Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: ew6wV8G8Xlxe1EmIUWQ76XyfX5E+mYRM59gqaKyseY4=
Subject key identifier: 02:7D:A8:43:03:DD:BA:E8:69:20:1B:D7:4C:A4:8C:56:5C:41:AC:E6
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019EB8EAD9F2EDDBCD9F8E0ECBB972B93F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 0339
Signing time: Thu 11 Jun 2026 23:00:59 +0000
Manifest this update: Thu 11 Jun 2026 23:00:59 +0000
Manifest next update: Fri 12 Jun 2026 23:00:59 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: R+orD3Oi8Su/rWVZQuuIjfQg/SxsqYh49o8HLLD3dMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:d9:f2:ed:db:cd:9f:8e:0e:cb:b9:72:b9:3f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Jun 11 23:00:59 2026 GMT
Not After : Jun 12 23:00:59 2026 GMT
Subject: CN=027da84303ddbae869201bd74ca48c565c41ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:05:62:cc:cf:a1:1a:85:cb:c7:76:8c:df:
28:b7:9c:15:08:99:76:af:0e:90:c2:db:57:47:e2:
e2:9c:9c:e8:bd:82:9f:e0:b3:20:e5:47:8d:0f:eb:
e6:3c:f3:c6:97:07:38:7d:a5:77:20:86:ee:27:eb:
ae:e1:01:94:a9:50:3c:5f:74:04:7e:ef:07:90:67:
13:f0:2b:00:e8:ef:81:45:00:c8:1f:2d:a9:e4:a8:
ca:9e:42:32:06:19:e3:fc:53:9d:ec:62:02:3c:ea:
dc:c7:67:4b:9e:06:0e:33:1f:5f:76:ed:95:bb:cc:
b0:fa:42:71:21:39:3d:5f:73:d6:af:72:ad:62:a5:
07:ef:47:db:0d:7b:95:8e:f8:70:0e:1f:09:e5:1d:
5d:d6:03:6f:fa:2f:37:1e:aa:33:a1:55:b9:76:8f:
8c:e6:c5:5e:17:3f:bf:84:27:73:a1:c5:b9:55:99:
8d:e9:4c:07:57:f4:86:90:20:23:02:40:4e:ae:af:
12:78:52:8e:6b:01:d6:b6:d2:02:f7:7a:31:18:3c:
4b:b0:64:87:ad:bb:77:80:f3:f6:37:b1:12:13:11:
11:8d:80:fe:60:0d:08:5e:6b:f1:6b:6d:d6:05:60:
66:eb:54:8e:43:d5:65:b8:73:89:a4:38:1c:9a:20:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:A8:43:03:DD:BA:E8:69:20:1B:D7:4C:A4:8C:56:5C:41:AC:E6
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:29:8a:d3:02:14:c3:08:69:dc:e8:bf:70:a6:cb:a1:6b:18:
bf:85:b9:a9:3c:85:8a:71:95:00:6b:19:78:72:94:9c:46:a7:
60:eb:ae:f8:b9:35:07:37:33:51:78:0c:c6:22:86:e9:71:1d:
9c:d1:d3:1b:e9:11:85:53:0b:fa:4f:6b:4a:32:1e:ce:40:ff:
fc:89:dd:21:05:71:de:7a:f1:15:7e:e8:fe:e0:e1:27:d6:06:
ee:e2:de:dd:bb:ce:94:c8:b4:b5:87:09:19:38:5b:5d:79:02:
ee:03:be:50:21:f0:25:d1:3b:80:ad:82:79:63:b0:8c:1f:ce:
b1:6a:2b:d7:6a:9f:39:be:a2:c7:69:e3:7f:c3:97:42:2d:f3:
62:6b:77:67:3a:89:c2:4a:e7:b9:dd:8b:30:03:e4:19:12:5b:
fa:99:25:bd:6c:0c:7b:ee:53:d9:c6:96:7e:91:09:30:89:5f:
11:e1:85:c3:21:90:bf:80:af:6a:54:b7:89:78:94:19:1a:81:
da:81:62:70:b6:4e:2e:4d:e0:19:46:86:74:fb:98:d2:47:50:
a4:b7:47:e2:b5:55:4a:26:00:2e:dc:71:80:16:94:1e:76:30:
4e:f5:2e:de:88:37:2b:07:37:aa:e0:bc:9d:47:b7:50:a0:17:
16:4f:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:14:59 2026 by rpki-client