Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 2CpW8Nue9PIaJxq+uN2/NYgmhLZgMe4LDK5bNkEXoSg=
Subject key identifier: 9A:5A:46:FB:4C:06:1D:7D:BA:61:7A:3D:94:DC:A3:CA:4E:D1:1A:71
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019F18D661B79753BFB9FA8D9491260276D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 14:02:10 +0000
Manifest this update: Tue 30 Jun 2026 14:02:10 +0000
Manifest next update: Wed 01 Jul 2026 14:02:10 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: fd7//j9jl+GeqbWNWcho++LPRmXhgI+Hd1X+ZI6Gi08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:61:b7:97:53:bf:b9:fa:8d:94:91:26:02:76:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jun 30 14:02:10 2026 GMT
Not After : Jul 1 14:02:10 2026 GMT
Subject: CN=9a5a46fb4c061d7dba617a3d94dca3ca4ed11a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:f8:95:bc:0e:fc:8e:8d:9c:17:39:b7:88:
c7:ab:98:e5:cf:06:64:56:d7:bc:52:0c:38:ee:77:
ff:a8:e7:a5:54:42:ff:24:bc:46:df:73:3f:77:ac:
89:78:b3:0d:5a:c0:51:5e:3b:3a:08:5c:f1:77:d3:
f0:5e:45:66:f8:3e:51:39:95:57:51:a6:7d:59:5c:
12:b3:5d:c8:fd:b1:58:79:47:19:63:a3:fb:b1:af:
ae:13:a2:1b:61:10:4d:c5:63:8d:8a:6c:99:48:b5:
58:1c:38:59:be:14:29:f0:01:c7:c8:35:e7:01:6a:
3b:48:8b:21:38:02:59:68:e9:8e:ce:1b:3b:b3:ce:
39:14:98:0d:d7:98:37:27:3b:52:ce:eb:5b:0f:c4:
e0:cd:91:df:c3:ca:68:49:f9:61:f6:e6:62:d9:97:
77:a6:90:f3:ea:b5:17:74:b0:d3:12:ff:77:a7:80:
22:83:5d:ce:8f:ef:19:a7:6a:d0:b9:33:cd:24:47:
66:47:ac:27:8f:c7:c0:0a:4e:68:38:a4:6b:8e:76:
29:22:7b:64:0a:b3:7a:c0:dd:e2:3e:9a:f3:c9:02:
87:b0:f1:ae:7d:b1:ca:21:72:c0:fb:49:64:a1:16:
3d:c4:d0:c4:75:a8:58:23:7f:13:54:07:13:ce:7f:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:46:FB:4C:06:1D:7D:BA:61:7A:3D:94:DC:A3:CA:4E:D1:1A:71
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8d:3b:95:d0:ed:9b:cd:7a:4d:cd:7a:f3:cb:3f:7e:e9:bb:
48:68:69:9f:04:be:23:85:87:84:99:7b:72:d5:6a:77:26:5b:
f6:3b:b1:8b:a5:3e:56:76:98:20:53:0c:e3:cb:67:1b:40:a1:
62:7d:6c:e1:c4:bf:2f:41:a0:09:a8:a5:ce:5d:78:dd:a5:4d:
29:b7:3a:43:ef:bd:db:de:42:b3:31:b2:c2:e7:af:38:d3:36:
57:ac:00:29:b8:f8:e7:e4:2c:b9:71:c4:58:dc:52:97:61:b5:
8b:a5:4c:5b:e3:32:94:70:c1:db:c0:6c:1d:aa:9e:69:b9:e4:
11:6b:17:65:af:6d:27:bb:cf:fc:ed:2d:cf:06:2c:ee:c4:0f:
23:45:58:ab:36:31:11:fc:5c:95:60:cf:4c:c1:94:09:c4:6b:
24:67:81:74:91:26:3c:cc:08:c7:ea:31:25:0b:fe:ee:a8:55:
87:3f:27:95:bc:89:fe:81:48:ee:00:24:dc:81:62:29:de:fb:
61:c9:ed:b5:34:7a:ec:96:f6:d5:1f:1b:1e:c2:68:9a:8b:5e:
92:12:d0:26:20:33:45:54:6c:61:9f:d1:3b:a0:0e:59:a6:42:
c1:e2:68:cb:5b:9a:9b:51:71:3d:5a:d8:de:9a:41:a0:cb:07:
f0:ae:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:31 2026 by rpki-client