Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: UK1H17cfp+w9himIrtI5TMCl+sBGz8zfdNyiOCDTUyM=
Subject key identifier: BB:71:E0:B4:1E:2F:76:F7:25:C3:54:52:8D:84:CB:F2:B9:FB:C9:59
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019EBF9127250ECA27297DEDA91ABD4FC361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 06:00:21 +0000
Manifest this update: Sat 13 Jun 2026 06:00:21 +0000
Manifest next update: Sun 14 Jun 2026 06:00:21 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: 6uVe5b73UB9qMHJSE2ci3GOvjnMgTW3n1UsWLpRcp2U=)
2: o-popO9auROaiIHZBs-GFli-ZBg.roa (hash: 3gA1UOiSr0PnnoNboQJZUsn/LeXSette67Qdwhw+aTc=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:27:25:0e:ca:27:29:7d:ed:a9:1a:bd:4f:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jun 13 06:00:21 2026 GMT
Not After : Jun 14 06:00:21 2026 GMT
Subject: CN=bb71e0b41e2f76f725c354528d84cbf2b9fbc959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:ef:77:d5:36:cc:5c:cb:c7:6d:0d:cf:2d:
f0:3d:44:cc:9d:e4:c8:ae:e7:74:2b:6b:e4:93:e7:
a3:26:94:a3:cc:68:77:a1:4f:55:ad:20:a3:73:a5:
39:30:e1:6a:e9:66:31:83:a4:86:98:88:b8:d0:ab:
56:6f:d5:b5:75:b8:3a:c3:4b:7b:64:bf:ca:15:81:
84:83:84:15:65:08:b2:9e:84:2f:51:38:1f:98:55:
e9:07:2c:ad:1a:92:b7:de:7a:62:f7:6a:7c:6f:59:
7b:77:88:3c:ea:bb:19:2f:f4:d3:41:ea:a7:10:3f:
5b:d4:7b:c3:64:47:fb:b0:82:29:25:35:3c:9b:38:
e5:cb:09:66:c1:34:b5:a9:6f:96:f5:80:03:9f:6d:
15:e8:22:98:21:23:4e:72:0c:14:9f:82:6e:32:91:
53:77:a0:31:3a:8b:2d:42:39:5e:8b:20:a2:98:45:
d6:9e:9a:6f:2b:78:0e:ab:5d:45:32:a7:2a:9f:79:
be:28:ef:d0:11:c6:f1:f2:2e:73:f7:dd:a0:05:a3:
0e:53:32:fd:18:83:c9:13:6e:28:10:6d:37:0f:15:
26:33:d5:f2:a3:3a:cf:14:43:87:8b:ea:58:5b:06:
8a:64:d1:e3:f5:32:5c:aa:41:d7:67:c3:36:47:fa:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:E0:B4:1E:2F:76:F7:25:C3:54:52:8D:84:CB:F2:B9:FB:C9:59
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:fb:af:b9:8c:09:3e:84:72:bb:69:2c:31:42:0f:a7:b5:
64:33:63:53:7c:60:d8:85:1d:ac:a3:5c:e8:e9:40:d7:54:1e:
ed:91:55:a4:19:d8:3f:8c:ce:73:88:dc:59:24:1e:59:46:26:
25:45:c0:2c:3d:0b:38:07:9c:60:3f:b3:c4:35:4b:b1:6c:77:
0a:f7:8a:86:03:86:35:bf:70:cc:25:10:bd:02:10:1e:ed:c1:
cb:09:d7:27:ad:1f:b1:92:32:e2:06:9c:82:25:5c:b0:fd:11:
9b:f2:dd:f3:40:b2:a6:b9:d2:b0:59:09:d8:34:62:38:c6:da:
f5:10:bc:4f:c5:9c:76:c1:df:5c:72:4a:11:24:a5:19:1a:a2:
93:fc:02:bd:85:8f:d1:17:92:4b:c4:19:f9:f6:41:1a:1c:5c:
5f:56:1a:2e:ef:14:f4:3f:7e:16:d3:3f:59:c0:79:f4:1b:81:
ee:ad:ce:4c:0a:b0:e7:b4:82:74:d4:99:8a:c6:c6:13:b0:9a:
f5:19:0e:8a:60:53:5b:db:1b:d4:79:fb:fd:a8:ab:56:21:92:
3c:19:79:56:a3:3a:ad:bb:94:a8:13:28:9a:2b:f4:6b:fb:fe:
43:9f:b6:90:98:4f:bb:f9:92:4f:1f:51:c4:d4:2e:04:76:2f:
fb:77:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:27 2026 by rpki-client