Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: LvN26n8wSDAQnjYXFGk5Kp6+C+KZqqdD3eP+f0vaWvQ=
Subject key identifier: 35:C3:05:4B:90:75:3A:51:8A:76:4D:DA:BD:D2:03:BE:1C:B7:93:25
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019EC0DB73166D1E198C819E3E55911FB595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 12:01:07 +0000
Manifest this update: Sat 13 Jun 2026 12:01:07 +0000
Manifest next update: Sun 14 Jun 2026 12:01:07 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: mukeZcSyuBTSDYN3lMaM4/xiFl5ivc4Ak9RDeJ+pSeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:73:16:6d:1e:19:8c:81:9e:3e:55:91:1f:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jun 13 12:01:07 2026 GMT
Not After : Jun 14 12:01:07 2026 GMT
Subject: CN=35c3054b90753a518a764ddabdd203be1cb79325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:24:d0:94:cd:2f:d5:e4:4a:3e:77:5b:a5:
11:79:6c:df:4d:17:ef:bb:70:12:56:8e:a7:c8:22:
17:46:56:3f:35:05:91:21:c5:e3:15:46:44:ef:bb:
27:62:c9:a5:0a:29:d7:d1:ed:fa:fc:5a:25:2b:7e:
ee:71:8f:31:3a:f3:bc:8f:06:0b:85:44:3d:fc:27:
09:6c:78:0d:f3:db:05:cd:d5:86:df:01:e3:ab:41:
4f:0e:83:ad:7c:01:2e:b3:f2:47:61:5c:79:44:11:
4d:d6:19:43:e1:aa:70:48:7d:b4:6d:dc:85:93:5a:
71:e4:1c:72:dd:dc:29:91:3d:7b:07:d0:cf:b3:2d:
f1:ef:1c:09:e4:36:58:15:ce:3e:cd:49:ab:e8:0b:
7a:eb:87:f5:59:61:25:b5:19:a9:90:10:a7:a7:7c:
c0:c1:bc:bf:f9:30:84:a1:a2:ca:df:62:da:e0:3e:
a8:f5:76:79:cc:3a:96:6b:94:ac:e7:75:98:da:39:
0a:1d:c7:ab:67:c3:ca:63:8b:82:17:e8:5a:0a:12:
e7:6e:eb:85:3f:53:0f:d6:06:0a:7c:f5:35:6f:e0:
4b:15:41:b3:09:df:18:4c:21:be:54:ef:23:62:49:
52:46:73:9e:f3:17:23:5d:32:e3:f0:6e:19:7f:5f:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:05:4B:90:75:3A:51:8A:76:4D:DA:BD:D2:03:BE:1C:B7:93:25
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:e0:aa:31:ec:ba:3d:25:59:ef:26:d6:ad:b9:10:e8:82:
04:f0:d5:59:5a:44:0e:8c:54:06:ba:62:4f:ff:8e:36:1f:09:
94:79:ed:bc:87:31:07:b6:85:a2:7b:95:87:42:a2:3e:dd:e0:
72:4f:2b:85:a0:04:e3:d0:dc:f1:2c:39:ea:a1:81:d2:8c:32:
81:b4:be:c2:2e:89:3f:f8:fd:e0:f9:2a:42:a0:3f:54:49:14:
b5:68:91:c1:ad:06:e5:88:29:82:da:da:11:42:2c:8b:88:d0:
03:c5:52:21:bf:e0:ff:0a:91:c4:d0:41:69:da:d7:3f:81:30:
44:23:70:fd:58:73:39:6b:67:47:19:bf:12:f5:09:c3:e1:2d:
7a:a0:19:c9:7c:68:e2:b5:5c:44:14:d2:96:19:1a:bd:72:7c:
ba:ca:e3:6d:53:2d:f7:6b:ef:d9:16:68:81:eb:71:40:f2:29:
b6:3c:5f:52:7f:39:6d:cd:ab:c5:7d:b5:bb:b9:cb:7c:13:bd:
71:74:f5:c5:60:18:93:cf:8a:fc:b7:8a:3b:7e:79:23:6a:7e:
d1:09:68:80:2d:a1:cd:f8:22:73:87:71:3d:7f:26:37:ed:38:
d3:f3:ab:5b:23:c3:58:2e:02:d7:58:87:1b:91:4d:20:aa:f1:
45:3d:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:31:38 2026 by rpki-client