Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: Nhpis/aCTIhAlu/stWqJT5tNlyFdyZoD6wgqlyt2LkI=
Subject key identifier: FF:75:E9:93:20:45:D6:F5:2F:41:CA:AF:E8:B2:12:AA:05:17:5B:F4
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019EC0DB9BC4C1785CB0BE059816EAD7B7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 12:01:17 +0000
Manifest this update: Sat 13 Jun 2026 12:01:17 +0000
Manifest next update: Sun 14 Jun 2026 12:01:17 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: di66VviQ8VQuepoYbWyEaTHEHmduJyPwhdM+vYYLrSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:9b:c4:c1:78:5c:b0:be:05:98:16:ea:d7:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jun 13 12:01:17 2026 GMT
Not After : Jun 14 12:01:17 2026 GMT
Subject: CN=ff75e9932045d6f52f41caafe8b212aa05175bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:19:fd:d8:c7:b8:11:8d:52:d8:db:6a:0e:
fd:dd:4a:b2:89:e4:7b:a8:cf:4c:dd:5b:ca:0d:f7:
f7:32:e5:e2:93:a3:ee:a7:6c:58:a2:ff:68:8e:18:
ee:0a:0c:b1:34:e3:d8:76:46:8b:1a:6e:cc:26:78:
98:41:ed:f5:ce:8e:dc:26:c0:af:bd:15:8b:fc:b1:
98:16:96:74:0f:ea:31:3a:f4:60:f5:d6:3d:36:86:
04:46:ba:03:9d:1c:2b:0e:6e:a5:f7:1c:92:49:ae:
de:71:7c:22:6d:b0:b9:30:32:9d:18:20:cf:8c:38:
45:da:f3:f6:8f:f1:f1:32:e7:52:89:b7:23:de:a2:
b3:91:81:63:b6:5a:17:59:f1:43:be:f1:fe:10:96:
c2:47:d5:07:a7:5e:66:f6:05:30:34:af:db:0b:4d:
8c:8e:f9:8f:8a:e7:4e:f9:6c:0d:77:ec:5c:da:11:
6b:5e:dc:25:01:29:a7:66:23:8b:81:63:14:3a:07:
08:42:ab:ce:1e:6f:9c:33:4a:15:a7:03:4b:88:7b:
12:45:df:f5:a2:2e:0b:eb:48:30:b3:39:0b:36:16:
6e:f4:e0:51:e5:0f:77:da:5d:8a:68:9e:28:3f:81:
8e:ef:03:93:a4:28:03:f5:9e:90:89:e5:22:e9:c7:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:E9:93:20:45:D6:F5:2F:41:CA:AF:E8:B2:12:AA:05:17:5B:F4
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:04:65:59:2b:4c:20:7e:a9:a2:66:b0:84:09:00:31:d3:10:
02:9f:ed:4e:09:bb:41:ed:d4:fb:a3:d7:c1:04:d4:f9:c5:1e:
57:a2:a8:d1:08:bb:18:ed:c0:67:71:71:e3:aa:f4:b8:e4:54:
6a:00:9a:a5:6e:5c:dc:4b:00:bc:fa:ca:8a:de:e0:78:81:26:
91:65:39:a0:62:32:41:a6:55:5b:1a:d9:07:88:ba:c3:bd:a3:
05:bf:06:d2:36:be:f2:c8:54:fa:db:9f:1e:c4:5a:a6:5b:69:
c2:51:96:c5:09:72:37:d3:3f:ad:32:db:02:7b:88:b4:0d:be:
90:f0:67:39:d6:9d:bd:e5:1b:a1:0d:8d:5e:21:cb:0d:a5:55:
6b:a3:4d:e6:cc:3f:d6:b0:44:5b:fa:8f:20:35:4e:c6:1c:bf:
aa:ec:9c:69:94:ec:85:99:dd:27:38:36:c7:24:11:4c:ef:2e:
99:24:40:32:87:d1:73:3d:bf:7e:4e:a3:5a:51:79:c2:58:15:
b3:a4:49:2d:35:2e:64:70:a1:63:0c:bc:fc:67:f9:f7:3e:aa:
d0:cb:f2:0b:c6:4e:62:d6:23:ab:c5:ff:d3:f8:ab:09:17:e4:
66:c5:ea:f7:c8:23:f0:93:b4:98:88:3a:bc:af:07:34:bf:fd:
59:ba:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:16 2026 by rpki-client