Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: YrfrrFnwAJomA02OqSd5/PpEnyEieP37svI3aTwdQbM=
Subject key identifier: DA:7D:18:91:C0:B0:F3:11:E7:1F:03:70:BC:58:C7:37:86:D8:61:BE
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019EC0DACB4FD5ED064D35C7BF533772DC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 10E3
Signing time: Sat 13 Jun 2026 12:00:24 +0000
Manifest this update: Sat 13 Jun 2026 12:00:24 +0000
Manifest next update: Sun 14 Jun 2026 12:00:24 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: AiJtl0TWC5UWGIJUqPp3CyUT+HdUKlfWO9XMhNrlT4A=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:cb:4f:d5:ed:06:4d:35:c7:bf:53:37:72:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jun 13 12:00:24 2026 GMT
Not After : Jun 14 12:00:24 2026 GMT
Subject: CN=da7d1891c0b0f311e71f0370bc58c73786d861be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:dc:04:c2:38:f8:ce:93:10:8e:79:cd:63:
5f:15:53:06:50:3c:88:90:77:c7:63:09:45:b7:82:
93:da:50:8f:29:b6:9f:59:25:b3:e5:3d:7b:dc:b2:
1c:9f:fe:5d:70:70:24:9e:95:31:4c:71:ab:6c:20:
7c:db:ec:51:0d:47:0b:0b:cc:54:5f:c3:b2:51:51:
db:dc:5c:2f:d1:67:77:24:39:32:46:6b:14:51:84:
52:e6:9c:3a:04:f7:4a:5c:7f:51:49:67:20:9c:6a:
73:65:56:0e:43:3e:a3:2f:96:ec:88:dd:f7:9d:be:
9b:86:09:d7:bd:cd:80:22:a1:72:a7:f8:d0:12:e3:
f6:ee:51:50:a2:3c:68:20:35:19:c1:1a:dd:36:0f:
c7:5d:26:7e:b3:e0:da:66:2a:b9:a6:cf:bd:66:d4:
54:36:9d:8f:a1:af:7e:40:d0:1c:a6:16:c1:fb:0a:
cf:50:85:40:e4:95:56:23:da:f3:e3:49:ba:6c:3f:
38:92:8c:6c:d0:96:00:37:8c:bb:ac:bd:c7:6f:0e:
72:35:e7:74:5b:32:91:4b:2f:36:2b:6f:cb:cf:3b:
33:52:6c:00:db:a3:a4:dc:9a:d4:9b:8a:e0:fa:fa:
fd:37:e2:3e:6d:03:be:a0:bf:9d:d7:59:c1:dc:6e:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:18:91:C0:B0:F3:11:E7:1F:03:70:BC:58:C7:37:86:D8:61:BE
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4c:8e:8d:9e:1b:a5:95:08:67:2d:1a:8f:72:a3:16:af:e2:
78:04:c3:eb:56:aa:cd:47:f0:4e:45:e3:f5:97:f1:67:26:ce:
32:91:a0:db:6c:53:bc:0e:ed:df:f4:34:bd:b4:aa:eb:e9:f0:
4d:98:66:1f:ac:11:2b:08:75:77:39:14:3b:c1:c9:a1:8c:6b:
6b:e8:79:65:9d:d6:07:4a:15:96:03:7c:2e:43:56:5a:17:7e:
d8:80:14:06:f2:99:e5:ef:ef:55:0e:4b:4a:49:23:55:87:53:
4c:66:85:76:eb:31:5a:5f:21:6d:23:84:c2:7a:2e:44:33:a5:
a7:88:3b:00:3c:61:2b:8d:ca:cc:97:4c:ea:11:87:b0:bf:e8:
be:d2:f1:bc:4f:69:b5:14:bf:42:be:0e:7a:1e:79:57:63:5b:
cf:ce:41:c1:d6:3e:cd:9b:22:c1:2c:29:a3:23:06:30:79:5f:
d1:7b:06:39:81:98:c4:89:47:03:0e:7b:29:80:f7:2e:d7:95:
f5:8f:d6:87:d9:93:15:1a:d3:62:7d:f8:c9:29:bc:9b:9f:26:
84:6d:28:e4:a7:d3:06:69:05:25:0a:76:53:d1:fc:db:8b:e9:
3f:96:34:3f:44:50:3f:0a:07:4b:36:10:d5:ea:74:d2:b5:25:
43:4a:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:25 2026 by rpki-client