Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: LtjPJ2nRL/vS9jpwtWxWlY5jqTLYC7FXvg7Or9zTNMo=
Subject key identifier: FC:47:2D:2C:7A:76:1F:B2:CA:5D:80:3A:FE:CA:82:66:39:8E:ED:E9
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019EB6207CCA02530760B8AFD89CA19616DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 126A
Signing time: Thu 11 Jun 2026 10:00:42 +0000
Manifest this update: Thu 11 Jun 2026 10:00:42 +0000
Manifest next update: Fri 12 Jun 2026 10:00:42 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: K9JAmfGE9kF+/JQCV2jYY8OLIePaJBpDqw5YIrZh9Cs=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:7c:ca:02:53:07:60:b8:af:d8:9c:a1:96:16:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jun 11 10:00:42 2026 GMT
Not After : Jun 12 10:00:42 2026 GMT
Subject: CN=fc472d2c7a761fb2ca5d803afeca8266398eede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:2d:8e:ca:97:0d:15:c7:70:56:6c:13:ef:
d9:0e:91:61:27:0b:6f:5a:1a:5d:26:5d:73:51:28:
ee:13:09:e9:4e:94:69:0b:f9:83:1b:12:c9:ff:64:
9b:08:1f:3b:4f:ee:65:fc:06:60:b5:4e:44:85:48:
26:4f:24:4e:bc:46:06:e1:fc:44:6a:40:e3:82:dd:
83:a3:8f:f4:23:e4:ba:32:29:64:1d:f7:fe:89:0a:
3a:f1:08:d8:2e:e1:68:0a:16:51:23:11:2c:f7:fe:
23:be:80:58:2a:82:e5:6b:19:95:31:6c:1d:1a:38:
0a:9a:71:aa:d6:d9:59:d1:3d:e4:46:e5:c6:cf:8b:
68:c6:ce:b6:5b:c2:cc:ef:2b:78:1c:58:08:73:c9:
10:a3:45:f8:15:fa:a5:aa:7b:3b:1c:2d:4d:15:be:
e8:15:5a:b1:c3:78:0a:be:5f:23:ac:4e:77:e3:bb:
dc:25:71:ed:04:ff:6c:d5:53:cc:43:a0:08:f7:93:
d7:75:cc:b7:b8:ff:ec:26:f5:05:52:5c:04:7b:e7:
e3:9c:7a:09:6e:6f:36:72:ad:5e:0b:ff:ff:62:c3:
2a:21:cc:4b:3d:8d:70:b4:8c:09:67:67:9b:08:90:
09:28:71:af:ac:7e:c0:91:4e:b1:39:24:1f:92:51:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:2D:2C:7A:76:1F:B2:CA:5D:80:3A:FE:CA:82:66:39:8E:ED:E9
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:de:33:84:6e:7e:0b:3e:09:94:3d:ec:37:35:70:27:d6:
e7:04:8c:4d:47:8c:7f:a9:75:9f:f9:8a:3a:9b:73:9a:63:f9:
14:7e:b5:b8:47:f2:ec:ad:ee:ea:fc:96:b0:e4:67:a7:28:2c:
87:77:e8:f9:91:bd:d5:1c:c7:5b:01:2a:d1:29:eb:44:2f:47:
40:63:11:c9:cb:37:c5:9a:4f:b5:c9:4c:03:82:b4:62:83:44:
51:02:0d:30:67:f0:dc:fa:ec:23:07:cc:af:a4:e6:5c:3f:d2:
ba:0f:37:cf:95:09:fe:2e:5c:00:64:51:37:87:71:34:67:38:
ad:cf:86:ce:e8:6c:2a:b4:54:29:cf:a4:09:99:0b:fe:ae:24:
90:46:1b:4d:cb:15:3f:a5:6b:44:07:b6:10:7f:1a:8a:71:10:
dd:24:b0:be:a0:4a:7f:d9:77:18:ca:14:04:da:e5:61:e9:2a:
f8:26:ba:5b:e6:ab:0b:b7:09:a6:17:60:06:1f:d4:c2:38:9d:
c1:5e:28:f4:b2:11:a0:df:5c:ec:c6:6a:f3:71:f1:89:b9:54:
8c:b6:e4:1c:3d:0d:0f:90:90:df:25:e9:4a:82:77:fc:db:a0:
ac:2d:c2:22:f6:f6:df:97:d9:6e:33:b6:83:ea:93:67:1e:5c:
43:69:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:08:05 2026 by rpki-client