Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: dDGC4Bo6A1wNMjKJWwUaqcOTsrVMfHe3aUD9YHCXU3k=
Subject key identifier: 63:FC:D0:C8:E5:B8:2A:20:B4:8F:E3:28:A5:1A:70:C1:82:B6:A7:3A
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 019EC1123E699FF74862B9E5392D86DC0366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 13:00:58 +0000
Manifest this update: Sat 13 Jun 2026 13:00:58 +0000
Manifest next update: Sun 14 Jun 2026 13:00:58 +0000
Files and hashes: 1: V1HErl2JVbjT136XwGDVBe5B8q0.roa (hash: 0IOhqRYRA3j3IZg7O69Z3jrw0I2aO88PvmtQESn76TE=)
2: sRhSOvBT50pEAGhy38eEzssMMhA.roa (hash: QbFSrZ3TjWQdjeS28WmLKPudQlt94pkB4tDP467+qjg=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: +ksd8IX001ybuZh63r/itjgzpbz5iB1pF5YjSIlY4jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:3e:69:9f:f7:48:62:b9:e5:39:2d:86:dc:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Jun 13 13:00:58 2026 GMT
Not After : Jun 14 13:00:58 2026 GMT
Subject: CN=63fcd0c8e5b82a20b48fe328a51a70c182b6a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:6e:53:75:c2:c8:56:d2:76:65:37:9d:12:
f2:4b:e0:62:79:74:8c:3c:18:e5:6b:84:69:fd:19:
27:d1:97:37:61:86:0b:7f:a4:25:21:b8:9c:91:d7:
99:ac:33:aa:60:68:7e:b5:c4:a6:cc:9d:a6:19:4a:
81:d5:64:0d:4c:ef:bf:02:9a:1b:10:2f:15:e3:fd:
2e:1e:32:14:fa:c3:fc:c6:d3:17:f4:42:a1:f8:86:
43:93:42:ff:9a:b5:a5:a8:c1:14:92:ad:56:61:e3:
e7:f8:48:b2:e3:5b:80:9a:f2:ce:f9:8d:a9:50:4c:
9f:2f:f3:bf:5c:b2:b5:8f:0a:21:19:66:c1:4a:6e:
ca:f1:3a:e8:e5:dd:12:fd:f5:05:cf:f5:8b:5f:63:
b7:01:62:81:5a:5a:df:9b:d2:51:c0:16:49:c3:be:
68:e3:85:dd:93:18:04:30:26:ae:ac:04:ff:c2:95:
26:1d:5b:be:9c:09:29:7e:da:17:91:6c:38:44:0e:
b1:14:5c:35:89:ba:32:4d:e9:76:57:2c:f2:38:48:
d7:fb:b0:74:da:b0:fc:44:15:7d:72:11:df:19:66:
1b:c2:77:60:65:98:2f:aa:f4:a1:ee:9c:2f:4f:f0:
5f:14:90:1a:fe:03:fd:0c:49:e5:38:c4:93:a6:3f:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:D0:C8:E5:B8:2A:20:B4:8F:E3:28:A5:1A:70:C1:82:B6:A7:3A
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a5:cd:82:75:b1:02:15:0a:7e:a9:aa:c8:ac:ba:f4:e1:2d:
bd:9f:e2:52:41:c4:97:6f:4c:47:a7:2d:2c:ec:7e:cb:79:f3:
6c:01:49:77:1b:63:48:56:07:de:10:bd:d8:b6:c4:22:73:51:
ee:f5:46:ee:75:82:1f:d2:66:28:53:59:15:78:6f:53:e1:b9:
8a:1e:fb:cd:de:41:ac:90:90:79:a3:74:c0:ff:2f:70:0c:c9:
51:d9:9c:e0:a8:a7:09:46:da:e3:f3:a9:57:90:7c:b9:6d:58:
85:14:6b:61:71:c7:e2:9c:84:c5:83:cd:bc:88:47:cf:d4:3b:
5e:a1:cd:3e:0c:33:da:44:ed:77:b4:82:ea:df:53:4b:0c:f5:
b6:38:13:97:42:7d:72:2a:0c:bc:41:57:8a:7a:2c:ac:a6:80:
c1:6d:2e:83:e0:9d:96:b8:64:3e:e7:b7:39:a9:da:8c:c2:09:
93:ea:1f:81:95:4d:e0:c2:49:2a:dd:1e:7d:11:76:7b:96:93:
e5:e0:2f:26:21:17:10:05:e4:45:74:1b:1c:48:66:71:e2:4e:
10:3f:d9:b0:01:29:7d:f8:6d:20:ea:94:98:d9:23:0e:1a:9b:
92:49:8e:5a:d8:97:d4:25:c7:28:86:1f:94:d0:a2:f8:84:8b:
18:11:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:57 2026 by rpki-client