
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File: tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier: n1tz5KwHC59o+hBEWBgSKh0Xam5LJGmbOWD3Adnt6Oc=
Subject key identifier: 95:E7:FB:C5:47:66:48:93:04:B8:3B:94:12:0C:F3:0D:B0:C1:77:63
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 019EBEB5CC1C90FEB7787DF809C36EBD0D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number: 65
Signing time: Sat 13 Jun 2026 02:00:45 +0000
Manifest this update: Sat 13 Jun 2026 02:00:45 +0000
Manifest next update: Sun 14 Jun 2026 02:00:45 +0000
Files and hashes: 1: 9Uh8hi2XjzjTI07m52BOUEVY774.roa (hash: yoDrm0qg0msJJ0YvgT2enc8jij0zEDKh7V20lRAU8j4=)
2: pIrh8t_NNRD8MCPix_SqJSVgY7E.roa (hash: eE3cynxx6yPYag5fkQ+E+tY5KNgvElDMK0Zwn7c5OSI=)
3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: xxDeVDmJbc+FpqGFP+YPAgh6zxXk8Sam7MTmZLozWGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:cc:1c:90:fe:b7:78:7d:f8:09:c3:6e:bd:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Jun 13 02:00:45 2026 GMT
Not After : Jun 14 02:00:45 2026 GMT
Subject: CN=95e7fbc54766489304b83b94120cf30db0c17763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:e4:5e:35:6e:58:af:68:2a:3e:78:e1:1f:
24:81:f8:07:29:68:84:a8:c5:65:42:c3:2b:86:71:
f2:77:7f:48:6b:57:63:95:a2:3a:a7:02:75:ad:75:
7a:12:3c:a3:4e:ba:ce:4c:8e:86:cc:71:f4:1e:1c:
35:75:44:f8:9c:ee:87:fd:d1:43:77:79:24:9c:92:
ba:d3:12:c7:03:18:4e:b6:3b:2e:bb:e8:8d:2f:ec:
3a:48:10:b0:17:58:bf:9d:72:05:f4:5e:41:15:67:
23:07:68:c0:d4:48:99:06:d9:7c:0e:28:54:d2:21:
44:37:db:02:91:9d:76:c0:c1:7f:47:08:d0:51:d8:
1b:8c:49:eb:1b:77:fd:86:31:35:3d:c4:90:7a:dd:
c4:01:6a:46:59:73:19:13:d0:50:b3:c0:27:e4:bc:
2f:fd:a9:85:e3:cb:ac:f0:27:d7:cf:59:a4:7a:f2:
5c:42:f2:5b:33:ca:7f:16:19:0b:97:41:42:4b:aa:
25:53:c9:f6:31:1c:17:fd:37:99:a6:0e:0e:8d:64:
67:79:cf:9b:7e:d7:ae:5e:9f:03:81:64:ed:9b:08:
62:48:f7:a4:27:c4:6d:82:f1:1a:dd:92:8f:db:23:
77:e0:1e:35:0d:bd:48:cf:ba:bd:e7:6a:6b:68:3e:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:FB:C5:47:66:48:93:04:B8:3B:94:12:0C:F3:0D:B0:C1:77:63
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:57:8e:d3:b2:e8:48:68:bd:b2:0d:81:31:1f:a5:a2:b1:
79:b6:07:d8:bc:00:cf:d2:1a:be:31:7a:ef:b3:6c:81:0b:e8:
fd:1f:12:78:ec:9a:ba:47:9a:c7:e8:ef:54:2e:dd:88:b5:3b:
65:a7:1c:e1:a5:09:07:55:7a:87:c3:43:9e:ca:7f:47:d1:61:
a9:0c:52:a2:4b:71:f1:76:61:06:b6:17:a5:86:be:f6:1d:c5:
bb:08:65:56:80:f1:19:b9:9b:b5:7e:2f:85:a3:27:4e:51:b8:
79:2b:62:38:53:44:f3:ca:4d:be:c7:ea:6a:8a:5a:e5:32:79:
d8:6c:23:79:7d:ef:b5:3c:03:44:20:50:28:bb:56:c4:2d:49:
f7:fe:3f:26:00:57:df:61:43:c9:86:29:61:6d:88:bc:46:5c:
8a:fd:07:0b:d1:49:af:61:9f:6e:65:ae:40:81:37:47:7f:22:
a7:03:d5:cb:27:8b:de:8f:86:9d:9a:35:d3:dd:53:13:cb:fc:
84:d0:57:9e:22:82:da:61:e2:f9:e7:d5:9d:51:94:51:aa:99:
e0:0f:80:25:49:bd:2a:5e:d5:71:21:69:59:aa:49:2c:b9:54:
3e:ad:96:7b:ef:e8:73:02:f7:9c:82:67:da:34:8e:65:29:d8:
3d:a1:71:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tcwckP63eH34CcNuvQ1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2FjMmU0ZTRkZGIzZTU0MDc1NmYxN2FhOTcwZDRhOGEz
MGE4NWMwHhcNMjYwNjEzMDIwMDQ1WhcNMjYwNjE0MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg5NWU3ZmJjNTQ3NjY0ODkzMDRiODNiOTQxMjBjZjMwZGIwYzE3NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vDkXjVuWK9oKj544R8kgfgHKWiE
qMVlQsMrhnHyd39Ia1djlaI6pwJ1rXV6EjyjTrrOTI6GzHH0Hhw1dUT4nO6H/dFD
d3kknJK60xLHAxhOtjsuu+iNL+w6SBCwF1i/nXIF9F5BFWcjB2jA1EiZBtl8DihU
0iFEN9sCkZ12wMF/RwjQUdgbjEnrG3f9hjE1PcSQet3EAWpGWXMZE9BQs8An5Lwv
/amF48us8CfXz1mkevJcQvJbM8p/FhkLl0FCS6olU8n2MRwX/TeZpg4OjWRnec+b
fteuXp8DgWTtmwhiSPekJ8RtgvEa3ZKP2yN34B41Db1Iz7q952praD4fQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXn+8VHZkiTBLg7lBIM8w2wwXdjMB8GA1UdIwQY
MBaAFLY6wuTk3bPlQHVvF6qXDUqKMKhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAt
ZDYyZTU4NWM4MTYxLzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82Yzc5NzAtOGNmOC00ZDNhLWEyMzAtZDYyZTU4NWM4MTYx
LzEvdGpyQzVPVGRzLVZBZFc4WHFwY05Tb293cUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOhXjtOy
6EhovbINgTEfpaKxebYH2LwAz9IavjF677NsgQvo/R8SeOyaukeax+jvVC7diLU7
Zacc4aUJB1V6h8NDnsp/R9FhqQxSoktx8XZhBrYXpYa+9h3FuwhlVoDxGbmbtX4v
haMnTlG4eStiOFNE88pNvsfqaopa5TJ52GwjeX3vtTwDRCBQKLtWxC1J9/4/JgBX
32FDyYYpYW2IvEZciv0HC9FJr2GfbmWuQIE3R38ipwPVyyeL3o+GnZo1091TE8v8
hNBXniKC2mHi+efVnVGUUaqZ4A+AJUm9Kl7VcSFpWapJLLlUPq2We+/ocwL3nIJn
2jSOZSnYPaFxAw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:09 2026 by rpki-client