Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: /Gds+va+uPgeYv14guE1aTRUr7keWCW9FcGwtxpOhkw=
Subject key identifier: 0A:FF:A7:1D:71:9C:92:77:7E:EC:9E:C9:F1:62:DE:74:6F:6B:96:1F
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019EC525CEB9DE8C8696E9B9564C13409ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 195F
Signing time: Sun 14 Jun 2026 08:00:49 +0000
Manifest this update: Sun 14 Jun 2026 08:00:49 +0000
Manifest next update: Mon 15 Jun 2026 08:00:49 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: E+Zj8+t3okVDeMhk1BT8PhEl1m0NGQzHtngn9y+Q0TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:25:ce:b9:de:8c:86:96:e9:b9:56:4c:13:40:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Jun 14 08:00:49 2026 GMT
Not After : Jun 15 08:00:49 2026 GMT
Subject: CN=0affa71d719c92777eec9ec9f162de746f6b961f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:e6:af:a1:d1:c1:11:98:14:59:b9:7e:7d:
8e:8f:09:6f:ee:d6:da:ea:3e:56:cf:79:4b:28:e4:
8d:8d:a2:0f:4b:52:76:7d:00:89:52:1e:35:99:69:
e2:c8:00:1f:26:46:ef:8e:01:bf:6f:a8:d7:ff:74:
93:a9:d4:cf:1b:ec:c9:a5:a3:e9:9b:93:95:41:41:
29:6f:c3:b4:a3:ab:63:f5:b6:f0:6d:53:d3:65:ad:
bd:be:bd:98:fa:5d:df:b0:c8:54:bb:47:7a:18:bb:
b0:a2:ec:a3:c8:19:38:6c:ab:74:2c:c9:47:a6:a4:
2f:d1:88:33:65:9e:4c:90:ca:e6:d3:ac:71:d8:33:
92:dd:ee:1c:62:d4:c5:3a:4c:f9:90:0e:01:40:6e:
b5:2a:b8:90:33:c3:b9:00:73:02:8d:ec:66:aa:70:
4f:d4:ef:58:30:20:14:55:bb:50:04:74:09:69:54:
ca:d2:7e:b0:0f:a3:63:b4:43:72:fc:b7:d1:ad:94:
18:f1:ec:7c:d6:2c:10:2d:77:50:a5:f3:f1:9b:81:
f7:da:8d:dc:2e:f9:93:61:71:f4:d8:1a:8f:6e:51:
c7:d0:9e:22:7b:d3:fb:e8:70:19:a1:c9:d6:e3:4c:
95:a1:61:88:a9:23:2f:42:c1:aa:3b:b0:49:b7:7c:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:A7:1D:71:9C:92:77:7E:EC:9E:C9:F1:62:DE:74:6F:6B:96:1F
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:26:71:60:c5:38:12:24:24:00:18:2b:b7:90:ea:8a:21:e8:
8c:bc:31:bc:0d:7b:12:0d:0e:59:bb:63:74:9d:9b:30:85:76:
0a:a3:13:f0:5b:23:4b:56:c6:91:ed:72:ab:96:38:77:19:d7:
41:98:4c:db:db:97:03:f9:2a:b5:8c:5d:49:a5:f3:59:5d:50:
0e:79:c5:b4:fc:bb:4d:19:71:8d:f9:0e:47:a8:60:d9:75:d0:
fd:a6:19:ab:85:4c:56:27:ec:eb:af:96:7f:76:1b:94:9b:43:
b4:bf:f7:f1:81:32:fb:be:ac:d8:7d:90:97:d7:69:72:09:3f:
20:68:46:cd:6a:8e:02:54:4e:3a:80:c2:f2:31:93:cb:0d:1d:
59:1c:21:d9:dd:e7:42:13:9c:95:ef:37:76:5e:c4:08:a2:07:
2c:69:f4:3f:85:97:bb:0c:90:29:b5:79:3d:78:ac:a3:44:b0:
d0:a3:83:8b:be:ef:72:ab:b2:67:26:52:d1:39:27:b7:d5:f0:
f4:34:46:3b:71:94:06:9c:d4:44:5d:98:99:c9:9b:f2:d9:2c:
7d:85:5f:a0:ee:4b:07:6d:2a:67:91:41:3e:89:17:61:67:58:
6f:cd:b3:02:68:cb:31:7f:ee:05:83:b0:00:3f:74:ab:88:be:
11:17:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 13:54:10 2026 by rpki-client