Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: +IuUfGTo0eFOii6rwr0fUBZw5chv7NOvgKa2LuHts1s=
Subject key identifier: BB:CD:DB:53:93:58:5C:82:D7:15:11:92:17:64:D9:85:5E:B9:7E:CC
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019EC17FD32E616765BF8608F9C520300CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0208
Signing time: Sat 13 Jun 2026 15:00:40 +0000
Manifest this update: Sat 13 Jun 2026 15:00:40 +0000
Manifest next update: Sun 14 Jun 2026 15:00:40 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: t4HjfG6eZKqXLJ1kAoyez48wDnc.roa (hash: w/ZlHvwsuOBr7+Ux+UZvLFbXnBLp7Oaw4HBnlqwDp7E=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: haqKjICvTqI25iJ7kW0eSncuE4UnN06AXcb/Ha4zw60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:d3:2e:61:67:65:bf:86:08:f9:c5:20:30:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Jun 13 15:00:40 2026 GMT
Not After : Jun 14 15:00:40 2026 GMT
Subject: CN=bbcddb5393585c82d71511921764d9855eb97ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:0d:1f:68:c6:7e:80:68:3b:7b:6c:f7:75:
65:31:c0:31:3f:3b:1e:b4:9a:98:fb:a9:61:8d:70:
da:6a:39:37:a6:25:64:73:0f:04:e9:90:db:99:5c:
6f:7f:6a:54:bb:f9:a2:ed:b9:f0:26:c2:ab:24:45:
c6:c6:bf:61:3f:7c:a9:4a:b9:91:0c:e1:2e:7a:d3:
d0:f0:be:86:6d:d2:5a:af:32:5d:a4:ea:82:16:43:
46:e9:cf:6d:82:75:35:d8:b0:02:e3:90:c0:c6:21:
22:8b:cf:8c:a2:e2:ce:50:bc:e8:8c:7c:68:c3:43:
af:fc:5f:96:1e:c2:44:ea:a0:e9:d8:e7:b9:38:ad:
d6:66:6d:2f:4b:73:a3:5c:cd:27:d4:86:db:55:fd:
12:90:76:2c:fc:78:ca:4a:fa:06:da:e2:47:1b:1e:
20:67:ca:af:a5:88:42:1d:ee:c0:63:2e:ad:c5:e3:
e3:c7:44:4e:25:5b:3b:8e:0d:41:b2:5e:4e:60:84:
0f:a9:98:05:eb:7a:e9:b1:1d:bc:2e:dc:ad:bd:8a:
ba:2b:ef:2b:d8:a7:94:8c:89:e2:4e:06:73:b0:cf:
12:dd:74:98:05:ad:28:d4:a8:a4:10:23:20:5d:e4:
c4:84:f7:58:d4:d5:70:58:1f:53:2e:b9:19:4d:d2:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:DB:53:93:58:5C:82:D7:15:11:92:17:64:D9:85:5E:B9:7E:CC
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:31:68:2b:de:a3:c8:4a:78:01:a6:66:b6:25:ca:53:c0:
99:93:ea:59:06:10:e5:83:de:ec:e6:23:6e:16:94:75:59:ba:
1e:75:67:77:8c:a5:41:65:51:28:5a:9d:03:da:e7:ed:73:ef:
de:c5:34:73:01:09:8d:9e:08:68:02:1b:e7:0d:84:a1:f5:f5:
72:e5:f2:41:a9:4a:65:2b:43:29:8f:66:52:93:0f:a7:d1:72:
09:46:66:2a:1a:3f:49:ec:0a:ff:a8:d1:36:3c:90:49:fc:44:
79:36:69:07:0e:8a:61:15:c5:73:28:60:ba:85:85:09:59:1a:
33:08:8f:ef:f2:e8:49:9d:bf:86:87:17:76:01:c4:51:05:3d:
d1:21:4c:ec:9e:bd:71:4f:58:1d:02:b7:88:f7:6b:1b:81:c7:
15:f2:9b:b5:69:3e:55:72:19:c7:41:ff:1d:cb:43:9e:65:c2:
fe:b7:2c:5a:cc:f6:ff:b9:bb:b4:ad:91:d2:7a:85:33:25:f1:
33:c3:e4:8c:09:f0:b5:ed:20:c3:b7:a2:21:d9:81:2f:8f:3c:
9f:5c:19:38:c9:d9:8c:68:aa:ef:6b:88:30:64:61:61:c6:6b:
d8:55:53:08:c1:cb:e4:00:bf:82:5f:0b:86:a7:38:c3:d5:47:
49:c2:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:02 2026 by rpki-client