Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: 86rAPAPigIse9CLlhA3CfOHR9CVrIoq5+fkJsrVheo0=
Subject key identifier: 08:8C:CE:00:97:6A:D8:40:C9:F1:B7:4C:0D:11:14:74:20:AB:E1:30
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019EB7D834D56B298B7A260CD36959A7B262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0B1A
Signing time: Thu 11 Jun 2026 18:01:00 +0000
Manifest this update: Thu 11 Jun 2026 18:01:00 +0000
Manifest next update: Fri 12 Jun 2026 18:01:00 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: JhRldKhvir65utsl+hEbNE1NgS+XJYU8Lw4J538mKwU=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:34:d5:6b:29:8b:7a:26:0c:d3:69:59:a7:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jun 11 18:01:00 2026 GMT
Not After : Jun 12 18:01:00 2026 GMT
Subject: CN=088cce00976ad840c9f1b74c0d11147420abe130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:43:56:0c:43:cc:6b:40:2a:24:8e:6a:69:
b2:ca:40:47:71:4a:1f:7e:9e:8b:18:e6:5a:77:0f:
08:ee:77:5a:f1:63:ee:6b:13:fb:01:c9:07:54:7f:
53:8d:4d:03:eb:b2:c5:91:9d:30:cb:8c:d4:6b:c7:
53:df:d9:4d:f5:7e:b8:5f:ba:f7:11:ba:ee:48:99:
00:86:c6:31:0a:98:36:cd:45:97:40:88:46:55:f5:
f4:3a:05:1b:6f:54:2a:67:d6:c8:0b:a5:5e:24:04:
a7:1e:3e:78:b2:8b:2c:85:6e:79:e5:85:9b:15:c0:
01:17:e1:bc:0f:cb:b7:7d:88:4f:ea:62:e9:9f:31:
8b:8a:33:6d:90:78:42:7d:e5:2d:03:6a:52:83:1f:
79:37:51:4d:e6:2b:1b:0a:4f:21:56:d4:92:44:fc:
95:77:d3:be:d5:0c:2f:17:8d:06:c0:c9:21:d8:43:
6d:fb:a8:e7:83:8a:97:c4:25:5f:56:62:02:a1:60:
e4:64:e9:88:a5:30:d2:70:23:ec:ea:ff:28:1f:9f:
dc:45:7b:71:ed:0c:74:70:73:32:0a:a7:f3:69:c0:
65:2f:c5:d3:bd:42:78:a3:15:98:d1:90:63:d1:be:
6d:fc:88:93:a4:3f:c8:e5:ea:9b:ba:ed:8a:bf:a2:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:CE:00:97:6A:D8:40:C9:F1:B7:4C:0D:11:14:74:20:AB:E1:30
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:be:61:c1:32:0d:59:65:b5:fb:ef:90:c7:68:a2:3d:6d:13:
66:33:df:ae:e4:c0:6b:46:e0:db:d0:ae:8f:90:dc:87:87:3e:
c1:bf:31:46:0b:08:9c:a3:da:12:a5:fd:74:29:91:a9:52:dd:
67:a2:a0:f9:c5:f7:a0:d8:eb:5a:13:9c:e6:5c:5a:5a:19:35:
e5:c7:4c:11:4f:90:d4:b9:0e:3d:a6:c7:58:cf:40:e2:47:00:
b0:3a:36:db:a5:bf:46:f9:40:b5:41:2a:46:f2:76:eb:10:ae:
7d:da:74:ae:47:40:77:ad:f8:08:f3:ed:ac:f5:dd:6e:09:e7:
2f:0e:56:3a:eb:34:13:5c:a2:63:c6:8b:44:d0:28:13:b6:80:
cf:56:2c:d3:9c:f7:46:ab:a5:e8:2f:bd:1c:ea:fc:54:db:e2:
a0:91:97:cb:d9:7a:da:39:ec:a9:89:a3:b5:62:55:35:c9:f0:
56:18:7d:75:56:c8:52:03:b6:bf:37:e1:dc:27:69:56:ee:d0:
a9:4f:9d:79:59:9c:29:c7:0d:9d:51:7f:ed:a2:d8:76:e7:06:
6f:d5:90:2e:e3:6f:70:ff:9e:20:c0:ec:b5:3d:e2:1b:c3:a6:
5a:0b:4b:7f:87:d6:53:c8:67:22:85:6e:a0:34:fc:4e:3a:73:
c6:54:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:14 2026 by rpki-client