Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: TIUUggA1YY3Ur9o0cV/e4ad1lpGErjIYpv2r6ek9F7Y=
Subject key identifier: 4D:54:35:2C:3C:F4:2E:FB:0D:B5:21:EE:7E:C6:D3:BE:92:D9:70:82
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019EFCB9BD71D6508CFD119CFFB7DFF1A3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1979
Signing time: Thu 25 Jun 2026 03:01:31 +0000
Manifest this update: Thu 25 Jun 2026 03:01:31 +0000
Manifest next update: Fri 26 Jun 2026 03:01:31 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: wbZI8Wkt0Gkte1lUPhpK9RVMlMGaWrhWLrWx3lWxOQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:bd:71:d6:50:8c:fd:11:9c:ff:b7:df:f1:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jun 25 03:01:31 2026 GMT
Not After : Jun 26 03:01:31 2026 GMT
Subject: CN=4d54352c3cf42efb0db521ee7ec6d3be92d97082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:20:f4:bd:66:86:1b:e0:1a:c7:59:29:bc:
9a:fa:cd:e4:b4:fb:cb:5e:ce:32:fd:71:6e:a7:4b:
d7:3e:c2:98:48:70:4c:3b:82:9f:01:fa:e9:00:03:
65:eb:4a:2c:02:bc:df:2d:74:39:15:d9:8c:80:07:
97:6b:50:8c:78:ef:85:93:b9:9f:5a:6b:13:93:51:
e9:25:96:5f:fe:52:e8:96:48:91:e7:bc:ed:60:a3:
bd:22:43:8b:48:32:09:84:28:4d:ed:a8:e2:7f:fe:
9e:43:dd:3b:ff:fe:52:d5:15:5b:7c:01:a0:b0:c3:
40:3e:f7:2c:ab:4c:82:9b:e1:86:1d:d5:8a:c3:0b:
8a:ea:9d:43:aa:b0:c8:0f:98:b5:e1:60:e1:1d:af:
46:77:39:46:7d:73:3d:4a:49:a1:a1:83:27:9c:f2:
f0:38:58:cc:fc:03:cc:12:a9:39:e5:d1:f1:5d:17:
d0:65:de:28:b1:92:b9:a5:f6:06:a2:0e:3a:62:40:
4b:90:79:3c:1c:13:bf:c9:03:0a:8b:95:cb:88:3a:
2d:38:56:c7:26:41:a8:64:d0:90:03:16:42:1d:97:
dd:99:3c:9d:78:12:b9:f4:8d:d4:cc:85:3a:f0:57:
37:6c:42:b4:60:91:41:9c:73:61:8e:8d:4b:c1:cf:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:35:2C:3C:F4:2E:FB:0D:B5:21:EE:7E:C6:D3:BE:92:D9:70:82
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:13:b5:34:f0:f9:dd:67:e6:c1:59:a6:03:f7:f8:89:e6:
a4:55:bf:80:99:4a:12:0d:25:92:c6:af:35:45:16:69:88:6b:
a8:45:80:75:8a:15:54:af:28:89:bb:c9:05:11:d9:3a:f3:8a:
74:2a:16:05:41:28:a6:61:95:b2:22:c5:a6:cb:29:62:18:5d:
90:66:34:8e:f5:8b:6e:b6:54:07:c2:16:45:97:cf:2a:cc:de:
ec:4c:e7:8b:ac:7e:d8:3d:db:e5:ed:5c:59:73:93:49:b8:6c:
80:d6:75:4f:d9:b2:ae:87:60:10:fb:c3:f1:f8:0a:3d:40:ef:
7c:49:d3:c6:c9:a3:c0:c0:c2:97:f1:3e:bf:8a:71:2d:9d:76:
fe:3c:42:44:6a:33:c5:47:53:a2:8a:fb:a5:52:e1:a7:e4:11:
b5:25:25:2e:33:00:71:34:be:03:7d:0c:49:94:89:3e:0a:bf:
cc:97:e5:7f:50:8e:7f:13:2d:df:e7:92:b4:a2:59:e9:73:11:
59:61:1e:cd:08:67:c0:8a:9b:70:9d:d1:0c:4d:df:83:22:0d:
16:ab:2c:49:e5:b1:01:b4:ca:d9:a5:1f:fc:94:15:b2:fd:28:
4c:fe:e1:24:10:66:b6:8c:10:1d:90:b1:c4:3f:95:b5:fc:aa:
8a:86:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:56:14 2026 by rpki-client