Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: T/z+Tvjn9b5sZsuLXZuDBukqIltlk121uojFi1S9eYc=
Subject key identifier: A8:AC:37:95:18:DC:D9:CC:E7:28:39:65:7D:3D:92:42:7B:EB:43:AA
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019F18D63A10B36FE7587E17F776798F13CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:02:00 +0000
Manifest this update: Tue 30 Jun 2026 14:02:00 +0000
Manifest next update: Wed 01 Jul 2026 14:02:00 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: zxm76Ni74fYxzOK+xc2y0BYnii8FIWeBM4tWg2pkvCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:3a:10:b3:6f:e7:58:7e:17:f7:76:79:8f:13:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jun 30 14:02:00 2026 GMT
Not After : Jul 1 14:02:00 2026 GMT
Subject: CN=a8ac379518dcd9cce72839657d3d92427beb43aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:a9:3d:fb:b9:ae:49:03:2f:1d:8f:49:91:
37:aa:16:65:a2:40:51:ae:a3:e0:f1:71:f2:50:99:
0a:99:83:0f:8f:f4:b4:bc:da:56:b6:8c:07:39:e3:
ca:50:79:51:81:1f:dd:a8:84:52:5e:01:2a:f5:a0:
96:9b:14:85:ba:05:63:a6:b0:b8:ab:d7:c3:c6:74:
0a:f2:1f:f4:73:49:c6:cf:c3:5a:2f:fc:62:1d:cd:
e3:7b:26:60:d1:6b:b9:76:45:a9:88:76:78:54:09:
f7:44:5d:04:16:2e:51:4c:a4:38:d1:63:0e:e8:d2:
50:05:61:bc:fe:cb:f0:30:9b:df:dd:f2:52:48:a6:
98:c4:5f:93:1d:19:04:99:bd:25:74:59:16:8b:af:
63:61:87:54:b2:58:05:45:09:71:24:44:f6:f2:52:
dd:c7:1e:4a:35:57:fd:06:09:3c:c3:26:83:c5:77:
f8:b1:28:5c:c6:67:26:22:45:ee:6d:3b:c3:c8:2c:
2a:94:ec:5d:fb:53:07:19:82:53:f5:c1:0c:7c:85:
96:7b:0c:28:5f:3f:cc:bf:7d:8a:c6:e1:83:28:3b:
b4:57:06:b2:63:01:a8:7c:74:99:4a:f0:a0:c0:17:
76:ab:cb:5a:8b:06:d5:8a:37:58:b2:cf:ed:2a:8e:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AC:37:95:18:DC:D9:CC:E7:28:39:65:7D:3D:92:42:7B:EB:43:AA
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:70:ae:a2:01:67:e3:02:4a:9e:0f:e6:d1:ec:61:da:f2:
29:56:99:dd:de:5d:72:06:1b:4a:f8:c6:36:20:c8:0e:36:db:
27:4c:4b:4c:1e:0a:57:64:a7:4b:4a:76:f8:91:72:4b:ec:c5:
22:10:b6:91:c9:66:8b:8b:a2:71:b8:5e:f8:a2:23:b9:28:30:
27:d5:08:d8:6b:8f:f9:f7:a6:f7:93:81:3e:52:fb:5f:b9:90:
4c:dd:78:77:f8:e8:ec:fb:25:4b:f1:ad:63:e1:e4:1c:4c:c9:
03:1b:e4:0e:5f:33:c2:93:d0:99:f7:50:6b:3b:7a:ca:a3:fb:
a7:33:d7:65:b5:f8:9c:f1:98:99:b9:88:1e:a6:24:75:04:40:
5d:3c:96:82:3c:9c:c7:a9:89:50:36:60:54:1b:ab:28:8a:8d:
99:af:7f:60:cd:93:cb:50:a5:3e:cf:e6:74:1c:3b:4e:f0:75:
3a:20:51:55:1a:fe:9b:79:31:1c:23:66:e8:c8:6e:38:c2:9a:
b1:3c:84:ee:4d:22:36:5a:4c:de:b0:0d:d7:0c:62:38:a2:9a:
54:5f:a7:cc:5e:86:ac:85:4e:e8:ed:ac:d4:68:02:c7:78:74:
a0:8e:a7:6f:b2:cc:6c:86:d8:72:b0:48:4e:68:34:98:87:a1:
4a:2c:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:36 2026 by rpki-client