
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: 8KiBGXsAcVjkkrRdLhA02Hm31ajTvKPIUq2up+4EUhI=
Subject key identifier: E7:EA:5D:5F:48:73:3E:11:21:FD:CA:FB:9E:0C:01:C7:B8:6E:D6:1B
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 019ED3F4891696A729F0FC8BDE13E674D7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0B31
Signing time: Wed 17 Jun 2026 05:01:18 +0000
Manifest this update: Wed 17 Jun 2026 05:01:18 +0000
Manifest next update: Thu 18 Jun 2026 05:01:18 +0000
Files and hashes: 1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: x6kbv/R2VNe4UDFU2oYFZpxg7HiaJpo7wxDyCxg3mrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:89:16:96:a7:29:f0:fc:8b:de:13:e6:74:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Jun 17 05:01:18 2026 GMT
Not After : Jun 18 05:01:18 2026 GMT
Subject: CN=e7ea5d5f48733e1121fdcafb9e0c01c7b86ed61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:06:3f:6c:27:27:74:62:ed:f0:b1:6f:a3:
8b:c9:43:9e:ae:92:ec:f6:69:9e:7c:09:48:89:5d:
db:70:bc:ed:25:d3:c0:1d:20:60:de:c4:03:43:87:
a1:76:85:3e:06:71:cc:57:7f:8e:e9:19:82:d8:16:
2e:01:ef:cb:b2:01:fe:8a:5d:8a:13:f6:e8:9f:4b:
c2:f8:f9:31:0e:31:21:b4:82:04:4a:5e:a7:57:f7:
ea:9a:54:ad:d3:59:2d:7b:ea:10:ad:63:51:e7:ae:
ee:0c:ea:d1:d1:ad:0c:b2:3c:49:07:e5:ae:59:f4:
40:77:6c:36:63:ea:c4:27:77:32:94:ef:37:cd:3b:
1f:07:cf:df:f3:ac:39:2f:9b:da:f9:93:e8:c6:8c:
3e:b8:97:50:2e:58:11:d9:86:4b:46:88:11:fd:bf:
2f:36:72:ea:40:2a:e6:c5:20:fb:37:30:55:1b:5a:
92:11:29:45:77:6e:74:2e:94:e3:17:97:86:bd:84:
9d:c9:44:7f:78:91:3a:bb:64:02:e2:22:08:54:b9:
05:49:1f:84:ca:2b:32:f4:82:f0:d6:a8:d4:01:13:
1a:ac:5d:7e:3e:05:6b:de:15:97:de:cf:df:00:50:
2a:27:41:ce:1d:ae:2b:82:06:de:ba:0a:9e:67:8c:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:5D:5F:48:73:3E:11:21:FD:CA:FB:9E:0C:01:C7:B8:6E:D6:1B
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:39:de:e9:2b:f0:02:a3:cf:90:ab:3a:d6:69:c4:7e:ec:a8:
5d:18:7b:c7:3d:6e:79:3c:2e:05:9b:55:77:43:ec:a9:10:3d:
f2:51:27:4f:b2:38:02:2e:73:c1:bd:28:49:e9:3c:e3:f6:bd:
ac:aa:2c:de:6f:d1:00:80:2a:11:c9:c2:b4:c4:03:54:35:9e:
47:c1:08:c1:5c:f1:af:e9:4a:26:69:6c:f1:87:65:df:ae:79:
1e:69:3a:7d:75:46:1a:10:9e:34:3d:10:6c:cd:df:3a:be:51:
f1:97:20:8b:e4:5d:31:11:61:5c:6d:d8:0f:2d:65:40:7d:a7:
76:2a:b2:9c:7e:69:a3:43:ee:c6:30:57:15:57:40:a8:ea:ec:
22:e0:6b:99:50:1f:4f:f2:56:8e:4a:c1:3f:2b:c1:28:c5:99:
7f:11:cd:7f:0b:ed:34:4f:13:d5:6a:46:58:e7:1c:c5:54:2c:
0c:91:76:6e:22:fe:ed:e9:39:5d:9c:86:d1:94:c7:df:79:ae:
28:55:2c:0e:27:19:0b:ab:b4:cd:e9:de:8e:8f:6e:2a:7b:bb:
95:24:c9:20:d1:bf:4c:6d:0d:ef:b9:ec:b3:c5:06:fc:2a:e1:
dc:90:39:a3:92:7d:51:eb:8b:8f:8e:95:90:48:26:53:27:f4:
cf:42:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:35:15 2026 by rpki-client