Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: qhZY+vyPuqypfShF535JCRZLkdCtJbcupHKAC9uE20o=
Subject key identifier: 69:C6:37:58:27:52:F0:1F:25:37:FB:08:34:7D:78:72:66:BA:8E:E6
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019F130ADC134361FCD064F7CE07CF220000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 13D7
Signing time: Mon 29 Jun 2026 11:01:46 +0000
Manifest this update: Mon 29 Jun 2026 11:01:46 +0000
Manifest next update: Tue 30 Jun 2026 11:01:46 +0000
Files and hashes: 1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
2: AZAVETW5nGbM4Ib7koJRmOOqy04.asa (hash: iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=)
3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: KLR8OTdbdpB5rYSd5AeRdpEcgkDLwmiqRSvbxz4N2YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:dc:13:43:61:fc:d0:64:f7:ce:07:cf:22:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jun 29 11:01:46 2026 GMT
Not After : Jun 30 11:01:46 2026 GMT
Subject: CN=69c637582752f01f2537fb08347d787266ba8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:dc:ba:07:26:9d:4e:0c:df:17:d0:3a:ac:
d4:30:84:0a:4a:a7:93:06:a4:5e:51:fd:61:31:5e:
15:bf:96:14:bd:29:d5:d2:13:c4:3b:8d:50:4f:2c:
08:44:d5:6d:66:54:7b:60:3f:cb:fc:c4:e5:1b:b4:
25:fc:92:46:1f:03:ae:4f:5c:59:94:22:6d:44:2f:
6b:a9:4a:dd:19:f5:24:bc:d5:7a:01:ae:18:f9:ca:
f2:c2:a9:ec:63:47:0e:68:83:bc:54:33:6a:73:82:
79:e0:22:52:ae:42:fc:a8:56:6d:ca:ef:f1:31:da:
ef:b1:f9:ac:d4:30:59:8c:14:04:3e:af:da:c4:47:
a2:1e:3f:7d:6d:38:b2:63:5e:2c:88:64:9c:b4:7c:
5b:09:3f:43:24:8c:e2:1d:63:1a:49:75:ca:94:a9:
6a:07:74:10:fd:1b:aa:2e:0d:70:4f:39:71:0c:57:
50:d5:d4:cf:70:75:2c:c8:f4:53:68:08:66:ea:ce:
64:b4:28:e4:8f:c0:ea:1e:58:dd:2d:bc:81:b4:1e:
9e:3a:56:db:aa:45:1d:d8:9c:77:1a:52:d4:27:b4:
18:a5:bf:64:74:8c:a8:57:f9:fe:a9:ee:47:6b:ef:
38:31:a9:8d:a1:30:85:75:54:5d:86:34:0f:5d:cd:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:37:58:27:52:F0:1F:25:37:FB:08:34:7D:78:72:66:BA:8E:E6
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6d:5d:d6:1a:87:93:68:bf:23:50:90:08:ed:af:58:92:21:
af:5b:20:9b:e4:52:04:bc:c4:dd:0a:d7:30:66:68:d0:f6:2c:
58:e3:ca:15:31:4e:27:c3:3a:cf:44:7b:0e:60:c7:f6:e5:25:
db:2d:bf:4a:fc:f2:12:f6:1a:8c:b2:6c:51:7b:ab:a1:c1:43:
8c:66:90:8b:cd:33:57:ef:24:54:05:6c:d3:d1:63:c9:0f:79:
fd:35:7b:af:18:74:97:91:ff:d7:fe:e1:45:cd:df:a1:ba:f4:
6d:02:f7:1c:d7:4e:47:e6:9d:dd:e0:aa:bd:99:28:65:87:43:
e9:82:10:3e:51:8e:65:87:01:f0:ab:bb:0e:11:6d:8d:38:95:
7d:4a:86:2a:90:5b:aa:53:e0:03:86:df:a8:4c:3a:b1:2b:bd:
ed:63:15:13:bf:21:b2:27:58:31:ea:2b:1e:1f:69:b4:5c:cd:
03:bc:b9:f7:50:7b:d9:c3:12:9f:c9:d9:83:4e:59:bc:66:6f:
fe:db:4a:31:60:89:e0:b4:dc:53:3b:be:2b:d5:42:eb:6d:f7:
9e:14:45:2f:23:3e:b6:13:01:c7:86:03:9b:e5:05:57:e6:42:
d7:64:a4:fa:78:ac:74:47:72:c4:1f:7c:d2:3e:85:5c:2b:60:
ca:a9:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:30:32 2026 by rpki-client