Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: 3M6B5pbnxBqtnI0vGx730XIUTfQrQKEjwP2NTfY9PD0=
Subject key identifier: 88:BA:71:04:7B:18:CE:A4:B8:FD:05:2B:7B:3F:5E:D2:8A:FC:97:83
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019EBDA33946FC54B5432FF34246F9442754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 0138
Signing time: Fri 12 Jun 2026 21:00:51 +0000
Manifest this update: Fri 12 Jun 2026 21:00:51 +0000
Manifest next update: Sat 13 Jun 2026 21:00:51 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: js1nySpQfMlFKVf8TCXBnB0jtnnXARQHR/+5TpMLK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:39:46:fc:54:b5:43:2f:f3:42:46:f9:44:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Jun 12 21:00:51 2026 GMT
Not After : Jun 13 21:00:51 2026 GMT
Subject: CN=88ba71047b18cea4b8fd052b7b3f5ed28afc9783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:76:46:a2:6e:2b:fb:74:1f:27:c4:1b:13:
e4:25:e5:b7:df:9a:a0:bb:9e:31:bf:26:1c:b9:af:
5d:81:16:d5:95:12:76:a4:62:1e:b8:07:aa:0c:52:
ba:5f:e9:ba:69:3d:4f:56:f7:35:f2:3e:80:4a:51:
ac:06:9d:17:7a:5c:3c:16:71:29:4a:a0:cb:54:bd:
cb:96:60:d9:89:92:9f:b2:0e:5c:f4:e3:d2:62:bf:
52:85:94:44:04:6c:26:1f:dd:08:27:8f:82:84:f7:
1b:24:9f:b3:73:77:fd:5e:89:c8:b9:4b:43:b8:02:
73:0e:fa:13:d6:de:5d:1b:5f:c3:bd:18:40:ed:90:
98:61:e7:f6:10:11:2b:07:3e:b5:bb:d3:b5:d3:c6:
d0:04:4f:4c:db:96:66:68:6b:ed:88:64:62:10:ef:
dc:d7:20:f2:00:7b:34:dd:5d:3c:f8:85:6f:ef:1d:
d1:10:a8:d6:ec:c9:85:53:6f:2c:94:40:8d:8f:85:
5d:9c:8d:46:8f:7b:e3:df:b5:d3:04:64:57:58:2e:
3d:d5:c3:0e:40:9e:30:ff:a7:d2:2d:fb:b9:f3:b8:
76:c2:9a:1d:5e:e2:dc:25:64:4a:a1:40:21:7a:89:
47:c6:39:7a:83:16:1b:16:62:55:e9:82:9a:7d:80:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:71:04:7B:18:CE:A4:B8:FD:05:2B:7B:3F:5E:D2:8A:FC:97:83
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:ad:db:0b:2e:fe:02:c6:d9:71:52:65:2e:42:59:9b:d9:
bc:74:05:a1:5b:2b:68:6f:50:64:3f:f6:0c:ff:61:7b:0f:0b:
20:53:45:b8:8a:4c:6c:10:37:56:00:c0:27:9c:e1:58:0f:f1:
f1:bc:5a:70:f0:db:b8:5e:5b:22:a1:64:91:9a:5f:31:b4:fd:
f8:9f:fb:7e:94:8a:d5:f4:23:90:18:e6:7b:24:10:87:12:09:
bf:17:4e:3e:0a:51:6a:a6:83:dd:a1:ef:4d:79:3f:32:4b:cd:
1c:e4:40:25:a4:11:29:53:35:cb:5d:83:eb:81:82:a5:44:c1:
14:c1:1d:aa:a4:27:bc:14:83:94:6d:dd:1d:1b:c0:0f:dc:dd:
ee:fd:82:56:dd:2d:63:2e:0b:de:a4:e5:ae:39:86:3f:39:93:
1f:4d:65:e2:c9:bc:80:a3:47:7f:0f:9f:05:92:e0:ee:dd:58:
8e:47:af:2c:f7:73:c3:de:ce:3e:df:d6:b6:69:7a:f9:7f:a5:
0c:0b:63:85:cc:4a:69:08:21:d8:d3:70:07:c8:71:a9:ba:92:
ad:a1:0e:df:c5:3c:e2:fb:3b:17:de:ea:38:d7:96:08:d5:c3:
1b:e9:03:e3:ff:19:2c:29:82:92:bc:28:5d:d0:32:71:90:93:
ba:53:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:20 2026 by rpki-client