Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: onA3YST43HE3G21OW/ypAXfDUyiwhSIF2zzpSCQMgUM=
Subject key identifier: 33:BC:12:2B:DA:A7:4D:52:1F:96:E9:AD:13:FE:90:9F:CF:D4:AF:7B
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019E30A9C09E33098A2EB4CCB7FFA6B91B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1972
Signing time: Sat 16 May 2026 12:01:31 +0000
Manifest this update: Sat 16 May 2026 12:01:31 +0000
Manifest next update: Sun 17 May 2026 12:01:31 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: gcIXTLSag1c+RNbzkXEC5t5EFEACz323SaR7/HOodf0=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:c0:9e:33:09:8a:2e:b4:cc:b7:ff:a6:b9:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: May 16 12:01:31 2026 GMT
Not After : May 17 12:01:31 2026 GMT
Subject: CN=33bc122bdaa74d521f96e9ad13fe909fcfd4af7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:26:98:e3:e9:05:31:5e:7f:1d:9f:fe:ed:
5c:fc:c0:c9:b3:f2:92:ec:0a:d4:04:61:f5:2a:0d:
98:76:d0:f1:34:02:fd:ee:53:77:05:18:ae:28:b3:
3e:50:78:ee:36:05:2e:3e:36:32:62:d0:3b:c7:68:
28:f1:73:94:c7:c0:c4:70:fd:a9:41:34:ee:72:ce:
5e:0f:30:12:40:ba:d7:9d:ae:1d:7a:ab:57:66:7f:
eb:74:42:f7:f5:a9:42:b8:a1:c1:5f:ea:2b:85:51:
a9:86:ae:c7:9c:c4:43:8c:75:91:50:8c:bb:2f:2d:
f9:c6:10:db:d2:bc:28:4d:c2:7e:e1:3a:dc:df:88:
f3:6c:12:9e:54:c1:e3:cf:ba:07:88:d5:54:0c:98:
49:ee:9f:74:27:fa:32:fd:f3:c3:d2:05:13:38:f4:
8f:c7:77:37:12:3c:97:7c:18:6c:81:c7:fc:f4:95:
66:91:1c:44:d8:f5:bb:99:b9:de:46:34:32:e7:17:
64:7f:3b:ef:21:89:d2:c7:ae:92:1f:50:75:76:77:
58:03:d1:af:3d:c8:d5:eb:f6:0f:91:57:b1:a4:36:
3f:45:53:76:da:44:ec:68:40:59:bc:d8:8c:6a:d4:
03:0a:0e:f5:1d:4a:3e:c2:59:77:b0:55:d5:cd:71:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:12:2B:DA:A7:4D:52:1F:96:E9:AD:13:FE:90:9F:CF:D4:AF:7B
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ef:26:ef:4a:03:d3:0b:1b:25:e8:93:15:00:5f:2b:17:6e:
e7:81:66:51:e5:29:17:f6:84:aa:c4:a1:5c:b6:e7:3f:91:aa:
88:0a:bf:77:05:74:04:ba:ab:e8:cd:5d:16:17:b2:91:80:c0:
e9:dd:42:42:84:15:ff:57:17:8a:f9:b8:3f:d3:07:83:84:40:
66:6d:d7:9c:97:d1:f6:9c:1d:40:54:41:94:66:67:a1:f6:fb:
9d:f9:2d:8b:31:93:ab:5e:aa:73:89:27:5d:b1:40:3e:e3:2b:
ed:65:be:c6:9f:17:24:a4:66:0d:5b:a1:b8:55:4b:66:28:7b:
c8:d5:0a:55:28:1b:d3:b1:fe:ce:49:25:e4:cb:9a:cb:8e:cd:
3d:83:8e:5d:1c:7b:4f:c1:44:3a:81:6c:31:20:e5:6c:f6:ac:
95:67:fd:dd:ba:2b:10:1b:aa:2e:9d:2c:12:18:39:68:8f:dc:
e1:51:4f:c7:ca:dd:5a:71:63:63:cb:8e:0b:6b:06:75:84:51:
62:98:3e:d7:94:56:5f:e2:48:af:16:df:1b:14:bb:38:d0:85:
a7:3c:bd:b7:bd:d4:df:18:d9:52:5a:ee:1d:e2:75:6f:d2:0e:
92:34:9a:04:2a:ae:80:b3:bd:1a:a6:b1:1e:51:89:88:f2:a4:
6b:e9:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:30 2026 by rpki-client