Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: UDPp+mLMpjmn1H9m71qBFtWvfDRD2ZMcXdReViRuqfo=
Subject key identifier: B9:60:9A:24:88:49:FA:8C:DC:F3:AD:81:FD:27:42:58:56:E2:24:B8
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 019EC33733EC4C16B09484119C3016783B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 1042
Signing time: Sat 13 Jun 2026 23:00:35 +0000
Manifest this update: Sat 13 Jun 2026 23:00:35 +0000
Manifest next update: Sun 14 Jun 2026 23:00:35 +0000
Files and hashes: 1: Mw_jlWOX47w8ZEpuvWB3HZ4VYvQ.roa (hash: sfhBIh2mCq2mgYz96ptYyTEOfSgYQ6EGFDmjhxXGLyI=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: bE0vo9TDAxzLOnXcuhR0zZdJLo70c4688ulZpAqyU3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:33:ec:4c:16:b0:94:84:11:9c:30:16:78:3b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Jun 13 23:00:35 2026 GMT
Not After : Jun 14 23:00:35 2026 GMT
Subject: CN=b9609a248849fa8cdcf3ad81fd27425856e224b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:74:16:2a:01:92:5f:be:91:3e:f7:3f:be:
ef:2f:98:b6:14:5a:65:af:9f:65:fa:2b:e9:bf:bc:
5f:fc:5e:41:31:76:2f:68:d4:37:c3:42:3b:81:3b:
b8:e8:6a:1f:b2:7b:9a:04:66:c5:6e:f2:de:90:dc:
4f:c8:57:b3:9b:c2:b6:3c:77:21:d4:6b:d0:b0:23:
ee:92:7f:e1:80:3b:01:5b:3c:45:c5:5c:c7:8e:f2:
45:d0:e4:eb:71:0e:14:e7:40:fa:8f:8b:ab:c9:06:
39:2f:bf:6f:d3:a7:fc:57:ea:5d:59:03:08:7b:43:
05:25:ee:96:1e:09:d0:4b:96:20:0c:8a:88:8d:c8:
53:84:ec:76:69:9c:26:1d:92:d4:e0:d0:ca:97:cb:
0c:b1:0f:d8:be:c2:7a:3a:3f:78:44:f8:6c:b3:3a:
fd:f1:6b:99:f7:84:a2:65:a7:10:a8:b1:0e:eb:00:
a5:e2:53:f5:bd:71:da:b1:80:f0:74:98:cb:ff:25:
07:7b:37:ca:7d:3f:8c:6a:d9:a8:ab:3f:48:e6:27:
e4:ce:88:4d:38:6c:50:88:6b:49:a9:27:6a:3e:26:
20:91:4e:c0:23:e8:0d:1d:aa:d9:c8:0a:2c:65:fc:
0a:89:62:2e:9d:62:f9:34:05:b8:d1:b6:17:12:cf:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:9A:24:88:49:FA:8C:DC:F3:AD:81:FD:27:42:58:56:E2:24:B8
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:39:21:7b:19:53:bc:b4:3f:d6:44:8d:4c:d2:81:9d:d4:0c:
ed:db:6b:4f:a3:f8:33:37:64:ec:ea:22:02:d1:9f:ad:59:ab:
a7:c0:fc:60:82:2e:11:b5:33:07:08:c7:54:49:fc:70:ab:01:
9d:6b:be:63:91:9f:a0:b0:cd:2c:91:92:37:a9:19:fc:d0:14:
70:12:67:76:cc:61:6a:57:9e:30:97:e6:a8:f7:a0:16:b6:6d:
8a:a4:08:20:91:73:16:a6:f5:3a:1a:f8:07:93:fc:e9:e3:ea:
16:20:2e:ba:17:ab:3a:f8:bf:d8:dd:7c:72:89:51:b7:79:e0:
57:dd:91:57:57:d9:d9:2b:be:18:d2:4c:9b:f1:57:1a:32:c3:
dc:d5:06:90:4e:a2:59:0c:ba:7b:89:51:4b:75:42:60:a6:50:
8d:ad:3b:ae:64:db:40:4d:4d:d6:e8:e7:49:12:95:87:d3:c4:
68:9c:da:03:d1:7e:8a:d6:d5:29:31:c0:01:4e:f1:3e:ce:b4:
79:1b:03:39:1d:fc:50:ca:db:fc:bc:fb:97:6f:93:e3:7e:22:
40:03:33:29:a6:e2:b1:78:2e:12:dd:f5:58:ea:b7:e7:cb:f9:
6f:20:5c:5f:9c:ef:fd:75:78:47:81:cd:bb:54:bc:bb:e9:ae:
a8:64:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:16 2026 by rpki-client