Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: NT1y09R5ttQfdoaseYncoRlIxprwrlwhW3a/07uMymY=
Subject key identifier: 0C:4A:34:88:B0:32:1F:D3:C4:10:39:26:B8:0B:45:D8:9B:36:E3:48
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019EF2DAD469A2C9903E9BA4EC25BAA18CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1976
Signing time: Tue 23 Jun 2026 05:01:27 +0000
Manifest this update: Tue 23 Jun 2026 05:01:27 +0000
Manifest next update: Wed 24 Jun 2026 05:01:27 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: hoZr0HQptLRQdd1E9Xg50bKKiVaWQ22qYCL6FxZXgXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:da:d4:69:a2:c9:90:3e:9b:a4:ec:25:ba:a1:8c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jun 23 05:01:27 2026 GMT
Not After : Jun 24 05:01:27 2026 GMT
Subject: CN=0c4a3488b0321fd3c4103926b80b45d89b36e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:e2:2b:9c:f3:2b:bf:e4:5e:12:74:64:33:
50:23:36:ca:fb:03:bb:20:10:5f:31:eb:1f:22:bd:
8f:c0:e7:f4:94:2b:c0:ad:10:ea:c2:46:04:dc:8a:
1d:13:88:63:a4:52:de:a9:80:e8:09:69:34:ea:a2:
cc:0c:dd:e6:3c:85:65:60:fe:a1:b2:1c:89:74:07:
c8:04:a4:73:3d:f3:2b:8a:50:6b:00:b3:0c:8c:f1:
29:23:0b:84:df:08:21:ec:87:46:10:1f:22:84:8e:
17:92:d8:fd:dc:1d:ee:3d:cc:a5:d5:70:b0:3f:89:
43:19:aa:7e:50:2c:01:44:4c:d7:75:be:4c:c0:a9:
25:80:c5:c6:3d:a6:1d:d6:3c:33:db:7c:26:91:4d:
c9:d7:d1:21:67:44:2a:37:0f:3b:51:3e:5b:58:ee:
01:55:ac:f2:72:24:b6:99:b7:a3:89:48:fb:dc:e8:
f2:32:a8:1c:55:e9:b3:de:67:88:0b:70:30:45:cd:
e2:cd:e5:f8:16:07:2c:36:eb:33:47:b1:a9:e1:4e:
c6:0f:83:86:52:fc:ae:e3:59:57:ba:48:f9:bf:54:
84:37:e0:63:7b:81:74:ce:15:67:22:66:64:c5:ed:
82:aa:09:21:f9:35:31:2f:e2:c4:fc:1d:80:84:45:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:34:88:B0:32:1F:D3:C4:10:39:26:B8:0B:45:D8:9B:36:E3:48
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bf:f7:06:d8:19:6d:89:05:e3:51:09:cd:bd:58:40:1b:bd:
d1:b9:52:c6:f3:56:9b:9a:d6:3b:05:ba:35:21:93:12:26:bd:
79:ba:5f:f8:e7:18:13:0d:8b:3a:1f:4e:59:68:96:f0:81:54:
62:0b:d6:ef:73:80:4b:bc:24:c7:4b:64:7b:e0:ab:14:86:f8:
42:47:12:ac:bd:6b:e3:74:36:0d:80:a1:2c:6d:2b:24:db:2c:
da:22:23:f5:02:1a:88:b4:03:04:c7:9d:7b:d4:1f:20:f5:75:
e1:ec:b1:8d:40:0d:4d:17:b2:de:8b:7d:33:ab:aa:f7:f2:d4:
c8:6f:25:0e:03:24:d8:eb:7d:96:46:f2:f7:65:72:0d:b9:13:
8b:fc:05:6e:71:9b:16:5a:9d:24:ce:dc:80:77:78:c9:13:56:
7d:bd:f1:44:ae:f8:a1:63:e6:2c:e8:ee:4c:f9:44:a5:f5:99:
4e:fd:ab:d3:95:b0:03:4d:48:c8:c8:ce:26:0a:f8:db:89:9c:
dd:64:f0:0f:55:83:be:86:0d:e6:6b:b7:e1:4e:b0:d0:0b:71:
c1:bf:22:14:b3:08:1e:63:9e:90:78:29:c3:5d:0d:f3:34:a9:
18:a8:32:79:a3:9a:f8:12:3d:13:55:92:1d:37:e6:dd:8f:5a:
32:df:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 10:58:19 2026 by rpki-client