Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: TxAnF8WyQIJq73l3n9rb++OHXBoRYZpqZkS2DQo7FYA=
Subject key identifier: 5F:71:81:BA:0E:D5:95:B4:37:44:B9:BB:0E:2A:35:D2:62:30:DA:27
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019EBEECF3B329B7464C1FB7A418DF98456E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 113B
Signing time: Sat 13 Jun 2026 03:01:00 +0000
Manifest this update: Sat 13 Jun 2026 03:01:00 +0000
Manifest next update: Sun 14 Jun 2026 03:01:00 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: DOYIZON8jkdnmpj1LGlv7c/1psmPH390NPBqhuNa4RQ=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:f3:b3:29:b7:46:4c:1f:b7:a4:18:df:98:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jun 13 03:01:00 2026 GMT
Not After : Jun 14 03:01:00 2026 GMT
Subject: CN=5f7181ba0ed595b43744b9bb0e2a35d26230da27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:8e:0d:56:1e:5e:d5:44:85:f2:c3:7c:f5:
40:2c:10:08:44:d9:40:8c:ee:b5:b8:d4:76:1f:0f:
3c:ce:2a:08:f0:52:e4:59:cc:3f:19:ed:a9:0d:da:
ce:2a:be:57:07:b7:c8:2f:fa:e2:39:ba:8a:f9:27:
3f:e2:d3:f8:43:bc:a4:b0:e4:62:67:49:d5:0e:b9:
aa:19:8a:40:54:50:e5:86:a5:73:8c:02:49:50:3b:
fd:db:e7:d6:dc:b2:3d:cd:aa:c3:c9:a1:df:cb:2f:
7d:ed:f5:61:31:db:78:87:64:3e:17:bf:be:fd:f9:
86:14:cf:dc:d4:6b:31:41:df:08:a7:4d:7e:e1:7d:
77:bc:4f:bd:b0:98:c3:8b:7f:7a:d7:33:1e:32:92:
51:cc:b0:1e:f6:1f:22:4f:0b:8a:64:62:da:83:3d:
0b:6a:f3:97:75:85:d1:f3:1c:8c:13:9a:52:20:8b:
67:c7:d0:51:98:04:91:a3:96:e9:27:a5:09:c9:65:
ee:d2:fd:06:81:e9:10:f9:71:4f:34:5f:6c:16:06:
92:d4:5c:41:f5:68:96:17:ea:c1:fd:eb:18:83:ae:
d9:cd:64:fd:7e:a9:6b:26:c6:8f:aa:3c:08:e6:1a:
38:d1:72:df:2d:36:3e:83:7c:76:f0:9e:48:9c:8c:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:81:BA:0E:D5:95:B4:37:44:B9:BB:0E:2A:35:D2:62:30:DA:27
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:53:ec:85:8b:fa:e5:7f:70:08:dd:0f:e8:fa:b5:77:b5:
18:6f:29:b1:9a:9d:b8:7d:5f:3e:be:c1:2f:e5:7a:9a:a2:e3:
47:00:70:36:9c:38:e3:6e:69:c2:ac:b7:0f:65:9e:13:48:9d:
1d:1b:d0:a4:9d:b1:86:26:5e:f5:f5:10:f8:12:b1:36:66:9c:
42:76:23:36:67:e2:b4:ce:49:09:a0:08:02:f4:cd:7c:32:d5:
64:06:b1:84:17:19:ab:4c:88:b8:14:2e:d7:56:9f:b8:c5:6d:
63:e1:07:77:e1:0a:d5:9f:5c:38:9d:80:8c:37:1e:ec:18:c5:
b0:9b:79:6b:c8:18:b0:26:af:20:d8:52:f0:c8:13:70:6a:70:
eb:b9:b3:9c:79:cc:8d:3d:7d:b4:13:af:3b:a1:75:e0:ab:bf:
3a:0c:e1:d2:77:fd:d9:08:d8:c3:0d:fb:68:ec:e2:c4:d1:51:
83:5c:88:a2:8b:a5:e8:0f:41:58:27:9a:22:44:f3:82:3f:57:
14:be:2b:3f:24:31:e2:86:39:bf:85:59:37:6d:fc:98:d2:35:
6e:75:c8:93:f4:0c:a9:20:e9:cc:41:4c:37:26:90:e0:fd:35:
a5:d6:7f:f3:d4:4e:fa:5e:af:9a:19:9a:fe:a9:b8:32:db:6c:
47:9f:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:44:12 2026 by rpki-client