Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: yflLPZHB6QvG4NWUQcdw3yOZHQGV3RoYgN18QpP5TbY=
Subject key identifier: D9:C2:C3:2A:43:15:5F:88:D2:61:1A:C0:CF:02:5E:0C:10:30:AE:C5
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019EC1B74373FC438535E81685C1F11C88B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0E11
Signing time: Sat 13 Jun 2026 16:01:13 +0000
Manifest this update: Sat 13 Jun 2026 16:01:13 +0000
Manifest next update: Sun 14 Jun 2026 16:01:13 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: TTOPRasB+OFIX6joyKdVphLDdc5jU/mu4O5Ug3FV5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:43:73:fc:43:85:35:e8:16:85:c1:f1:1c:88:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jun 13 16:01:13 2026 GMT
Not After : Jun 14 16:01:13 2026 GMT
Subject: CN=d9c2c32a43155f88d2611ac0cf025e0c1030aec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:31:ee:66:84:b9:45:aa:ff:5c:f1:a3:07:
28:8f:e5:08:be:61:f4:9a:f1:2a:3d:c5:b1:fe:d0:
99:77:3f:a5:2e:dc:27:c0:da:70:9d:a1:ee:a8:d2:
dd:1f:52:50:2e:29:36:19:aa:c8:20:4b:b0:69:08:
c6:25:c5:f8:dd:0c:98:e0:c1:7c:d4:2a:15:2d:e5:
bb:84:ad:df:1b:f2:c7:e6:2c:02:5c:61:46:ce:0d:
02:5c:1d:32:20:7e:19:c1:10:c4:fe:ef:bf:c2:45:
43:6c:bb:3f:d9:1b:85:84:71:ba:32:18:26:ea:7a:
55:6f:90:77:3d:6e:4b:16:d1:b8:63:ae:c0:ea:3a:
8a:62:d3:18:13:af:d1:36:e6:47:26:dd:87:94:91:
f3:11:40:64:2b:1d:40:0f:b4:20:f1:a8:c6:06:10:
54:f0:2d:e2:ec:9e:f3:99:48:e6:68:53:70:cd:1e:
75:a6:52:5c:4d:18:55:07:ba:15:a4:80:36:ef:f5:
9a:06:e3:14:26:24:fe:80:64:81:f7:ce:4b:cd:9f:
49:d1:00:ef:c8:a5:47:03:80:94:19:2a:c9:22:fa:
1f:ab:f2:b9:d4:3b:06:59:c7:fe:9a:36:2c:a5:b7:
20:c9:07:37:56:82:36:c4:7f:e9:d6:03:4d:b6:5c:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:C3:2A:43:15:5F:88:D2:61:1A:C0:CF:02:5E:0C:10:30:AE:C5
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a7:8f:45:6a:7e:0d:ee:c0:70:54:38:f1:cb:11:0f:44:76:
02:55:4f:fe:90:2b:b7:d3:19:5f:ac:7e:3f:a1:ad:96:10:22:
9a:01:49:f4:12:eb:f6:27:e7:ed:78:86:a8:d4:0e:53:ff:25:
d0:50:93:42:dd:62:eb:04:72:da:38:43:32:bb:d0:33:8b:97:
50:fc:7c:23:02:8b:ce:c9:d5:1d:d9:a7:d8:7c:de:d4:71:0a:
47:11:05:85:0f:27:4d:0d:dd:f3:e8:53:dd:a9:6e:a4:9e:83:
e5:86:1e:eb:47:3b:c9:54:50:85:6f:fa:fb:fa:48:f1:93:b6:
f2:9d:a6:f2:2a:6c:d2:34:46:05:19:92:e1:44:7d:c1:75:41:
46:32:89:8b:38:e5:75:87:12:c0:f8:00:30:3e:af:77:e2:fc:
de:1f:35:f7:b8:45:bc:0b:0f:99:57:2d:cf:7e:32:0b:3e:c4:
02:78:8c:d9:41:6f:0f:2c:37:fb:fa:43:40:53:88:80:73:a3:
4b:53:8b:33:db:92:04:2f:a1:25:32:62:20:70:3b:63:67:11:
18:d6:9a:bb:cc:e0:77:13:1c:3f:ea:23:b2:36:20:79:06:6b:
57:b3:2b:5e:09:b4:1e:04:9a:aa:04:89:b8:6d:5c:b5:76:b2:
fb:4a:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:18 2026 by rpki-client