Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: ixa/9B5X2hDMt4MXYE+N0k6kqToahiI90Xvb8XDin+g=
Subject key identifier: 3D:00:3C:73:48:7B:30:A6:29:BE:22:29:CD:65:51:19:BE:18:81:A5
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019E9AE0282E759B159483D1A86A574BFEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 05CF
Signing time: Sat 06 Jun 2026 03:00:41 +0000
Manifest this update: Sat 06 Jun 2026 03:00:41 +0000
Manifest next update: Sun 07 Jun 2026 03:00:41 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: CL3zDGpqoH0gFDT9kdsZsxIOhC/0hQdZm+Fu8ilYnhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:e0:28:2e:75:9b:15:94:83:d1:a8:6a:57:4b:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jun 6 03:00:41 2026 GMT
Not After : Jun 7 03:00:41 2026 GMT
Subject: CN=3d003c73487b30a629be2229cd655119be1881a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:c4:c6:e7:21:3d:7a:ab:3e:36:7c:a8:9c:
9d:c2:94:ca:9d:32:bb:2d:4e:73:aa:df:55:56:dd:
c5:99:0e:13:98:c4:12:c1:d2:d5:c0:61:63:23:73:
c8:17:af:f9:4d:0d:21:6e:d8:3e:68:8c:ee:75:41:
29:07:aa:ab:02:1e:9f:7c:55:3d:48:c6:a6:82:54:
74:8b:74:5d:97:65:cb:72:ed:64:8f:65:9b:13:a7:
a3:00:10:b3:1f:e2:e8:23:07:8e:be:84:ed:e0:7c:
5a:46:8b:3e:cd:f8:24:4a:8e:2b:e2:3f:a1:40:84:
30:50:ce:e7:f0:73:97:0d:97:e2:70:c7:38:42:13:
e3:1f:82:e9:2e:a0:40:61:e4:f9:7e:7b:12:00:07:
8e:c9:6a:5a:17:68:1d:71:6b:05:4d:06:ed:c3:78:
f0:3b:97:f0:26:bf:9f:a2:69:7c:17:8e:45:b4:7e:
2f:3d:69:f0:e1:40:c8:52:ff:00:2a:7b:f1:de:d8:
c2:3b:2d:ca:a0:54:37:bb:34:26:38:15:06:da:1e:
ce:fa:4c:bc:c4:8e:13:1c:41:d0:d4:20:18:cb:ec:
be:d9:2e:ea:36:47:7a:2c:f3:a2:80:f0:f7:97:97:
0b:af:b9:86:fe:d7:f8:dd:4f:61:69:4f:8c:d8:d8:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:3C:73:48:7B:30:A6:29:BE:22:29:CD:65:51:19:BE:18:81:A5
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0e:78:1b:19:29:c6:dd:c2:63:30:25:a9:b7:61:41:70:3b:
c4:50:b8:27:ad:9e:8a:60:db:a4:f7:a2:f3:d9:69:03:30:0c:
c9:67:d9:ce:7e:eb:c7:df:e1:1a:1a:37:c9:33:19:e3:91:f7:
b8:3c:1e:f7:bf:df:63:74:90:80:c4:93:69:d9:3a:2b:14:82:
1e:fb:95:7d:88:0c:9b:ea:15:40:49:29:47:1e:42:a5:6d:14:
07:4a:f2:8a:d4:63:a9:49:6a:79:40:27:60:ed:e9:28:a2:98:
84:e5:f1:23:d5:b0:23:01:0c:98:82:20:a0:9c:01:0a:b0:18:
67:95:9e:13:b9:b8:26:60:bd:82:07:e2:9e:43:b6:b3:c7:e5:
36:61:ae:56:88:01:5b:83:a3:db:cc:73:89:65:29:7d:c1:c6:
1e:b3:3d:b2:c1:5b:52:b1:fc:1b:d7:bd:be:95:05:38:e0:82:
5e:5e:24:fd:58:de:17:7d:87:c9:af:c3:81:ce:29:b6:ff:92:
87:55:85:ee:da:65:3e:0a:48:c4:70:8c:46:84:39:01:ef:4a:
cd:7b:9a:85:00:72:b6:a2:8a:88:ce:5f:d1:9c:9d:53:d0:a3:
c2:ec:4a:ad:a2:fa:a6:04:a7:de:05:ab:ff:9f:c9:43:87:9f:
77:b5:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:09 2026 by rpki-client