Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: qxTm+Dw7y+UhRroCFSPCpfgie2EyueQ7GmLx3tthbDM=
Subject key identifier: 8B:6A:CC:CD:49:20:CC:F2:55:A2:CE:75:A2:92:22:30:7B:50:DB:2B
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019EC3A5DAFBE2FFB460B7F11272F9D788D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 1271
Signing time: Sun 14 Jun 2026 01:01:27 +0000
Manifest this update: Sun 14 Jun 2026 01:01:27 +0000
Manifest next update: Mon 15 Jun 2026 01:01:27 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 38T4BeqKbu9EhoAmsBKGB2TH1+j35mtoRb45SmBqjsQ=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:da:fb:e2:ff:b4:60:b7:f1:12:72:f9:d7:88:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jun 14 01:01:27 2026 GMT
Not After : Jun 15 01:01:27 2026 GMT
Subject: CN=8b6acccd4920ccf255a2ce75a29222307b50db2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:7e:68:ab:a0:b9:60:d0:90:8d:03:c0:32:
b3:2c:f6:88:fa:eb:35:17:b1:0a:76:5a:a7:95:09:
b0:ad:2e:5f:01:8d:98:38:90:27:14:6d:69:d3:98:
8f:93:30:0e:c5:fb:9c:27:56:17:34:b8:c9:18:f7:
8c:7c:49:eb:29:db:1c:dc:12:e9:76:3c:26:2e:bd:
bc:53:15:bc:d0:4b:20:9d:e2:2e:d0:88:31:40:0c:
25:ee:41:05:85:df:c7:0f:32:a0:f0:43:23:c7:2f:
e9:31:af:3d:78:c6:e4:83:a7:f4:50:2a:9b:a4:e1:
77:65:59:50:0f:3e:b7:f2:91:bd:38:b5:40:4d:03:
1e:2e:17:49:47:79:40:34:c9:e1:ac:ef:2e:ca:4a:
0f:9a:8f:89:18:37:2c:d8:d4:08:4a:ff:79:3b:4f:
bf:d6:1d:6b:f1:d4:ad:0a:0b:a3:a5:5b:5a:4e:20:
36:42:14:0f:2e:25:8c:90:be:70:b5:c1:66:d2:c6:
0b:15:0e:9e:73:e1:a5:55:44:a5:5b:71:62:e9:e1:
be:32:ac:f1:0e:20:2c:e2:fb:3e:e8:ca:08:04:29:
c2:b4:1e:85:82:88:6f:33:00:09:aa:2b:19:f7:d2:
71:86:58:1e:b5:09:90:a3:06:6e:23:48:d1:b5:a7:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6A:CC:CD:49:20:CC:F2:55:A2:CE:75:A2:92:22:30:7B:50:DB:2B
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e0:5d:fc:bf:1e:1d:c8:c4:f4:ff:6a:13:56:2f:35:b6:c8:
26:69:12:3a:2d:7c:ae:9f:b1:56:27:c5:7f:06:b4:14:56:15:
86:d7:f6:2a:e5:0f:63:87:f3:82:66:60:2e:4f:6c:9e:a2:93:
f3:3a:cc:f4:a3:82:90:89:f1:ad:42:11:58:fe:75:85:ed:39:
a2:69:9f:f8:83:09:55:48:c4:93:c5:4b:e5:2e:ae:a8:b9:93:
7a:66:52:8c:c9:4b:fd:ae:cc:e4:13:85:17:24:fc:50:78:8c:
32:96:89:83:43:da:7d:57:9f:e8:be:91:ed:ad:31:7c:5f:b1:
4c:20:7a:de:f1:a8:c5:d1:90:c4:e8:ce:94:5a:be:2f:8b:51:
ec:90:f7:37:c1:a0:e3:6d:0a:31:5b:73:d7:5b:2a:17:02:3b:
8e:8f:06:72:5e:21:63:c8:f6:cc:ee:5e:95:01:90:5d:67:7b:
2e:33:70:89:86:4c:40:93:cb:d0:3d:f1:90:d3:e9:fb:bc:cc:
93:82:61:de:0b:b0:a6:81:3c:72:73:a1:31:64:68:1c:4f:fd:
a9:6e:9f:f6:b4:45:07:92:a9:49:91:ba:d2:6f:ea:a1:74:4c:
d6:f1:b0:a1:1f:8d:40:e2:dd:8a:a1:2d:5a:88:b0:d6:f5:98:
ce:98:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:22 2026 by rpki-client