Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: bj7bcn0/Ki8IMzeb0Lxl+/cEpy8RDC/GSiEPZlHTcVc=
Subject key identifier: 4A:3F:8D:A9:7A:EA:F5:BC:83:1C:5F:80:94:36:80:C6:4A:69:53:0D
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019EC1499553CB2EDF78D42DF9672FCAE0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 14:01:25 +0000
Manifest this update: Sat 13 Jun 2026 14:01:25 +0000
Manifest next update: Sun 14 Jun 2026 14:01:25 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: 50QtaBE9dJmIUycsE/gHCVY8LyZd9Djt8eN/4wq5n3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:95:53:cb:2e:df:78:d4:2d:f9:67:2f:ca:e0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jun 13 14:01:25 2026 GMT
Not After : Jun 14 14:01:25 2026 GMT
Subject: CN=4a3f8da97aeaf5bc831c5f80943680c64a69530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:ad:33:08:55:56:ed:99:78:c2:2f:26:2d:
14:fb:2d:d9:16:cc:b3:7e:e6:c3:5f:d8:ca:d1:90:
53:23:55:cf:3a:d1:f7:e3:88:a5:f5:85:68:c6:20:
4c:0b:ef:4c:83:7e:61:36:bc:7e:fd:c1:09:8c:88:
9c:35:e4:cf:f9:67:8f:f6:d3:46:b8:be:97:3f:d0:
bb:e6:39:ab:dc:d5:13:f4:fd:23:90:9e:0a:f0:0a:
c1:ca:29:49:fd:3f:f2:ed:c0:47:d1:1c:e7:a2:48:
21:24:7f:b6:f1:db:38:6b:20:ad:3f:3a:e3:09:1c:
a8:1d:d0:4c:f7:66:fb:16:35:20:34:88:1f:0d:64:
8d:3e:a2:ca:e5:c5:a9:89:01:60:2f:ed:ae:80:0d:
b2:e9:f6:e0:4a:cf:f5:f6:71:19:b3:b9:0f:15:e6:
c7:4f:d5:7e:ef:13:45:4c:dc:40:9c:3d:7c:6c:34:
2b:9d:58:ee:04:49:e6:19:6e:c9:e6:9d:3a:29:55:
77:2b:a4:bd:dc:59:98:d5:04:59:ae:1c:8a:e3:41:
da:f6:85:cf:43:7f:5e:fd:29:3e:17:64:39:9f:06:
74:59:15:6f:db:08:20:76:dd:80:14:3b:d5:81:f9:
f4:dd:c8:0f:da:58:27:d2:1f:23:88:00:0f:75:b9:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:8D:A9:7A:EA:F5:BC:83:1C:5F:80:94:36:80:C6:4A:69:53:0D
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:b5:91:85:80:68:93:2e:5f:99:50:bf:54:ef:ec:40:3d:
c3:bc:49:b7:cd:6e:fe:4d:6d:34:01:dc:88:56:82:6e:bf:56:
9c:a0:1d:b4:3c:55:67:25:e6:3d:40:04:4c:e2:d9:81:7a:88:
d2:37:56:48:84:5c:6c:cb:94:dd:12:23:de:19:b2:dc:5f:f4:
4d:7e:ce:b6:3e:51:ba:12:85:13:31:0f:79:ed:22:fe:b7:81:
21:ff:16:5b:50:88:7b:6c:36:e9:0d:01:e8:5f:f0:e7:5e:ca:
cc:f4:84:86:c9:20:01:9a:c8:66:29:c1:e1:e4:8b:ab:ea:e8:
fc:61:9d:f4:ad:f9:86:22:ee:16:69:74:bb:38:6f:14:0e:fd:
ec:71:31:f6:f9:df:a0:27:12:40:c0:a0:e7:f3:e5:f7:a2:c7:
3c:97:0b:69:02:0a:bc:ca:7e:e8:45:c1:27:0c:2a:54:4a:b1:
cf:a8:be:c3:1a:e9:e4:56:e6:22:da:ce:95:c1:be:77:5b:be:
f9:68:7e:e3:10:bd:5c:97:b4:b7:77:83:6b:6d:97:c6:fa:f3:
bf:04:8c:bb:36:49:92:69:bb:03:c6:a6:e5:06:b1:ea:48:a0:
b0:a9:d0:f5:0e:8f:85:ba:68:af:b8:d5:d6:94:4c:82:7e:45:
42:45:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:21 2026 by rpki-client