Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: 7qubFAJcLaCx6ucweFZ+8644deK+++Qg6oRfkVTaruM=
Subject key identifier: E1:B1:84:79:62:E9:15:98:B0:18:69:15:17:B0:65:6B:B0:5E:34:B6
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 019EB6FBC31F6F8C196A77AE4F3AB95F1A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 14:00:13 +0000
Manifest this update: Thu 11 Jun 2026 14:00:13 +0000
Manifest next update: Fri 12 Jun 2026 14:00:13 +0000
Files and hashes: 1: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: 2GjsOjkxIf97TA1oLVCVtFDKyrDvReScEipckONyxQk=)
2: dVMqcvXursPYfDYSCDAE4DhRFlc.roa (hash: Yq3X9779TMJZn56pp7FdF+bqg71vRgvQymxrtb6IBFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:c3:1f:6f:8c:19:6a:77:ae:4f:3a:b9:5f:1a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Jun 11 14:00:13 2026 GMT
Not After : Jun 12 14:00:13 2026 GMT
Subject: CN=e1b1847962e91598b018691517b0656bb05e34b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:98:12:48:82:d9:9d:30:e4:cc:84:6a:78:
6e:af:ab:84:dd:3b:45:de:22:38:7f:b0:43:3b:ac:
dc:6e:a5:d1:ef:dd:fd:a8:46:32:82:17:7b:69:1c:
0f:fb:b4:5e:8f:e3:b2:c5:62:5d:f3:aa:58:0d:d5:
d8:ec:d2:b1:c1:21:df:0f:60:0d:10:32:54:66:cb:
57:26:35:13:40:02:8e:53:58:2e:47:2e:5c:75:67:
a9:7d:f6:a9:a6:6c:df:3b:e6:90:57:9f:3c:29:3c:
79:77:ed:d4:99:6d:af:c5:99:7e:9d:5f:6a:16:04:
82:71:15:c7:31:1d:69:b3:1b:47:e4:be:ec:e1:34:
32:35:6f:60:4e:16:bc:78:73:34:ac:63:6a:39:86:
68:4b:0e:82:3f:ed:c2:a2:e3:6b:d8:e4:7c:12:c8:
82:10:16:8a:96:06:ca:f5:1c:39:7f:0d:45:db:80:
3a:5c:3e:70:35:54:cc:d2:85:10:c5:73:61:54:0f:
b4:13:69:0c:67:61:dc:f2:80:85:69:41:84:a8:0a:
9c:98:50:34:46:a7:12:fa:c7:93:5f:bc:bc:4d:44:
e7:f9:4e:79:8f:01:97:c0:20:dd:f2:da:a2:6a:8d:
75:71:7a:12:81:13:bd:5b:4e:5d:0c:4c:f0:7c:d5:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:84:79:62:E9:15:98:B0:18:69:15:17:B0:65:6B:B0:5E:34:B6
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:89:38:21:c1:70:cf:b4:9a:fc:43:b9:6b:f7:c3:64:62:
79:7d:48:e1:8b:a0:a6:6a:57:ff:27:3c:e5:a9:77:58:5f:5c:
ac:14:e5:46:56:99:22:ef:ac:17:02:32:10:01:26:cf:c3:39:
8f:a7:a5:49:a1:b2:1b:d9:0b:fc:36:65:e4:5b:10:4e:c5:27:
62:68:ed:f4:1a:86:69:0c:90:94:98:d0:a4:e6:8d:ee:83:f8:
a7:ee:3e:f5:aa:8e:51:e0:1b:3e:59:e2:b6:d9:63:1c:37:02:
91:de:d5:05:49:a3:ee:72:d9:ea:25:a2:48:2c:58:36:4c:25:
30:25:4c:e6:22:b7:e5:49:69:8e:2a:17:3a:3f:d8:69:78:d0:
b3:5f:27:f6:72:c6:7d:14:04:d3:fb:5b:18:31:06:0d:28:e6:
aa:0c:da:03:6d:c5:1d:e9:8e:54:ee:06:2e:6e:34:85:04:e8:
c8:b4:a8:e4:6b:19:0b:d0:c9:c2:eb:0a:3e:0f:97:eb:84:fb:
69:6a:99:cc:54:c9:62:86:35:81:bf:77:b9:a5:9a:91:a1:d7:
9d:01:12:c1:11:6d:bb:95:77:2a:54:03:9c:67:08:8c:64:74:
2b:fc:2f:24:55:93:b6:77:97:28:d6:7f:de:2d:99:50:57:85:
5e:71:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:45 2026 by rpki-client