Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: 8ieIwLyXrIf4vSsTERe+lVilH58+j/OBrlO0bJV9iLo=
Subject key identifier: 90:0D:0B:B8:05:95:D0:78:20:7D:4A:6E:F4:A5:52:5D:48:E6:F7:81
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019EC292A3D89291431916B76FAAC80756C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 20:00:50 +0000
Manifest this update: Sat 13 Jun 2026 20:00:50 +0000
Manifest next update: Sun 14 Jun 2026 20:00:50 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: IsIkuCluzzNzpZXeSOmRmKddkRLDR+TOqLnpLYQclBA=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:a3:d8:92:91:43:19:16:b7:6f:aa:c8:07:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 13 20:00:50 2026 GMT
Not After : Jun 14 20:00:50 2026 GMT
Subject: CN=900d0bb80595d078207d4a6ef4a5525d48e6f781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:b4:04:6b:2d:10:9d:6a:fa:f1:23:4c:26:
11:24:aa:ca:7c:35:da:a3:60:ab:be:44:1d:3b:c2:
40:87:ec:de:ef:9f:d2:14:f8:e8:49:68:76:0d:e4:
58:f7:60:05:52:98:0e:f6:a5:a9:44:9a:69:d2:78:
33:2e:38:65:17:a9:41:f1:ee:2b:df:0c:1c:8e:4a:
73:0c:31:fe:be:18:08:17:5a:00:f2:a9:a8:1c:32:
5b:50:6c:57:c5:9c:fd:7a:79:72:cf:4b:da:a7:aa:
59:69:c9:85:3e:5a:a1:41:4c:25:07:d5:f4:09:b4:
6c:c2:ed:2a:97:da:23:d5:8c:75:c7:a6:ba:69:12:
53:97:b2:ea:43:e9:c1:a1:3b:1a:a7:04:da:0d:ca:
95:d3:92:f4:07:62:79:18:01:5a:44:20:ef:6d:00:
d1:03:77:57:47:61:cc:d0:63:ab:22:76:96:b5:88:
41:66:09:d2:ff:90:c9:2d:b7:cd:78:18:cb:fb:01:
2d:27:7c:60:07:ac:a5:99:74:45:e8:b5:59:eb:ef:
72:ca:df:85:24:aa:2c:19:40:70:59:5b:ad:b3:dd:
bc:64:bb:cc:c9:5e:ba:9e:c8:c3:de:97:aa:c3:ef:
f6:31:e8:e7:59:65:6a:d6:d9:80:ac:72:14:1b:ba:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:0B:B8:05:95:D0:78:20:7D:4A:6E:F4:A5:52:5D:48:E6:F7:81
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:0a:48:e9:6b:c6:a3:9e:30:10:7c:2e:57:d2:fc:81:ac:
a1:b2:b0:0c:04:f0:9b:f1:ff:df:b5:1f:bb:31:f0:84:99:93:
18:c3:9c:e1:b8:c0:9a:74:e9:41:c9:ef:1c:9c:b4:71:c6:6c:
98:3c:6b:ca:38:59:14:06:36:1d:69:a9:ee:7f:08:18:fd:a9:
91:da:5b:7a:64:21:fc:56:9a:34:bc:79:6f:97:f0:c5:60:3f:
6d:f3:f2:59:4f:d2:d0:96:3d:ea:16:ca:37:bb:d9:a8:7b:f3:
1e:6e:21:97:8d:41:a8:7a:16:51:3c:66:02:62:8c:70:d8:98:
b8:15:21:46:97:2e:fe:37:d0:59:b5:d0:e4:0e:57:1a:58:b9:
39:9f:e3:49:cf:dc:41:69:72:d8:30:dc:fd:c9:e7:62:4e:c5:
7a:4c:49:a1:6b:06:12:5c:74:2c:7f:cb:e3:63:31:32:c9:d4:
df:08:ff:9f:02:fd:a9:2c:5c:9e:85:50:50:df:93:4e:da:0e:
68:0b:c9:db:74:22:de:24:10:8f:32:ec:9a:b2:b2:f7:2a:8d:
5e:8a:d4:d8:db:db:0c:f1:9a:e9:0f:0d:15:2d:04:7c:33:95:
a4:8b:1c:d2:fa:2d:c5:a1:03:f7:a1:db:59:9a:df:34:5f:e0:
23:9c:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:34:36 2026 by rpki-client