Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: SrLC7peiJaPHYwLIpuRG+q/Qa06O+L95vrpn5efJAuE=
Subject key identifier: 83:CB:BB:C9:10:5F:CC:28:AB:7B:45:39:F0:88:71:1D:46:5F:6E:5E
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019EC2CA165F2755C406F24CE27474B9DFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 21:01:24 +0000
Manifest this update: Sat 13 Jun 2026 21:01:24 +0000
Manifest next update: Sun 14 Jun 2026 21:01:24 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: zQkHUL2teO41PuSM+Sg2zhUYjdV+eJlow/2GmLPVkkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:16:5f:27:55:c4:06:f2:4c:e2:74:74:b9:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jun 13 21:01:24 2026 GMT
Not After : Jun 14 21:01:24 2026 GMT
Subject: CN=83cbbbc9105fcc28ab7b4539f088711d465f6e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:d4:19:f9:e9:36:ba:1f:07:3f:48:73:37:
a2:06:7b:74:f6:8e:cb:8d:80:19:44:e2:6b:96:91:
fc:73:e3:fc:09:1a:bc:13:86:20:41:36:a1:ba:8c:
9b:9b:7f:15:99:a6:c8:d2:80:24:7d:b6:80:2c:b3:
0b:a3:b1:3a:62:db:db:c3:3d:f2:da:41:d9:13:5e:
65:e2:4a:bd:16:dc:0c:99:22:6c:8b:7b:46:19:4c:
9a:29:c2:55:e4:53:f9:dd:da:75:b3:b9:b1:86:8a:
ee:02:43:69:3e:4e:14:ce:b3:c8:63:f0:7a:f3:b9:
53:bf:99:2a:42:f3:0a:cc:97:17:9d:aa:92:40:85:
7a:4b:99:de:15:2b:e7:f8:c9:f4:66:8f:19:4f:3c:
30:39:cd:42:8f:ef:eb:ad:6a:b1:3c:df:05:31:e4:
23:8c:8e:df:21:62:27:58:b7:90:4c:90:5f:fc:1a:
17:1f:3e:b8:de:0a:30:29:c9:ee:95:b7:11:f9:de:
87:a5:89:16:c7:12:06:ec:d8:17:d5:c5:ea:36:d2:
0a:41:fb:4c:c6:b1:ab:0e:85:9e:74:be:6e:1c:a1:
12:88:83:fa:11:e2:28:04:00:12:c9:eb:ea:ef:82:
08:11:03:15:d2:ba:5c:33:7d:73:5c:11:e4:a3:25:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:BB:C9:10:5F:CC:28:AB:7B:45:39:F0:88:71:1D:46:5F:6E:5E
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:04:d5:e8:54:32:59:3c:ae:05:06:c3:a5:16:0f:26:a6:ff:
a3:d3:a6:da:50:97:5d:3f:92:a0:95:00:cc:31:43:a1:12:e6:
39:e8:4c:5d:7f:45:06:52:3a:61:a6:a4:73:86:41:d8:68:f3:
ba:ef:24:a7:55:e6:4a:28:02:c5:cd:89:6f:05:84:c9:1a:98:
b9:ae:d0:cd:53:d6:c2:1e:c5:fd:ea:60:60:31:db:81:a2:92:
84:24:3b:fb:0c:29:ed:06:f9:8f:06:ee:d6:d3:4c:4f:b8:13:
35:59:27:a6:96:01:4b:a6:35:b0:90:73:6f:f5:31:bb:cd:fe:
a2:8d:51:61:cb:cb:b9:88:dd:e4:71:c3:fc:58:6e:72:9a:76:
d1:7f:b4:3e:45:c4:2d:0d:6c:f2:93:13:c9:f4:b6:ec:e1:7d:
ea:5e:9d:be:42:b4:21:b7:c4:c5:d5:e1:1b:ae:7e:ae:e6:0b:
f2:11:2f:c0:7f:e2:a3:21:a2:e7:b5:ff:88:20:30:9e:a5:74:
f3:67:c8:7b:b3:ca:56:a7:a2:d9:e0:df:b9:12:f6:5a:58:b8:
23:f1:b2:67:3e:26:dc:39:fe:e5:a1:e7:f9:b0:eb:85:1e:7c:
0a:87:7b:f7:80:8f:ee:48:d8:35:61:d1:6b:f5:c9:83:8d:08:
3b:17:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:32 2026 by rpki-client