
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: ahEZIrUQzSCPD3Ib2KZSMu7h3Yn+5J3PeIfn/qP3Bf8=
Subject key identifier: 44:58:C9:E8:A9:9E:1A:2E:70:07:76:01:9F:34:CE:AE:5E:6D:EC:5A
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019EFB3AE08000A9C19DE5C073252BA50090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1979
Signing time: Wed 24 Jun 2026 20:03:20 +0000
Manifest this update: Wed 24 Jun 2026 20:03:20 +0000
Manifest next update: Thu 25 Jun 2026 20:03:20 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 76nJ22j4JadFnvdn50pr1MRmQ29bFwaGZyKuCnfA8tc=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:3a:e0:80:00:a9:c1:9d:e5:c0:73:25:2b:a5:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jun 24 20:03:20 2026 GMT
Not After : Jun 25 20:03:20 2026 GMT
Subject: CN=4458c9e8a99e1a2e700776019f34ceae5e6dec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:11:9b:5d:0c:4d:5d:e6:b5:0c:aa:92:ab:
68:cb:ac:62:91:2b:85:4f:1a:95:95:e4:af:e8:ec:
b4:19:94:e2:ba:4f:1c:55:63:ec:e7:61:f6:e5:43:
28:d4:39:13:45:f2:09:3e:a0:6f:20:d7:89:80:f8:
30:27:df:02:dc:f8:45:a1:b5:25:59:73:e9:a7:ca:
50:bc:7c:ce:c4:a3:33:80:5c:89:ea:44:42:8d:af:
75:d4:61:63:38:08:32:68:a7:0b:08:f6:47:98:4e:
38:46:21:dc:91:44:bd:a8:2c:50:0f:c8:bf:12:9c:
dc:b3:67:be:23:1e:95:dd:f0:9f:a5:d0:9b:30:0a:
0f:5e:16:5b:9e:2e:a5:30:2f:97:c5:36:6c:37:4a:
46:7d:b5:6a:b7:55:1f:b8:08:ad:3c:ea:14:91:cc:
60:23:ac:94:46:2f:d8:17:06:0f:1b:24:52:c1:7a:
10:1f:13:07:bc:5f:9f:3a:0c:9e:9d:ba:ea:29:a7:
c9:6b:63:99:70:4a:6d:08:24:2c:3c:de:39:93:a3:
bb:d1:44:36:e1:5e:23:dd:b9:17:7a:fb:8f:1e:51:
fe:c2:6d:61:55:88:43:85:f9:ec:84:e7:53:47:03:
42:16:79:4c:08:c7:f8:98:3d:c2:b7:61:95:f3:d2:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:C9:E8:A9:9E:1A:2E:70:07:76:01:9F:34:CE:AE:5E:6D:EC:5A
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:8e:8e:67:29:f1:e0:70:06:b9:46:1c:be:20:c5:65:34:
6a:8a:6c:b5:ba:55:24:82:07:13:4a:0c:a6:de:4e:78:77:4b:
3e:ac:e0:a2:5a:15:c6:62:68:d9:08:a2:85:57:a7:3a:d9:92:
44:19:c9:f7:f7:4d:57:35:c5:99:17:8a:01:de:5e:31:d7:bb:
c4:64:00:e0:66:78:cd:c7:cc:02:f1:d5:18:19:d7:17:42:d5:
72:cc:4a:80:b0:b3:1c:ba:68:f9:50:59:18:d8:23:be:87:4c:
00:b5:c3:43:84:59:4c:15:86:a0:76:c2:9f:3d:fe:2f:fd:dd:
61:c5:1c:96:97:7e:64:96:9e:c3:e5:2b:ce:00:3f:30:3b:0d:
6e:18:38:8a:3d:7c:d0:3a:1d:74:85:e7:dc:5c:da:0e:a8:a4:
49:0e:2a:ae:0d:ac:5b:1a:2d:de:4e:3c:a6:93:bb:e8:86:1c:
b9:7e:54:1a:10:b9:6c:76:7d:b5:69:25:78:cb:60:d3:78:9f:
23:8b:db:4c:ff:c0:41:ca:50:98:c2:b7:24:93:86:08:b1:b6:
78:0d:35:1e:46:99:74:05:e0:b0:7d:ab:99:15:a8:b4:af:62:
bb:86:8b:51:21:94:c2:17:a0:34:51:c7:21:75:dd:10:55:92:
c8:10:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:21:53 2026 by rpki-client