Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: IWnYTRbmizBDUbT2u5iPXqv2mOClhWHNuWBQ+rXGsNw=
Subject key identifier: 1E:59:3C:28:49:76:15:0A:EA:9C:BF:56:71:22:12:72:00:C0:67:76
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019F1377B9961CA8F071F9AE16CBE86C6BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 13:00:41 +0000
Manifest this update: Mon 29 Jun 2026 13:00:41 +0000
Manifest next update: Tue 30 Jun 2026 13:00:41 +0000
Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: OsxcaL2DSp6tB5mB+nW6baLYvAUhK4gdpX4HmwBkTNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:b9:96:1c:a8:f0:71:f9:ae:16:cb:e8:6c:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jun 29 13:00:41 2026 GMT
Not After : Jun 30 13:00:41 2026 GMT
Subject: CN=1e593c284976150aea9cbf567122127200c06776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:c2:c3:ae:d5:55:23:ca:7d:9c:53:8a:c2:
cd:80:a6:c0:f4:07:72:8d:85:24:d4:88:0a:f8:fa:
b0:48:78:65:95:49:bc:b1:95:42:e9:4d:d1:c1:20:
4e:49:21:d9:9b:55:f8:65:3f:f8:67:4c:c1:12:f0:
6d:d8:49:a3:72:94:8c:57:57:39:25:06:09:52:47:
23:48:1b:4f:16:1f:04:57:7f:53:35:ed:4d:8b:41:
c1:86:26:34:e5:dd:56:4d:0e:f2:bd:fd:19:c8:60:
a9:86:d3:7d:8a:7f:fc:fc:f9:77:ff:aa:31:95:a2:
64:04:f4:fa:f1:bc:a0:7c:13:f2:8c:64:36:10:07:
05:26:26:6c:ab:5e:1c:4c:79:4b:f9:dd:34:51:f1:
a6:2e:74:fe:79:ed:6e:cd:db:9a:75:1c:42:34:df:
79:bb:91:d1:48:b6:e0:52:3b:b5:59:08:90:2a:4a:
41:fd:39:fc:ce:e5:c2:07:42:dd:a9:d8:7c:4a:7c:
7f:2b:53:99:2b:66:a1:72:8e:c7:32:0b:95:67:59:
7a:15:89:9c:6b:a9:45:ce:cc:54:85:d6:7f:f3:4c:
b7:0f:f4:a6:c4:fa:3f:fd:32:a7:2f:d4:43:71:ae:
4a:11:c9:8e:bd:6e:0e:44:97:05:32:d5:c3:f7:82:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:3C:28:49:76:15:0A:EA:9C:BF:56:71:22:12:72:00:C0:67:76
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:71:8e:9b:10:1d:83:65:25:69:22:da:4f:1a:9e:82:4a:
73:97:48:0e:be:6d:a4:10:50:5a:62:c7:95:b5:81:cb:d3:97:
af:0a:4f:70:d5:0f:26:55:64:48:50:e4:f9:8e:f4:4e:ff:28:
bd:eb:e7:34:55:1f:57:5e:cd:09:bd:6c:5d:57:7d:f6:e6:a2:
3f:f9:4f:90:50:e1:58:7d:9e:b7:1f:5a:e3:d4:0f:10:f7:4d:
7f:7c:90:6f:36:72:ba:8e:ad:5f:59:b4:07:6b:8a:2a:ab:d9:
02:99:e5:02:03:7b:77:88:fa:ad:9f:ca:a9:6d:f8:cb:1b:74:
8b:23:1e:f8:76:9f:38:4e:00:7a:ce:ea:2e:ac:24:7d:b0:31:
03:d3:ea:59:c6:de:bd:7b:7f:cb:d0:31:e6:f9:55:94:08:e7:
60:18:4d:85:a3:ec:3c:f1:ba:e2:ca:12:75:a3:6d:66:e6:45:
56:2d:f5:4f:d5:51:4f:14:5e:56:3b:a5:c8:9e:bb:42:ba:b3:
7e:47:d8:9a:4e:98:e0:f1:e3:ab:39:b0:5d:f3:c6:72:b0:3a:
84:7d:28:b1:35:c0:93:49:60:50:7d:d9:08:1d:5d:a4:2c:6b:
42:1d:3b:76:88:45:bb:f0:5f:a7:1d:70:52:7f:ee:63:d7:5c:
0c:96:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:38:13 2026 by rpki-client