
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: OtDk1POK1ghbVZZzYJsLMK30964TUTbtLMeRki2GFCQ=
Subject key identifier: F1:D3:36:F2:4B:67:FF:2B:E4:57:A5:E8:DA:1F:BD:EE:48:2A:C8:E4
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 019E3FE640B9B29C35E1A85C110E408C0489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 1929
Signing time: Tue 19 May 2026 11:01:54 +0000
Manifest this update: Tue 19 May 2026 11:01:54 +0000
Manifest next update: Wed 20 May 2026 11:01:54 +0000
Files and hashes: 1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
2: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
3: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: w+azaaAhQqcCaY+n5ttPTZu60u0jSEF5puhrvOX/yKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e6:40:b9:b2:9c:35:e1:a8:5c:11:0e:40:8c:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: May 19 11:01:54 2026 GMT
Not After : May 20 11:01:54 2026 GMT
Subject: CN=f1d336f24b67ff2be457a5e8da1fbdee482ac8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:c7:c2:ec:b2:e7:fa:70:78:5d:50:36:d8:
ba:8b:15:47:e0:ac:e5:d3:de:95:8c:fa:c4:e6:a9:
7b:b5:ea:ef:0f:5b:6f:0e:a0:c8:64:d4:df:78:2a:
0f:b5:5e:a6:e8:dd:b2:54:10:ad:b5:cd:15:f2:0c:
94:25:1d:10:c5:87:63:33:5a:cb:a6:95:95:fc:8a:
f1:a1:85:5c:68:d5:37:4c:81:33:c4:71:54:8c:61:
f4:13:05:6b:ee:a7:43:63:56:23:fc:60:39:18:bb:
1e:bd:e4:9b:73:d1:ef:3f:ea:56:05:ff:d3:12:6a:
e4:8a:6c:5d:d3:fe:79:da:fb:a7:5f:41:d8:a8:88:
21:09:bb:f7:91:ae:51:f4:2c:e1:70:8e:13:a9:bd:
58:5e:7c:8d:74:e2:95:d7:9c:db:f8:3c:59:9d:66:
18:f0:85:f3:88:62:49:a0:24:7e:64:93:c9:25:8d:
ec:63:bf:08:9b:e9:a3:56:6c:53:f8:71:52:b9:f4:
45:ad:2d:88:6c:05:92:e3:5a:11:fe:ec:ec:cf:34:
0e:ab:0c:74:e0:07:7f:5f:4e:dd:e1:96:36:0d:ab:
54:29:49:e1:9d:a6:af:f2:4e:de:c0:15:86:c4:29:
e1:ce:52:0a:5c:fc:91:6b:d4:4b:54:9e:15:f4:41:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:36:F2:4B:67:FF:2B:E4:57:A5:E8:DA:1F:BD:EE:48:2A:C8:E4
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e6:46:de:a0:89:f3:37:7b:66:82:3c:3a:ed:ee:d3:7c:3d:
49:e1:ee:57:48:39:a3:cf:bd:46:b9:cb:cb:0e:8e:14:96:6f:
1b:6b:a3:a8:1c:bd:36:c7:1b:65:55:05:d5:61:2d:2c:3d:86:
33:c7:a9:a4:97:b3:a8:b8:44:e8:f2:ea:a9:90:fd:52:0d:ea:
02:5a:25:a3:7f:16:0f:1a:59:20:5d:f1:34:88:d8:90:f3:c8:
0d:74:74:7c:9e:84:45:84:e7:f5:9a:c3:5a:82:80:2b:62:e6:
71:7d:75:4b:ae:51:4a:df:66:5e:80:81:83:90:00:2b:12:da:
44:44:cf:bc:be:2c:df:cf:e0:16:e6:4e:1c:a0:37:9d:b1:e1:
ae:8a:ff:c7:c4:2b:7a:c0:9d:90:01:7a:99:68:ce:6f:47:fc:
ff:75:b7:64:ba:02:19:84:59:bc:25:9d:30:7f:b6:2e:6c:c8:
7b:6d:2d:27:eb:fb:6c:f8:5f:15:4d:29:bc:bd:d3:66:ce:34:
c1:33:e8:4b:1a:d5:4d:20:72:f4:76:8d:dc:92:aa:12:40:9d:
72:64:24:7e:24:7f:37:c6:53:49:0d:d1:e7:13:7b:41:21:57:
1d:cf:4d:78:77:1d:5b:ac:40:12:2d:32:dd:9f:8d:d3:92:88:
49:40:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:03 2026 by rpki-client