Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: JU/ay2k9VbWfuTtAio0W4NbkqT9OMpKCNRPgrhtKrI0=
Subject key identifier: 0D:1D:5F:97:73:3B:1D:16:79:ED:74:EF:E1:3A:86:37:8A:50:99:7C
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019EC3378CB3BDBE489BD35D2C06EAA9CEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0A33
Signing time: Sat 13 Jun 2026 23:00:57 +0000
Manifest this update: Sat 13 Jun 2026 23:00:57 +0000
Manifest next update: Sun 14 Jun 2026 23:00:57 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: HtkWGznLAfQ+hwlkppPzRXePrByroKEjMf3K5itRnQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:8c:b3:bd:be:48:9b:d3:5d:2c:06:ea:a9:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jun 13 23:00:57 2026 GMT
Not After : Jun 14 23:00:57 2026 GMT
Subject: CN=0d1d5f97733b1d1679ed74efe13a86378a50997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:ab:8a:ac:c6:9c:d9:c1:7c:59:8b:d7:18:
42:95:2d:d7:b6:4a:75:29:63:cf:45:2a:04:d3:b1:
8c:12:33:af:bc:05:8e:83:97:bf:15:2a:29:a9:cb:
52:08:63:62:2d:28:73:6a:da:f8:f0:97:a9:88:c8:
cf:13:0a:f8:b6:f5:29:6e:d8:9c:4c:a4:0f:7f:a9:
ff:47:b3:c3:1e:60:80:c1:a9:f1:67:e9:91:55:1b:
bd:3f:fe:f7:b5:51:9b:84:15:12:0e:42:10:94:3a:
30:c2:aa:3d:23:da:94:f2:c5:b7:9a:48:28:2c:d5:
7e:ce:31:92:cd:47:e5:cf:ad:6e:dc:53:ca:41:50:
53:58:bb:90:e8:dc:39:ad:b1:76:b6:b1:bc:9b:3f:
42:2e:1e:1b:6e:a6:f6:96:13:48:2f:97:3d:4b:d1:
82:15:cb:50:c1:10:a0:2c:c2:53:06:f4:3f:c2:29:
61:5c:03:19:b4:12:86:b9:fa:68:88:9a:af:43:95:
2f:36:14:94:99:b5:33:94:cb:61:21:e5:40:cb:70:
cc:2f:8e:19:33:76:6a:c5:b8:45:90:e4:f2:9c:f7:
27:68:e7:b9:1f:9f:45:aa:ed:b2:f1:b5:13:13:5d:
bd:84:d0:5d:99:be:7e:11:ec:d1:78:65:15:f1:d5:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:5F:97:73:3B:1D:16:79:ED:74:EF:E1:3A:86:37:8A:50:99:7C
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:32:52:3e:85:bf:f0:01:28:ca:19:44:18:3d:9c:21:ca:
e6:43:34:d3:6b:8d:1c:aa:0b:d1:9d:65:08:da:10:54:de:4e:
90:07:1f:f2:3b:ee:af:8f:bb:0c:b0:c3:f2:42:42:8e:59:13:
bd:89:5d:7c:d2:ec:e1:5b:74:35:82:33:df:ee:a9:22:0c:a8:
ee:d5:df:1a:f5:74:dd:1f:fb:cc:eb:5b:68:b5:76:aa:8b:2d:
c2:13:c0:9e:d5:d6:7e:77:6d:8a:8e:6b:c7:09:59:c9:86:28:
09:20:49:77:b8:78:91:cd:30:cb:92:e3:71:60:69:87:fe:1b:
89:21:2d:fd:50:88:37:19:39:df:f6:ea:81:31:b9:dd:3b:d5:
7e:f0:dd:f2:94:b7:d4:f0:7d:1c:c1:c8:6c:ad:ab:d8:29:b6:
75:f5:8c:1d:0f:5b:8b:a7:fc:d5:3c:53:13:1c:2e:40:fb:a8:
75:32:13:e5:8f:78:a8:4f:fc:b7:a1:cf:d8:e6:b9:7f:c2:51:
c1:fc:85:5d:5e:b7:db:cf:79:59:7c:86:bf:c5:df:7e:fb:62:
3a:24:14:72:0f:f2:99:39:b2:7a:cb:5b:cb:16:5a:4d:d7:0c:
a0:60:e1:59:10:9d:ad:0f:5e:e9:3d:f6:f0:a0:91:29:67:32:
d8:dd:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:12 2026 by rpki-client