Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: aTUizFSjsXrPIWqtmdsPYz1u/f99QxjktedsvWxitig=
Subject key identifier: 02:94:DA:32:D6:AE:B9:7E:7D:5E:B9:E8:80:20:73:F0:65:AA:0F:B0
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 019F11F797880BD02EAF623CEAABCC08EB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0B1F
Signing time: Mon 29 Jun 2026 06:01:06 +0000
Manifest this update: Mon 29 Jun 2026 06:01:06 +0000
Manifest next update: Tue 30 Jun 2026 06:01:06 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: hzGNdkraFVij2Ld8qfys08s7MTBTvq6WuOMZsm1fsKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:97:88:0b:d0:2e:af:62:3c:ea:ab:cc:08:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Jun 29 06:01:06 2026 GMT
Not After : Jun 30 06:01:06 2026 GMT
Subject: CN=0294da32d6aeb97e7d5eb9e8802073f065aa0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:06:b9:32:d3:68:fd:30:9c:2d:88:75:ea:
05:c6:fb:c9:e0:c4:42:7a:b3:7a:c7:68:e5:22:38:
70:de:a4:bb:df:45:69:d9:26:39:a7:ff:76:ca:22:
19:8f:b0:63:a5:e3:27:96:38:a7:ad:0a:6f:7b:73:
05:62:1c:ff:13:e0:04:80:cc:ad:c2:69:55:7c:86:
90:06:fa:c2:1e:3c:bf:10:a8:28:9f:fd:34:d4:b0:
a9:1b:af:3c:59:2f:9e:92:a4:ef:5a:2c:f9:60:e1:
1f:40:2a:21:a2:3f:8e:a3:02:48:f4:a3:f4:17:fd:
ae:18:6c:e2:f9:fe:d4:ec:47:8e:b6:dc:e7:33:7d:
ff:71:b6:fd:9f:c3:5d:65:7d:49:c3:7a:e0:c9:71:
57:7a:45:84:be:fd:97:35:28:37:32:1c:f3:24:96:
2c:a9:45:ae:6a:dd:83:63:1b:6e:d9:c1:d7:77:3f:
0d:23:3b:07:98:30:4e:1a:28:03:50:ba:55:75:26:
61:a6:03:f6:7f:f9:e1:de:61:a8:60:8c:fd:bc:32:
2e:11:3d:c3:63:61:72:3f:77:10:6b:1a:7b:61:d8:
97:47:ac:76:19:9d:65:9c:96:bd:04:b2:fa:2b:56:
e0:8a:72:46:a3:ae:ad:46:a0:e9:a2:f7:7a:0c:a8:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:DA:32:D6:AE:B9:7E:7D:5E:B9:E8:80:20:73:F0:65:AA:0F:B0
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:47:85:86:24:60:80:b3:cb:bf:3e:cf:17:d0:b9:a0:58:
45:9c:aa:13:7d:7f:59:97:62:7e:73:e6:46:02:1d:2f:29:79:
e4:75:b7:00:97:3d:17:88:ed:a8:72:2c:f1:66:73:22:b6:42:
be:55:1c:99:7e:c3:38:5c:4c:5a:af:09:61:c9:1f:d9:5a:f1:
1b:f9:19:4a:de:d5:dc:9d:13:44:7e:25:cb:9f:a7:78:b4:a0:
77:b6:06:3f:c9:0a:73:16:41:3a:f5:73:c6:45:7c:3a:4e:d5:
bb:cc:c6:ee:1c:96:6f:0c:d0:b8:23:4a:57:79:61:81:27:3c:
ef:c5:04:d9:60:14:47:a5:8f:0b:03:db:fb:df:0a:1e:71:1a:
68:9f:1b:de:40:1d:b3:09:68:f2:8f:55:02:de:73:1b:6d:a6:
2e:d0:43:fb:96:9f:cd:29:4a:02:c7:23:32:b6:8d:9b:79:68:
bf:2f:fd:0f:61:ea:be:21:42:3e:16:b5:9a:f1:eb:6d:82:65:
fd:1b:82:4a:35:fd:00:eb:f4:bb:48:32:06:36:5d:96:39:1d:
9a:0f:dc:3c:1f:20:88:fd:23:1f:fa:01:07:c9:a4:db:a5:00:
8f:ac:f0:a9:eb:e7:9e:70:db:9d:98:14:4f:45:cc:cf:31:87:
e7:96:2e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R95eIC9Aur2I86qvMCOseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5
YjM5NmEwHhcNMjYwNjI5MDYwMTA2WhcNMjYwNjMwMDYwMTA2WjAzMTEwLwYDVQQD
EygwMjk0ZGEzMmQ2YWViOTdlN2Q1ZWI5ZTg4MDIwNzNmMDY1YWEwZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FsGuTLTaP0wnC2IdeoFxvvJ4MRC
erN6x2jlIjhw3qS730Vp2SY5p/92yiIZj7BjpeMnljinrQpve3MFYhz/E+AEgMyt
wmlVfIaQBvrCHjy/EKgon/001LCpG688WS+ekqTvWiz5YOEfQCohoj+OowJI9KP0
F/2uGGzi+f7U7EeOttznM33/cbb9n8NdZX1Jw3rgyXFXekWEvv2XNSg3MhzzJJYs
qUWuat2DYxtu2cHXdz8NIzsHmDBOGigDULpVdSZhpgP2f/nh3mGoYIz9vDIuET3D
Y2FyP3cQaxp7YdiXR6x2GZ1lnJa9BLL6K1bginJGo66tRqDpovd6DKiomQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKU2jLWrrl+fV656IAgc/Blqg+wMB8GA1UdIwQY
MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt
MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm
LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5BHhYYk
YICzy78+zxfQuaBYRZyqE31/WZdifnPmRgIdLyl55HW3AJc9F4jtqHIs8WZzIrZC
vlUcmX7DOFxMWq8JYckf2VrxG/kZSt7V3J0TRH4ly5+neLSgd7YGP8kKcxZBOvVz
xkV8Ok7Vu8zG7hyWbwzQuCNKV3lhgSc878UE2WAUR6WPCwPb+98KHnEaaJ8b3kAd
swlo8o9VAt5zG22mLtBD+5afzSlKAscjMraNm3lovy/9D2HqviFCPha1mvHrbYJl
/RuCSjX9AOv0u0gyBjZdljkdmg/cPB8giP0jH/oBB8mk26UAj6zwqevnnnDbnZgU
T0XMzzGH55Yuuw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:10 2026 by rpki-client