Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: nw9s4+vK05UOfvWUuyAUCltp3ok+VKsRayU+bEBDNuM=
Subject key identifier: 33:37:54:2A:71:3A:91:F9:78:8D:99:A7:80:3D:6F:F2:56:71:B0:EB
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 019EB8B4A5ED94F8FDB2F8876332503698E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 14FF
Signing time: Thu 11 Jun 2026 22:01:47 +0000
Manifest this update: Thu 11 Jun 2026 22:01:47 +0000
Manifest next update: Fri 12 Jun 2026 22:01:47 +0000
Files and hashes: 1: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: jTvTAKaEAXusQyVgu/JCwfIMXRUc0SPfW1It0p6DtmA=)
2: xqMEiaPGgAlIQo3TzS_5VB2M2OQ.roa (hash: Y2eUYtTDjf9bWENJZhOD8HXOBzywjtXZMecCETD0P0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:a5:ed:94:f8:fd:b2:f8:87:63:32:50:36:98:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Jun 11 22:01:47 2026 GMT
Not After : Jun 12 22:01:47 2026 GMT
Subject: CN=3337542a713a91f9788d99a7803d6ff25671b0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:5a:92:3e:73:c4:64:92:b2:52:2a:c9:f1:
00:81:1c:cf:de:86:a3:77:fc:01:bd:b7:d1:88:a8:
6f:29:32:6e:ad:92:e4:8d:d3:bc:d3:13:94:35:54:
32:4e:eb:52:9c:f5:5f:8e:b1:47:68:09:5d:9f:a8:
55:b0:fd:d3:6f:9e:cb:4d:4f:f6:7a:87:86:07:42:
9e:58:ce:dc:03:c5:53:93:98:4a:25:6f:6e:7f:f0:
b2:c2:95:15:af:30:86:6d:28:ff:c0:84:98:94:b9:
ba:c0:7f:59:97:37:09:ab:15:48:6d:0a:02:11:dc:
83:cf:95:02:cf:c3:51:fc:ee:b8:16:24:53:42:80:
1e:c7:d4:89:33:92:63:14:f2:11:d1:3b:be:9c:b7:
fd:eb:16:c3:87:67:35:9b:fc:17:79:b4:9a:a1:61:
8e:9f:f8:a7:05:3f:4f:3f:7f:e3:69:8f:ee:0d:45:
4f:9e:e1:f1:cf:55:92:52:a4:f9:1e:07:e7:83:53:
78:7d:91:7c:2d:f9:07:18:33:26:8c:79:29:7f:d8:
26:d0:8b:03:01:03:44:b7:f4:ba:40:99:0c:01:78:
0d:bd:90:dc:7b:4c:4d:20:a5:34:22:25:6b:68:26:
c0:19:1c:de:1b:a5:bd:30:17:fd:cb:8e:fe:05:44:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:54:2A:71:3A:91:F9:78:8D:99:A7:80:3D:6F:F2:56:71:B0:EB
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:17:d7:e8:23:24:6b:e8:63:9e:97:bf:9c:88:bc:28:18:42:
e2:51:23:1c:ce:3b:ee:4a:c7:b6:64:ff:14:dc:f2:05:f5:43:
49:73:36:14:dc:54:9a:73:9e:c5:1d:e1:29:88:98:3c:e5:32:
6c:69:f4:95:a6:67:e3:4b:16:c9:3c:3c:92:a5:59:1d:5b:e4:
06:37:df:27:39:e7:ee:72:a1:41:24:6e:02:09:65:02:fb:6a:
cc:36:af:98:05:e6:16:f3:34:12:db:3e:5b:75:94:67:95:03:
f2:05:62:da:25:43:16:d3:dd:e2:43:86:39:a4:15:d4:93:09:
d5:7d:9d:b1:b5:c6:86:17:aa:8b:43:2c:e0:04:17:82:c3:60:
1c:99:b1:4a:88:c7:fd:f3:5b:18:87:d2:05:4a:37:9b:c8:ac:
ef:a7:8f:70:e2:bf:93:0b:d8:5e:03:28:a9:3e:48:20:98:8e:
91:05:05:8d:bf:00:ec:04:ea:9c:e1:fb:3b:2a:c1:d5:e6:6a:
f3:80:d2:b4:6b:24:ff:40:aa:ef:fb:48:3c:1d:d6:a3:08:a2:
a1:b1:e3:13:b3:23:1d:ec:ea:c5:4d:fc:fb:ca:b4:49:4f:14:
8c:62:26:8e:77:70:84:d5:1b:98:30:9e:22:00:93:af:80:de:
20:c2:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:53 2026 by rpki-client