Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: pSmtRJBORuMy/BirrC6ZMFKZBOyrqn3tWs/Tjvb3G6s=
Subject key identifier: 6A:97:46:C8:A6:99:A1:B8:AD:A7:9D:5E:7B:C4:FD:F5:E6:AB:0A:3D
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 019EC0A3FC714CD3200C4F99F0914F105ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 0101
Signing time: Sat 13 Jun 2026 11:00:32 +0000
Manifest this update: Sat 13 Jun 2026 11:00:32 +0000
Manifest next update: Sun 14 Jun 2026 11:00:32 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: AEMdnmPkwEJHviSalH8B7vvSGRjhXenVQAnEkkQkwrA=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:fc:71:4c:d3:20:0c:4f:99:f0:91:4f:10:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Jun 13 11:00:32 2026 GMT
Not After : Jun 14 11:00:32 2026 GMT
Subject: CN=6a9746c8a699a1b8ada79d5e7bc4fdf5e6ab0a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:d8:10:ab:dd:ac:3e:16:1d:a0:1c:4e:01:
5f:c9:d5:1f:97:a5:9a:b4:f3:40:01:0a:ea:0b:be:
4f:bc:ae:8a:59:39:01:c5:d7:20:36:2d:15:47:90:
09:48:53:bd:97:33:8e:49:45:f5:b5:ad:3d:8b:16:
52:29:51:07:b3:bb:de:a9:41:c7:ff:2b:91:e2:f1:
62:85:95:ee:fc:d8:81:57:3e:42:74:06:06:1d:8e:
cc:c5:35:fe:2e:6c:c8:98:cd:db:2b:b9:cf:8a:da:
24:91:9c:9e:58:ae:7d:24:b4:2a:16:87:07:f7:ed:
35:79:a2:c1:c4:25:f3:7e:51:0b:11:54:e7:9c:4d:
00:e8:d9:29:cb:dd:15:f2:44:b2:47:56:4c:ba:d0:
96:62:37:24:48:64:a1:fc:62:00:83:a6:23:82:06:
97:92:a9:10:09:15:1b:ac:19:e1:3a:8b:00:a9:6b:
37:63:5d:88:ad:65:53:48:d2:5d:c4:af:4c:79:54:
94:de:16:15:a8:fc:f4:94:c3:be:57:69:74:a0:49:
d0:1f:77:25:db:ad:f3:b4:cf:34:df:70:32:fa:88:
f0:82:bb:62:9d:2f:cd:0e:ae:53:09:8f:47:03:57:
b1:41:93:66:29:b4:b2:43:66:1d:38:49:1c:1b:12:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:46:C8:A6:99:A1:B8:AD:A7:9D:5E:7B:C4:FD:F5:E6:AB:0A:3D
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:0c:7b:76:24:73:f4:4c:df:2a:56:81:11:73:3f:5a:d9:
26:83:1f:4d:bc:24:5e:46:fa:57:da:d1:74:d5:ca:0a:4c:cb:
ee:5f:6a:e5:28:58:3f:e6:e1:8a:38:31:d9:3a:a5:d4:92:8a:
07:46:09:ef:88:46:d7:22:fc:c4:e8:38:99:0f:da:52:46:8b:
e1:be:fe:01:8d:e7:99:e3:3e:d8:82:1e:9a:49:8a:a9:12:8b:
f6:97:21:17:77:2e:55:75:8b:64:e3:55:1e:8c:eb:a4:28:06:
b1:dc:e5:b7:d7:07:79:cd:b5:63:28:b7:f5:b0:41:01:ef:9e:
9a:93:e9:4a:e8:45:5d:09:54:66:31:3f:cb:47:cf:57:d8:e1:
a2:23:1b:a7:02:f3:c3:09:5a:78:16:71:29:4f:6b:a1:f3:c0:
57:24:49:fa:63:14:ff:94:a8:1c:63:6e:91:74:83:9f:d9:04:
30:6d:33:c4:d2:d0:a4:e9:88:80:f7:7c:24:a2:27:a3:29:90:
ae:60:b8:74:bd:13:48:60:43:c1:43:e3:1f:a3:02:50:21:cc:
95:3e:bc:5e:98:23:66:61:95:f2:5a:5a:72:0e:42:b2:90:be:
b0:c4:9a:b0:59:40:d9:16:af:40:87:6b:bd:78:83:fc:f7:10:
0b:05:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:13:52 2026 by rpki-client