Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: 9gQ+AOc5+WqGukmP3KBUGXEEL9LHh8zZ9M2hffQ0oqk=
Subject key identifier: 9F:80:27:31:FC:5D:11:1D:06:2C:D8:22:BD:B7:B1:2D:8F:20:E1:3F
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019EC2FFEF40580D2E8EA5FE73A4F0C799C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 22:00:12 +0000
Manifest this update: Sat 13 Jun 2026 22:00:12 +0000
Manifest next update: Sun 14 Jun 2026 22:00:12 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: pLF7aEmYpRZWNFLpkj/fw5CfqpSn9viKJp+PqUqyaIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ff:ef:40:58:0d:2e:8e:a5:fe:73:a4:f0:c7:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Jun 13 22:00:12 2026 GMT
Not After : Jun 14 22:00:12 2026 GMT
Subject: CN=9f802731fc5d111d062cd822bdb7b12d8f20e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:ec:dd:dc:04:4c:2f:aa:e5:75:df:d4:09:
5e:75:60:a6:9e:4d:7a:a8:77:74:17:fb:54:2a:53:
f5:52:19:c0:05:c1:08:0e:d0:5b:31:fa:45:db:7f:
4f:f3:87:ee:8b:4d:83:3e:aa:d7:c8:c4:2d:d1:64:
8c:c3:64:d1:db:25:05:9e:84:53:5b:10:f4:de:9f:
6c:36:6a:3d:1d:52:f9:7f:2a:29:0c:17:11:1d:1e:
e0:00:d7:18:64:b2:5c:a1:a7:22:be:d3:a3:4c:57:
e8:3b:8f:72:05:12:8f:34:ca:18:a7:49:9b:78:a6:
53:2a:c5:1f:be:fa:0b:9e:49:80:d1:13:13:e4:df:
7e:04:25:6b:b4:31:1b:a1:e6:54:31:0a:fd:d0:55:
2d:60:ff:43:bd:15:4d:28:f1:d3:40:1d:19:66:66:
22:22:4d:fa:11:27:31:b0:8d:43:05:27:a1:cd:7e:
5c:3c:44:fe:40:85:17:9f:cb:5b:4d:71:db:c4:68:
a4:f6:a0:80:c9:d6:23:fa:84:3a:31:9f:0c:9a:9a:
2c:21:5d:c4:33:07:b9:d5:6b:d8:67:db:14:71:7f:
f3:6b:a6:48:09:d3:47:ba:8e:6d:25:96:ec:bc:7c:
bb:72:06:06:9b:70:b0:d5:78:49:f1:65:e5:ac:78:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:27:31:FC:5D:11:1D:06:2C:D8:22:BD:B7:B1:2D:8F:20:E1:3F
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:34:98:f0:8d:3e:61:68:da:97:0f:71:1f:14:af:25:c3:c1:
99:04:e8:2b:95:4a:ce:d4:9b:cb:cb:62:14:21:05:2c:af:72:
e1:d8:a8:d5:aa:c1:24:ab:54:ab:52:2b:5a:d7:4a:c5:d7:81:
75:4f:ec:92:ea:12:78:5d:36:25:88:45:f6:ad:f5:26:bd:ff:
20:21:51:db:35:6c:09:e7:e1:07:15:d9:41:db:df:85:fb:51:
e8:56:39:3e:0a:db:c6:ac:b1:8b:4c:e1:1d:5d:b3:a1:f2:f0:
07:1d:47:a3:7e:b0:4a:9a:ce:e9:9d:aa:ac:6b:a0:f9:42:bf:
f0:6f:ca:e3:49:fb:23:ed:53:33:14:f8:ed:4f:75:38:6b:c8:
ab:66:44:84:a1:74:6e:75:75:3f:eb:59:b0:2c:0e:e3:40:1d:
a2:45:99:e2:af:ab:bb:46:c0:33:8c:41:cf:dd:69:42:42:42:
69:5a:6c:c3:83:03:ca:5d:82:da:59:6f:5f:81:64:10:20:ba:
d8:c1:81:89:d8:5e:31:d8:31:1e:02:6a:16:40:7f:1d:90:cf:
37:d0:cf:9e:99:b4:d7:95:18:39:b6:00:73:6f:08:ce:bd:8d:
94:9e:bd:8a:33:f8:c3:f0:ba:7e:d9:44:63:26:7f:05:c6:19:
35:97:92:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7C/+9AWA0ujqX+c6Twx5nDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5
NjVkOWYwHhcNMjYwNjEzMjIwMDEyWhcNMjYwNjE0MjIwMDEyWjAzMTEwLwYDVQQD
Eyg5ZjgwMjczMWZjNWQxMTFkMDYyY2Q4MjJiZGI3YjEyZDhmMjBlMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnXs3dwETC+q5XXf1AledWCmnk16
qHd0F/tUKlP1UhnABcEIDtBbMfpF239P84fui02DPqrXyMQt0WSMw2TR2yUFnoRT
WxD03p9sNmo9HVL5fyopDBcRHR7gANcYZLJcoacivtOjTFfoO49yBRKPNMoYp0mb
eKZTKsUfvvoLnkmA0RMT5N9+BCVrtDEboeZUMQr90FUtYP9DvRVNKPHTQB0ZZmYi
Ik36EScxsI1DBSehzX5cPET+QIUXn8tbTXHbxGik9qCAydYj+oQ6MZ8MmposIV3E
Mwe51WvYZ9sUcX/za6ZICdNHuo5tJZbsvHy7cgYGm3Cw1XhJ8WXlrHjsKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+AJzH8XREdBizYIr23sS2PIOE/MB8GA1UdIwQY
MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt
YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj
LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzSY8I0+
YWjalw9xHxSvJcPBmQToK5VKztSby8tiFCEFLK9y4dio1arBJKtUq1IrWtdKxdeB
dU/skuoSeF02JYhF9q31Jr3/ICFR2zVsCefhBxXZQdvfhftR6FY5Pgrbxqyxi0zh
HV2zofLwBx1Ho36wSprO6Z2qrGug+UK/8G/K40n7I+1TMxT47U91OGvIq2ZEhKF0
bnV1P+tZsCwO40AdokWZ4q+ru0bAM4xBz91pQkJCaVpsw4MDyl2C2llvX4FkECC6
2MGBidheMdgxHgJqFkB/HZDPN9DPnpm015UYObYAc28Izr2NlJ69ijP4w/C6ftlE
YyZ/BcYZNZeSRA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:19 2026 by rpki-client