:74:b4:c9:62:86:65:e5:1d:31:
a2:9f:51:af:17:61:25:40:4b:bc:7f:2d:95:2b:80:
f1:eb:c2:7b:72:a7:fe:9d:bd:68:30:69:a3:0c:4f:
5c:b7:5e:17:01:57:d5:39:ae:d1:7c:b0:5c:f5:8c:
e9:16:23:8d:91:b7:cb:46:d1:f6:c5:b3:52:f0:7a:
0f:91:8f:c5:74:dc:e9:61:5c:08:c2:90:6d:22:42:
96:2d:44:f5:88:83:e9:55:b8:b2:c5:0d:6b:35:bf:
fa:83:c4:2c:74:12:57:95:67:6b:a8:51:ad:96:58:
5b:b3:76:f6:8b:0c:23:63:a3:84:3d:92:27:ef:0f:
a7:6a:df:c4:0a:8f:ba:f5:f0:86:2b:30:08:6d:42:
98:1a:d2:ad:5f:b1:77:64:8b:cf:3a:ef:0c:36:bc:
72:cc:61:60:19:15:02:30:a9:3f:cc:bb:d0:87:81:
0e:52:1c:79:bd:00:6a:02:70:7e:f9:f1:4c:4d:26:
a7:d9:22:80:28:40:11:a1:1f:3b:87:d3:a0:c4:61:
b2:ad:d9:2a:f8:f6:77:62:33:77:ff:65:c4:8b:78:
8f:e7:35:7a:6b:99:34:2b:31:f2:13:77:e5:e7:5c:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:75:1B:6B:9B:BD:34:7D:C0:7E:13:A0:C9:7E:50:A1:1C:96:C7
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:7c:2f:00:75:2b:2f:66:94:31:03:aa:75:eb:c7:d2:bf:
6d:c4:9c:08:89:11:21:65:8d:f5:26:0f:a4:59:d4:d6:42:8e:
68:8b:42:10:c8:26:10:82:82:e1:5e:9d:57:b9:c3:d8:29:71:
87:91:10:68:55:5c:ec:b3:02:92:26:84:d0:ff:5f:db:04:70:
eb:28:b2:42:7d:e4:2c:83:75:a9:08:7e:72:f2:21:d0:32:5f:
5c:bb:78:61:13:16:03:c2:41:39:7c:cb:7b:f5:02:a7:9c:54:
de:0a:1d:65:96:ad:c0:0b:ab:e9:52:63:bc:bf:f8:30:1d:a5:
e1:be:13:39:92:df:84:ce:9c:37:5b:dd:77:f5:8d:c9:43:71:
b4:56:88:fb:3c:e9:1d:4b:0f:2e:72:b3:0c:94:8e:52:af:0c:
4a:f3:45:1f:94:af:43:18:79:9a:7b:01:29:b5:e9:59:f7:9b:
5d:cf:78:a3:ea:38:7e:74:21:23:ff:2a:91:20:47:ab:2d:d5:
8d:40:fa:a7:d1:60:31:4c:d5:f0:23:a1:ed:4a:29:f9:59:44:
cc:e7:91:da:4f:64:1a:40:ef:20:63:ff:dd:72:60:da:f6:57:
76:f3:0a:62:c5:b2:18:a1:a5:e6:74:6a:1b:62:f5:db:00:74:
d4:25:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:18:47 2026 by rpki-client