Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: B51BUDqrjDzpwT9A4R2mvWZ01oOKB49rbH3l270Trnc=
Subject key identifier: A8:AF:DE:86:DB:C4:4A:E4:1D:6B:23:31:8B:F0:A8:84:00:9C:1A:AA
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019EBFFF3B10C3C5C81BD3624EF4F4C0BB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 19BA
Signing time: Sat 13 Jun 2026 08:00:35 +0000
Manifest this update: Sat 13 Jun 2026 08:00:35 +0000
Manifest next update: Sun 14 Jun 2026 08:00:35 +0000
Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=)
2: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: Jap8Cwu/XxH9FeonZHv1Qiv/bDaGxTqeo4EVxfcavPA=)
3: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=)
4: i6gAOaaWdEjygKv3yzfVHTmBR5s.roa (hash: jK1Yhe3ibqhPTKxiBNM7KW7h9KKeRctQT02L1qcBze8=)
5: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=)
6: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=)
7: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=)
8: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=)
9: yjcAiOmQGkj7hTD0MZWHr2J1Je4.roa (hash: S7VwEQTFRcxL/FXQlqzu5pVh1KvvK3fwPwSXMI469EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:3b:10:c3:c5:c8:1b:d3:62:4e:f4:f4:c0:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jun 13 08:00:35 2026 GMT
Not After : Jun 14 08:00:35 2026 GMT
Subject: CN=a8afde86dbc44ae41d6b23318bf0a884009c1aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:dc:30:2e:51:da:a4:e9:39:80:7d:5a:91:
db:9b:5e:e4:55:af:73:7b:45:93:03:71:2d:b1:21:
24:80:0a:0b:82:43:53:fb:59:13:fc:d9:d9:37:6c:
be:74:73:a8:d7:8f:66:62:f3:5c:06:f5:b6:94:d3:
23:a7:54:5b:f6:82:7a:1b:8c:6d:4f:ec:bd:71:1f:
d0:01:81:f4:9c:03:5f:b3:f9:a8:d8:f6:7e:e2:c0:
e9:40:00:c3:20:d7:11:14:07:6e:c9:ea:d9:9d:51:
88:61:26:48:3d:9e:d5:e6:ef:3e:3d:ff:bc:ae:22:
0f:be:68:58:3e:ce:cb:37:32:31:bd:84:48:e3:fb:
73:42:96:ab:cb:23:41:35:50:7c:85:2f:72:62:fb:
2f:a7:81:c4:86:9d:3c:d8:f5:25:c8:68:bf:52:12:
a0:d5:26:9b:97:2b:4f:5e:d7:41:ea:3f:cd:02:11:
8c:b3:f1:04:74:82:73:f2:c6:09:ca:c7:98:1f:aa:
6b:76:e1:24:39:68:98:55:36:1b:aa:19:db:9e:7a:
cf:67:1a:5b:77:48:5b:1f:18:0e:5a:ac:65:a0:71:
24:0a:88:11:fa:d7:b5:6e:19:d0:a1:5a:cd:5d:8f:
02:0b:c0:db:b5:e8:29:78:b6:af:7e:43:78:a3:92:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:DE:86:DB:C4:4A:E4:1D:6B:23:31:8B:F0:A8:84:00:9C:1A:AA
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:0f:f0:1a:0f:cb:02:90:08:3d:00:81:41:36:24:7e:a9:
30:21:24:59:64:19:b6:81:66:87:db:52:84:9e:10:43:a7:07:
8d:c9:c5:4e:f6:6e:b4:b3:a4:6a:67:72:10:9e:37:d8:e7:1d:
47:b0:60:93:49:50:97:db:f4:01:c4:d1:51:5d:fb:6a:19:57:
68:a4:58:72:e7:b6:58:87:5c:a4:9f:d8:1b:5a:e3:f7:c9:52:
1d:dd:3d:28:d6:29:80:d3:d9:79:d8:1e:ae:24:9a:32:b5:5f:
7b:31:ab:6a:09:49:ea:cd:fe:62:2b:82:ca:ae:1f:66:90:fa:
2d:97:fe:e6:4d:4e:06:cd:08:0a:a7:a6:82:92:23:33:42:aa:
69:99:6a:a4:20:22:fa:b0:4c:23:91:e0:21:9f:5f:cd:a3:ed:
65:43:dc:f8:2a:78:2b:b9:b2:59:1a:43:f1:e7:f2:6a:b3:91:
e2:94:af:2c:d1:1c:b1:1a:73:e2:61:1e:c8:26:32:c1:f2:b6:
c0:05:46:79:d1:79:a1:16:b2:03:58:74:fc:88:20:5f:73:8a:
9c:5f:b5:29:65:d2:5c:f1:6f:58:11:ff:8f:2b:0e:65:c0:b4:
0a:ca:24:d6:14:34:f7:f8:0c:63:10:4f:5f:bd:49:d1:11:e7:
92:d8:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:24 2026 by rpki-client