Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: p0i1M3RGADHPC41/Ey+3GUoY+VpEcNMzUCFQoRo78mA=
Subject key identifier: E0:34:D6:65:81:CF:26:71:72:27:D5:F3:C1:81:78:FF:B5:6D:4C:7F
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019EC1EE3C013D32D9DD683AC531DC9A8182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 13AD
Signing time: Sat 13 Jun 2026 17:01:16 +0000
Manifest this update: Sat 13 Jun 2026 17:01:16 +0000
Manifest next update: Sun 14 Jun 2026 17:01:16 +0000
Files and hashes: 1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
2: AZAVETW5nGbM4Ib7koJRmOOqy04.asa (hash: iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=)
3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: OWdE2AAsgA71DwZru2mNANBy6CdaO1hIkUIHvWioSV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:3c:01:3d:32:d9:dd:68:3a:c5:31:dc:9a:81:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jun 13 17:01:16 2026 GMT
Not After : Jun 14 17:01:16 2026 GMT
Subject: CN=e034d66581cf26717227d5f3c18178ffb56d4c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:2c:0a:df:ed:70:d5:14:a2:f5:aa:4a:14:
2e:c7:ce:6e:2e:7b:99:c8:68:75:46:7f:9d:fe:73:
ec:cc:30:64:a5:4a:ee:97:fb:ad:72:a4:27:15:1e:
4e:7c:08:6f:be:2b:ee:5c:a2:8d:5d:60:97:26:de:
dd:7f:93:90:5d:a5:eb:6d:87:35:2e:b1:dd:59:cd:
6d:0e:8c:10:7e:63:bd:56:4c:23:5f:16:5b:33:2d:
d4:28:da:a2:58:9c:c6:53:92:df:23:95:8d:f5:37:
97:ee:08:24:49:eb:2d:94:b4:83:1e:89:00:a1:83:
36:5a:c0:c3:15:74:a0:be:8e:3b:99:59:28:11:8f:
3c:9b:fc:4f:c2:c5:32:a3:e2:d6:6b:0b:7f:76:6d:
95:d5:74:10:da:a7:a1:d4:1b:25:7b:08:84:24:67:
d3:f6:b3:3b:a8:d0:59:17:4b:bd:59:7d:4b:e1:80:
68:5f:9e:7c:41:b6:6c:c3:c9:39:40:e1:95:76:ff:
46:b6:f7:3e:68:86:65:ce:d4:87:a6:3a:35:b4:16:
ea:c6:53:c4:6f:99:77:6b:19:e7:29:86:e4:76:5d:
af:35:e5:ea:0a:9d:b1:2b:db:29:6e:f9:e1:2d:52:
6a:ba:21:bb:74:fa:cc:1c:a3:cf:0e:b2:d8:36:41:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:D6:65:81:CF:26:71:72:27:D5:F3:C1:81:78:FF:B5:6D:4C:7F
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:14:72:b3:da:de:4e:54:1a:ed:12:7b:e2:18:cf:59:05:9e:
48:ea:3a:72:ef:69:6c:12:d3:a5:98:c2:b5:5f:28:0d:82:21:
87:1b:87:74:54:1f:bd:86:69:11:5f:bb:c6:8b:91:fb:a8:58:
f3:ac:29:41:34:59:5d:15:bb:4e:39:48:c5:05:2d:41:ca:9b:
7a:a4:b6:8c:56:5d:b2:d8:53:c1:dc:b0:1d:71:5a:b3:79:59:
8d:79:9a:0f:52:d9:45:a5:c7:f5:34:7c:a6:4c:b9:9c:ee:af:
2d:43:9c:73:9c:f8:9b:15:97:c2:ff:09:50:1e:0d:b4:69:83:
80:ee:df:0d:92:96:81:d7:5d:24:4f:85:7b:c2:30:f8:e2:5f:
5a:b7:07:f3:dd:c6:84:7b:bb:15:c2:78:c4:c7:ec:e7:ca:95:
dd:b1:ce:81:72:9c:ef:0e:fe:63:3d:6a:3f:16:f2:34:66:17:
66:b2:9d:8a:7a:27:11:8a:a1:f5:b8:3c:ac:34:78:0c:be:8c:
f4:35:ab:2d:2a:79:c2:98:2c:93:d3:b5:a4:13:27:56:d5:d4:
cd:1e:8b:ff:f3:ae:5a:8d:c5:03:73:94:76:6e:8c:d6:22:6b:
25:64:27:97:13:20:14:81:b9:88:e5:98:2c:0e:cb:8e:aa:ba:
31:12:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:25 2026 by rpki-client