Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: woHa/UMlHQd+SPw7STQMtgi/DtKm4Sjl9XXbkqbz6i0=
Subject key identifier: 16:A2:2E:89:38:29:D2:CB:4B:DD:95:4E:E0:68:5E:98:5C:9E:00:0B
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019EBFC8F52E7A2C53EAE11BAB9FBE1BDD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 07:01:18 +0000
Manifest this update: Sat 13 Jun 2026 07:01:18 +0000
Manifest next update: Sun 14 Jun 2026 07:01:18 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: th0A1POWhfzTL2innTdw3T5Jw3j7AB943Q5ct8iGQ9I=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f5:2e:7a:2c:53:ea:e1:1b:ab:9f:be:1b:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jun 13 07:01:18 2026 GMT
Not After : Jun 14 07:01:18 2026 GMT
Subject: CN=16a22e893829d2cb4bdd954ee0685e985c9e000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:23:c7:dc:2b:2f:e7:cb:e3:f1:a9:19:21:
5a:7b:2a:13:18:64:0b:53:b4:de:4c:4a:0c:f5:97:
ca:a0:7a:81:dc:bb:1a:95:1c:1c:5f:c5:44:de:76:
cf:4c:ea:bd:a2:9c:dc:77:98:0a:13:82:9d:da:f4:
0c:7c:f5:57:51:74:e0:62:f5:93:03:ae:c1:02:17:
ec:5a:05:08:11:d3:a6:e1:bc:0d:c9:d8:45:04:80:
54:e9:ab:c0:9a:7a:0a:d1:48:07:94:f9:72:5b:bf:
5d:21:6a:a8:06:eb:e6:91:7c:c8:8f:70:4e:fb:86:
70:84:b1:4e:fc:86:6a:86:59:06:be:9b:b2:33:db:
4c:f1:80:ee:63:45:2d:a2:57:3d:17:3b:46:a7:f9:
3d:91:82:df:01:9c:ee:95:8c:1b:74:d9:46:74:fa:
14:d2:00:9c:3b:ec:6f:9f:e2:6c:87:62:fc:b3:3e:
7c:29:89:d5:78:10:a9:d9:89:78:cf:1d:a4:9e:42:
ae:b3:ee:53:1d:c0:5d:cb:f4:4e:e4:23:d5:79:e1:
5f:6c:70:2c:54:9a:9e:10:76:53:41:a8:35:9f:c0:
65:e6:e3:d9:8c:7c:1d:a0:da:bd:46:c1:05:cb:92:
af:c8:41:0e:61:b3:98:dd:1b:3f:2f:5e:45:07:e6:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:2E:89:38:29:D2:CB:4B:DD:95:4E:E0:68:5E:98:5C:9E:00:0B
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:e8:f5:e9:da:64:f2:7b:cd:1f:fa:a4:26:3f:52:94:1d:
0f:29:1f:cb:27:e3:f6:9f:c6:aa:a4:99:1c:fe:19:7b:c8:04:
d5:bd:9c:de:bc:2c:4d:bb:70:d7:ce:83:47:f1:b4:cf:ca:4b:
8e:fd:f8:95:54:89:df:d2:15:00:50:1f:14:36:a2:86:87:e4:
7a:9c:9a:21:42:fc:ed:74:18:39:24:d8:cf:8a:94:c3:8a:37:
37:11:a6:74:31:fc:3f:40:92:93:f5:b2:16:29:cb:62:26:00:
8a:98:27:2e:ae:3a:7c:47:b7:25:a0:5a:ca:5d:a4:35:22:6e:
6f:d7:2c:ea:02:a6:bc:a3:9f:b8:6a:db:e8:99:51:f7:84:2c:
db:83:6a:64:ac:90:90:aa:56:d6:39:af:0b:bf:73:06:d5:67:
74:c8:90:85:08:d7:63:b5:d5:a6:7e:f0:9c:80:0b:e8:31:4c:
a6:83:cf:ae:cf:23:cc:c2:b6:23:0f:4f:51:71:25:78:34:00:
3c:93:bd:c8:60:b5:af:42:3a:d4:83:67:88:13:9f:31:49:0c:
e2:c6:59:d0:b9:11:8b:fc:cb:c6:12:5d:42:c9:06:c9:0e:d5:
38:b2:70:4d:9b:34:6e:3d:31:37:45:2b:3b:e7:cd:34:98:38:
b0:a7:31:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPUueixT6uEbq5++G91YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjYwNjEzMDcwMTE4WhcNMjYwNjE0MDcwMTE4WjAzMTEwLwYDVQQD
EygxNmEyMmU4OTM4MjlkMmNiNGJkZDk1NGVlMDY4NWU5ODVjOWUwMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz0jx9wrL+fL4/GpGSFaeyoTGGQL
U7TeTEoM9ZfKoHqB3LsalRwcX8VE3nbPTOq9opzcd5gKE4Kd2vQMfPVXUXTgYvWT
A67BAhfsWgUIEdOm4bwNydhFBIBU6avAmnoK0UgHlPlyW79dIWqoBuvmkXzIj3BO
+4ZwhLFO/IZqhlkGvpuyM9tM8YDuY0Utolc9FztGp/k9kYLfAZzulYwbdNlGdPoU
0gCcO+xvn+Jsh2L8sz58KYnVeBCp2Yl4zx2knkKus+5THcBdy/RO5CPVeeFfbHAs
VJqeEHZTQag1n8Bl5uPZjHwdoNq9RsEFy5KvyEEOYbOY3Rs/L15FB+ZtXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaiLok4KdLLS92VTuBoXphcngALMB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP/o9ena
ZPJ7zR/6pCY/UpQdDykfyyfj9p/GqqSZHP4Ze8gE1b2c3rwsTbtw186DR/G0z8pL
jv34lVSJ39IVAFAfFDaihofkepyaIUL87XQYOSTYz4qUw4o3NxGmdDH8P0CSk/Wy
FinLYiYAipgnLq46fEe3JaBayl2kNSJub9cs6gKmvKOfuGrb6JlR94Qs24NqZKyQ
kKpW1jmvC79zBtVndMiQhQjXY7XVpn7wnIAL6DFMpoPPrs8jzMK2Iw9PUXEleDQA
PJO9yGC1r0I61INniBOfMUkM4sZZ0LkRi/zLxhJdQskGyQ7VOLJwTZs0bj0xN0Ur
O+fNNJg4sKcxbg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:33 2026 by rpki-client