Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: vs0nfBqe8uOUiqFhXeDBNV/gp0cO5F7hfqWHTxU5Z1M=
Subject key identifier: 5C:3E:3A:FE:3E:D6:9F:12:10:28:32:E2:02:63:91:4D:50:17:0D:69
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 019EB80E7193ADC71EE0A8266463853523AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 19:00:14 +0000
Manifest this update: Thu 11 Jun 2026 19:00:14 +0000
Manifest next update: Fri 12 Jun 2026 19:00:14 +0000
Files and hashes: 1: k4W9beDnEX8J9xZWZPSwEeOlv6o.roa (hash: TjAwypyiA3bieTIcPBxF1m7fjkxNuFzLWUD66RasjmA=)
2: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: dmCJLImk0zwzLIybPJK5IC3/uUqurj7QfM9m26aU4VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:71:93:ad:c7:1e:e0:a8:26:64:63:85:35:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jun 11 19:00:14 2026 GMT
Not After : Jun 12 19:00:14 2026 GMT
Subject: CN=5c3e3afe3ed69f12102832e20263914d50170d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:7f:e9:24:09:62:e8:c7:22:97:01:be:7e:
77:bd:76:b5:66:c2:e4:2f:a1:c9:79:aa:b1:9d:c7:
da:6a:d6:15:56:0d:08:66:cf:f5:77:3d:c9:e2:8f:
0e:17:2a:49:49:c5:dc:4d:1b:30:eb:cc:b1:c5:64:
69:c0:6d:1d:28:83:7d:8f:d5:27:f0:11:3c:78:e2:
aa:68:9b:9f:3f:c0:9c:b5:8b:1d:71:9d:06:e1:0e:
2f:ce:f3:2d:cf:27:8f:46:9b:87:e6:68:01:de:7c:
b4:c9:68:e4:34:f0:ee:7b:cc:31:55:95:f6:63:ee:
3e:42:44:3d:25:7f:65:f4:81:54:80:00:a9:97:11:
59:21:12:11:d4:e2:2e:d3:2d:ad:90:cc:99:04:af:
9a:20:37:92:1c:68:88:78:ac:ad:38:38:63:1a:19:
b4:7f:46:c9:81:70:4f:e7:b8:d0:7b:a8:0c:b1:26:
d8:02:16:37:5a:78:a9:8c:57:16:e8:04:51:1d:34:
f7:a0:b4:90:1c:24:30:1a:9d:94:2c:55:fc:86:8e:
3b:f1:5b:19:76:2f:5a:43:75:70:db:3d:d3:bb:f4:
42:c5:bd:05:39:7b:8b:14:38:dd:fc:5c:9d:6f:7e:
be:6f:28:bf:7f:61:49:0e:10:70:3b:dd:45:88:af:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:3A:FE:3E:D6:9F:12:10:28:32:E2:02:63:91:4D:50:17:0D:69
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9b:44:c4:41:19:f2:87:c2:9d:f1:88:fb:90:0a:e8:d0:12:
07:a0:a4:5c:aa:02:ab:fd:29:fc:bd:bb:4e:fb:cb:ed:21:05:
08:08:e8:69:d0:55:f6:0b:7e:3c:28:0a:8c:66:47:35:66:2d:
14:9b:be:28:5f:4c:09:d5:d3:f6:b0:a1:72:7b:5e:d2:20:d5:
4f:5a:1b:d8:df:06:a0:96:cd:81:f0:34:7e:c0:c5:97:8c:92:
20:6f:c0:74:db:35:55:82:13:f0:be:46:49:03:4c:8e:1c:d0:
48:09:b9:7b:8b:41:19:66:8e:e7:9c:64:ca:53:9b:97:b6:fa:
7d:93:16:4f:2f:b2:e1:35:17:5f:f3:ec:bc:6f:30:8b:54:2e:
98:59:23:0b:ea:3e:01:32:b3:6d:03:b8:45:d1:0c:ef:aa:a4:
03:cd:87:7a:e8:22:23:7f:50:18:77:24:f7:ac:aa:b5:6f:eb:
1e:f7:69:38:9d:74:21:a3:f3:11:b3:10:15:55:5a:e9:e7:f0:
90:2f:55:82:01:11:6a:f7:8c:99:40:8d:81:98:7d:27:e9:ba:
1e:aa:be:be:d4:aa:5d:be:b2:13:d3:4d:63:15:f7:33:74:4c:
c3:e8:11:1a:fb:45:48:57:cf:b4:e9:d2:96:e2:9d:61:79:90:
a3:d3:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:22 2026 by rpki-client