Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: 3yXnNYwfE6R24njLbqL8Bxzvgjsb9VW5bxi85CThJNs=
Subject key identifier: D0:41:13:05:1F:ED:1C:3B:30:DF:42:85:27:C7:76:2C:B8:78:54:25
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019E9C2A2255D96A137266F29AD9BA70D296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 10D0
Signing time: Sat 06 Jun 2026 09:01:07 +0000
Manifest this update: Sat 06 Jun 2026 09:01:07 +0000
Manifest next update: Sun 07 Jun 2026 09:01:07 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: Am3kg0XOFyPOQX8IjaWNZ3/bgYgzGcz1sUCh7zYOVS4=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:2a:22:55:d9:6a:13:72:66:f2:9a:d9:ba:70:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jun 6 09:01:07 2026 GMT
Not After : Jun 7 09:01:07 2026 GMT
Subject: CN=d04113051fed1c3b30df428527c7762cb8785425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:c4:00:02:19:53:93:ca:e9:46:ac:bb:36:
63:d3:04:4c:cd:e1:73:4f:c3:e3:f8:3b:3e:74:f7:
2c:ed:60:f3:bd:bb:28:b7:7f:28:79:c8:a1:b5:ba:
ae:7a:0f:9d:9e:1d:a6:61:e7:34:97:19:30:b4:00:
26:57:a6:83:e9:16:92:e3:a3:f3:51:26:45:d5:bf:
c5:85:d3:c0:36:31:31:34:8a:04:da:b1:16:08:5c:
56:c6:dc:fe:99:e6:a5:12:ee:3b:3d:46:66:68:ef:
fd:f4:0d:9f:53:8c:6c:b3:47:f3:38:52:a2:a0:ef:
7e:c0:c0:be:9a:d3:d9:6e:2e:3a:a2:81:39:b8:d8:
8b:b4:4b:a0:36:49:f9:40:cf:7f:65:18:b2:6d:4b:
61:71:e8:fd:ba:31:42:99:d4:1c:0f:08:d8:17:da:
e2:93:77:51:a9:87:e5:9f:05:0b:d5:81:a5:44:13:
c4:6b:08:35:dd:b9:7e:5e:6f:3a:75:25:6d:10:07:
3e:e7:8c:68:47:a4:1c:b4:22:55:b8:85:5b:bb:9f:
1c:7d:b8:22:65:8d:37:b4:4f:23:d8:62:ea:be:42:
50:f4:96:4f:1e:09:c2:8f:5c:4a:f3:76:5e:f4:39:
b8:ed:6c:19:59:91:28:07:a5:c5:9f:1a:7e:91:af:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:13:05:1F:ED:1C:3B:30:DF:42:85:27:C7:76:2C:B8:78:54:25
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c7:c6:fe:80:74:a8:df:2e:ab:f9:7d:6d:d1:5d:b8:33:8a:
41:48:9e:65:0a:d6:f0:5b:53:4e:25:93:bc:fa:c6:1f:71:4b:
3a:11:73:51:98:bc:03:32:e4:fc:45:7b:fd:50:47:63:d2:5a:
7c:1a:04:21:a2:c4:7c:8f:5a:04:34:c5:2d:45:7a:62:f1:61:
95:8a:68:58:b4:7d:25:48:81:ec:72:26:7b:16:44:2a:e0:8a:
97:e8:4c:a1:ac:b5:4b:56:41:3a:86:58:d4:1a:ef:dd:82:dc:
3c:e2:f9:c3:24:45:c0:40:95:ff:8a:8f:0b:0b:7f:33:39:9a:
03:1f:b7:84:91:29:49:a8:e6:5b:da:45:07:ba:84:d1:6a:2b:
de:99:e4:b5:d8:55:79:7c:fa:93:70:5d:72:7a:a3:2e:dd:c3:
79:c7:24:1c:78:76:c7:bd:80:f5:cc:8f:e5:1e:74:28:cf:d4:
fb:a5:78:d9:34:fc:2b:5a:c5:bc:68:ea:58:ab:9c:e3:58:02:
38:af:51:da:43:ef:1c:84:45:2a:ca:40:1c:99:3c:41:1d:26:
04:f3:86:db:f4:be:2e:d4:6a:7d:e9:11:d6:f7:88:96:72:06:
39:b1:64:21:fe:fe:66:8a:89:18:d2:3c:51:da:dc:a1:e1:ef:
48:17:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:06:29 2026 by rpki-client