Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File: tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier: LSGyEVIPwN1NH6xaMs1XkyOhUE2hdhWXUEdXt7clslU=
Subject key identifier: A2:7B:44:96:F0:88:95:FA:B7:2A:C7:3F:A4:54:EA:E1:DF:E8:EE:DF
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 019EC3009D6AF9015C9D5D333C1AB87C0139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number: 1505
Signing time: Sat 13 Jun 2026 22:00:57 +0000
Manifest this update: Sat 13 Jun 2026 22:00:57 +0000
Manifest next update: Sun 14 Jun 2026 22:00:57 +0000
Files and hashes: 1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: L1fOUjtgd/DvAFvEI3ZnfL0ocvgf0U1yM8zqPbc62eE=)
7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:9d:6a:f9:01:5c:9d:5d:33:3c:1a:b8:7c:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jun 13 22:00:57 2026 GMT
Not After : Jun 14 22:00:57 2026 GMT
Subject: CN=a27b4496f08895fab72ac73fa454eae1dfe8eedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:a2:27:ee:8d:f0:13:04:85:ef:a0:e3:37:
32:3a:20:c7:de:33:6b:24:c9:8d:02:a2:73:44:90:
49:80:16:db:6b:72:f5:4f:a2:5c:83:46:61:20:ff:
ad:1d:79:e8:8c:21:9c:b5:cb:93:8a:eb:c8:02:7c:
80:1c:f4:60:26:f4:22:b2:3e:0e:29:37:ce:20:da:
46:32:b6:3b:e1:a9:3e:0d:d0:13:d7:9f:27:ff:4c:
4d:ce:8d:49:bd:a5:be:1f:bf:2a:15:77:32:4b:69:
86:7f:1f:b8:ec:8a:c7:96:d7:b4:ba:9e:af:d6:84:
64:63:e0:f8:52:62:35:0d:9d:81:e6:60:a6:fe:09:
84:24:6c:2d:de:13:80:60:06:49:ee:5b:53:ea:77:
66:d2:af:32:8b:cd:07:f2:d4:c8:da:6e:3f:2f:5d:
66:d3:d2:97:8a:94:c1:97:4e:e5:5c:18:c5:cb:41:
4f:94:53:49:0d:b1:74:27:8f:57:59:dc:a3:7c:ed:
40:67:4d:56:88:8f:b0:01:8c:82:c2:86:9f:c8:6b:
82:dc:18:58:e3:da:2d:7e:a0:42:a7:1f:a1:ab:de:
b1:a6:73:8c:8f:ba:e7:e5:01:ba:54:c2:6b:f4:b7:
19:7a:2e:03:be:77:f5:5e:ea:7d:ff:13:a2:10:08:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:44:96:F0:88:95:FA:B7:2A:C7:3F:A4:54:EA:E1:DF:E8:EE:DF
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:00:7b:7b:64:73:2e:78:d2:9e:6e:a1:1a:13:40:b7:2e:14:
37:97:81:df:ec:ba:12:57:c0:79:b0:2d:2d:43:08:0a:a4:3c:
11:0a:01:e6:f8:7b:9e:ee:a8:0b:18:bd:a2:ee:c3:84:cb:bf:
72:9c:ce:ef:45:d5:3b:96:4d:85:45:45:7b:95:87:9b:c0:7b:
f3:4f:54:4d:50:cb:45:5e:33:df:52:c7:b4:8f:be:3f:f1:2c:
05:92:44:aa:f5:e1:62:9e:d4:67:64:e9:6d:28:33:a4:7c:ab:
27:fc:c9:04:d6:e5:26:f2:c7:9c:80:de:ae:e7:c2:8e:10:73:
cd:22:82:73:c2:fb:34:96:f1:e4:29:44:ae:9e:27:0c:ed:d0:
5a:e8:ff:d4:a5:4e:7a:a9:cc:bd:3b:df:34:9d:eb:12:8b:72:
d2:ee:0d:6e:e9:78:db:1b:4f:d6:c7:d3:8e:8d:93:31:19:a7:
f0:f6:3b:22:9a:86:69:aa:cd:8a:e3:16:43:71:d7:4d:85:60:
e8:45:09:b3:44:c4:01:5c:ff:b4:73:fe:ae:d2:98:e6:7a:ad:
34:9d:4e:92:ac:7f:72:76:3b:e8:db:f9:20:5f:fb:10:6c:5d:
30:1b:22:f3:f9:05:72:1d:4e:7f:9d:cc:e9:2f:40:61:3b:eb:
a7:47:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:16:55 2026 by rpki-client