Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: oNvUOEAyf9vDpKJ8Nb+z0SkehBj/LhxEcRjf4uWc7jU=
Subject key identifier: 0E:68:24:0F:59:13:66:94:EE:29:54:55:72:B3:9E:E6:56:AD:36:71
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019EC18019E7F4228A06E1DAA4805C6E0FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 15:00:58 +0000
Manifest this update: Sat 13 Jun 2026 15:00:58 +0000
Manifest next update: Sun 14 Jun 2026 15:00:58 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: MjbjQ/9ebiGiaP3cuqfEkO1hVzvKPbTQ4wv94pDG5NE=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:19:e7:f4:22:8a:06:e1:da:a4:80:5c:6e:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jun 13 15:00:58 2026 GMT
Not After : Jun 14 15:00:58 2026 GMT
Subject: CN=0e68240f59136694ee29545572b39ee656ad3671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:5c:13:54:8e:58:08:c7:d2:4c:2a:99:25:
a1:f3:f7:77:f9:f6:e2:df:19:a7:6f:df:fb:ae:8f:
2c:96:5a:a0:c1:48:10:31:c1:a9:e4:d5:da:74:3f:
7d:ae:3f:73:4a:9e:4d:be:47:71:c7:de:00:04:a2:
7d:8d:37:df:84:91:ec:03:7b:3c:9d:e0:4e:af:66:
70:4e:fe:3f:2f:6f:43:b2:90:79:73:b7:2c:2e:40:
6f:3d:c2:f1:e0:c8:3e:d8:01:b7:24:29:1f:66:2d:
e4:19:a6:5d:45:2c:79:f4:41:ad:00:8a:07:61:a9:
f4:b3:97:c2:c5:6d:d0:aa:93:b4:30:6e:ed:71:27:
2f:d3:86:4e:b6:0c:04:4b:0b:bc:72:cf:5c:02:91:
3f:59:fe:84:e1:2a:33:63:fe:ff:9a:ad:24:5f:bd:
45:99:df:2f:2e:04:16:ba:98:0b:0d:a2:93:3b:44:
50:88:b2:f1:88:60:d0:2a:9d:a2:19:c8:17:28:65:
e1:78:ed:b9:32:84:3e:d2:74:ac:62:64:40:89:bb:
13:4e:61:43:57:25:17:37:97:d6:96:50:0c:b4:df:
6b:09:1f:62:7a:01:a9:0a:4d:b6:2b:00:d5:6e:10:
5b:56:e3:22:91:bf:ab:cc:b7:95:a2:0e:9d:94:20:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:24:0F:59:13:66:94:EE:29:54:55:72:B3:9E:E6:56:AD:36:71
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:40:ab:0a:f6:c4:19:e8:b9:cf:0f:e1:ba:88:8c:60:8f:
dc:d7:85:fe:f2:71:64:1d:28:53:36:35:7e:db:48:d9:99:8f:
6b:d6:e0:36:a7:0e:47:29:2b:33:f4:8b:dd:d6:85:fa:cd:b1:
ce:c9:95:8d:a0:2d:ee:0b:d2:b7:68:78:ff:79:99:ff:63:e7:
03:c7:63:6d:37:05:59:43:ec:2e:a3:17:09:0c:04:40:e4:bb:
d0:9b:18:3d:98:e7:1b:4f:c9:aa:b8:e6:c1:b3:aa:44:86:62:
4c:45:98:ba:dc:4c:16:0b:50:2c:31:e0:d3:5f:f6:23:9b:b3:
84:59:58:ad:1f:4c:d8:f2:d1:bf:34:58:d0:b8:10:71:56:ce:
ef:84:bb:82:b5:eb:d5:32:76:5b:36:d9:04:83:46:f9:c0:59:
e7:0c:86:5f:ba:fe:f5:03:2d:09:21:99:41:a3:89:c7:ac:01:
ca:86:de:1c:39:4f:c9:cd:10:70:10:6c:fa:04:c7:ba:8b:b3:
50:85:e7:5a:04:d3:fb:e1:cc:bd:51:fb:b8:30:9b:0c:71:f5:
d4:f7:67:4d:51:29:79:ab:9a:1c:9f:b4:c3:5a:cd:d5:71:9b:
0a:26:f5:33:7f:1d:38:ee:61:1c:28:38:62:c6:39:3a:a4:81:
81:d2:f5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:16 2026 by rpki-client