Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: MGgAVJDhlEj4xJ5fnBV4rEPQwEmLm5wduGN+dBBLT5U=
Subject key identifier: F9:42:7D:A0:B9:77:E2:54:FB:D7:65:70:C7:9E:2D:86:84:5A:3D:2A
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019EC2C9E6E96358E1E1691C5674611EA74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 21:01:12 +0000
Manifest this update: Sat 13 Jun 2026 21:01:12 +0000
Manifest next update: Sun 14 Jun 2026 21:01:12 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: RDJQMhMhPQVMuuJQnx+cci3iG2vR11bJ6YtN5INhlA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:e6:e9:63:58:e1:e1:69:1c:56:74:61:1e:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jun 13 21:01:12 2026 GMT
Not After : Jun 14 21:01:12 2026 GMT
Subject: CN=f9427da0b977e254fbd76570c79e2d86845a3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:33:8a:38:30:7e:18:f2:e9:ef:e1:4b:97:
d7:c3:70:bf:91:87:17:67:75:93:5b:d7:fe:10:79:
0a:02:c3:13:cb:52:12:5b:e3:e1:64:60:eb:cf:49:
f6:ec:b7:0a:7d:b5:58:14:c9:b0:cb:c7:6c:07:e3:
5a:be:2c:d6:3c:84:74:d8:a0:3d:75:1c:2c:c9:16:
5f:79:f1:8e:a1:d6:2b:80:45:09:4c:18:33:b1:53:
bd:2d:6f:96:72:01:8b:03:60:24:d0:88:17:23:a1:
80:6e:ed:37:ac:07:dc:36:fc:03:9a:22:1a:6e:8b:
2d:60:77:b5:f5:61:63:06:ce:ef:8a:36:28:be:d4:
6a:21:9c:b0:7c:a6:c7:0f:8e:93:36:07:ae:91:4f:
5e:d1:11:6b:e3:cf:2d:b8:39:fa:f3:cd:15:48:af:
03:3c:d8:57:41:f1:fd:29:5b:ea:b3:36:57:9c:f0:
34:2a:ea:6e:63:27:9e:03:cf:38:b5:ea:4a:d4:a0:
a2:6a:80:f1:bf:9e:cf:f8:10:12:b3:5e:b7:2f:e3:
5e:1a:bb:d1:94:1b:60:1a:e5:9f:e5:fc:5e:67:11:
42:b4:73:0b:7a:03:a4:df:4b:c4:c9:fc:1a:58:7e:
3f:d3:c3:35:1c:db:31:4d:3a:f0:1e:ec:f1:6d:df:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:7D:A0:B9:77:E2:54:FB:D7:65:70:C7:9E:2D:86:84:5A:3D:2A
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:53:d6:dc:93:91:75:fc:06:12:06:0f:e4:34:3d:68:30:21:
00:cc:f1:73:1c:d4:0c:0f:9c:26:87:19:0e:39:5d:86:c1:7c:
39:9f:74:c4:a3:4d:88:19:34:3f:40:27:3c:c8:e7:fe:2e:c9:
cd:70:03:ff:9e:76:60:e1:2d:9f:0c:e7:74:94:c6:2e:11:ec:
5d:d0:cc:dc:d0:bf:3e:de:d3:a5:c5:7a:e7:0b:34:e8:ed:2d:
8e:46:03:13:54:5a:2e:a4:b9:2f:6e:d5:12:8f:25:13:0d:2e:
55:b9:59:c7:3f:c5:c9:68:17:81:a8:b7:48:5f:78:35:c7:68:
a0:5c:06:f1:fd:d1:6b:19:74:1e:66:06:ac:99:90:20:1b:29:
be:7d:45:26:ed:d2:28:7f:bd:f6:32:a1:9d:38:81:65:7f:5b:
04:7f:10:13:98:87:43:39:0f:3d:05:83:c0:cc:57:04:40:37:
a5:71:ea:fa:4d:c2:32:7a:96:0a:f7:9d:b8:57:05:b0:3d:26:
44:a3:8a:85:6d:b4:bd:09:23:45:60:3a:02:1a:33:9d:86:f1:
a6:8d:6e:82:12:09:38:d4:ff:79:61:40:79:f1:9f:5c:6c:6f:
73:34:86:6a:59:5d:63:4a:2b:45:cd:b0:10:33:27:1e:49:04:
54:13:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:01 2026 by rpki-client