Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: 6JjxPP8rwgbTXPPuhqNO5HQQxarkQ2xLL/OrwY/DJRQ=
Subject key identifier: 2F:6B:E6:D8:8E:35:41:AC:8E:22:4F:BA:1A:45:41:33:46:05:2D:78
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019E1ED9F8FA32139CE05FEA223E13D48CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 07BA
Signing time: Wed 13 May 2026 01:01:01 +0000
Manifest this update: Wed 13 May 2026 01:01:01 +0000
Manifest next update: Thu 14 May 2026 01:01:01 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: NxdAjsISFLgIEXQ+Mi4UoLqvcBxCqT9MFf8Ldnum/Ds=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f8:fa:32:13:9c:e0:5f:ea:22:3e:13:d4:8c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: May 13 01:01:01 2026 GMT
Not After : May 14 01:01:01 2026 GMT
Subject: CN=2f6be6d88e3541ac8e224fba1a45413346052d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:e5:5f:59:6c:87:39:02:1d:12:f4:de:fe:
82:37:48:67:b4:a6:5c:47:f3:5e:d2:0f:bb:ae:d9:
df:fc:a4:09:1c:f8:52:20:a8:c2:69:d0:08:7c:6f:
05:16:d6:94:84:24:84:41:16:86:c3:91:05:fa:36:
15:3a:54:e3:0a:c4:e2:08:aa:71:1c:30:af:6c:e7:
f5:57:0b:99:2f:cb:4b:43:8a:e2:f2:43:d9:47:e5:
f9:e4:2d:28:e5:3a:79:6e:9c:e6:33:f0:b3:e7:b5:
8c:0d:7e:aa:71:24:0c:8b:2c:f6:50:37:d3:2f:68:
6f:7f:5e:36:f1:f5:1c:19:a5:ad:3d:eb:3e:6b:1f:
70:1f:1d:ac:ed:8a:40:15:48:b3:51:c7:a8:f6:47:
3a:a1:96:68:9f:a9:55:08:38:66:42:42:e1:7e:18:
47:12:d1:2c:2f:c4:dd:06:fe:36:f5:bd:d1:ef:82:
a7:f8:b4:9d:6b:b5:0f:09:cb:c4:5c:be:6d:fe:0b:
16:68:e3:66:f8:75:4c:0d:cc:82:91:a5:f5:5a:2d:
83:8e:58:a4:61:39:8e:c2:a5:7f:37:10:32:8a:5f:
42:12:3e:6d:09:c7:34:a8:bb:fd:c4:66:5c:fc:e9:
8c:fb:ef:35:01:7c:5c:25:c7:47:74:d7:e7:9f:57:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:E6:D8:8E:35:41:AC:8E:22:4F:BA:1A:45:41:33:46:05:2D:78
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:51:fd:e3:cb:d7:4c:c7:16:74:54:75:6f:8f:12:64:68:
e1:04:e7:97:21:2f:3c:9b:5b:c1:3c:23:74:4b:1b:95:8e:20:
aa:ce:27:04:b5:42:f0:a9:1c:1f:8f:5a:af:7f:73:ac:9f:0e:
a5:1e:f3:ea:2f:d0:07:32:60:34:fc:0d:99:a6:88:36:bf:35:
44:63:18:e8:18:2f:14:1a:63:73:26:ef:43:0b:7b:ce:fb:1f:
33:cf:71:18:59:87:d3:87:b2:ce:d7:37:9d:0a:5e:df:a5:18:
13:60:98:3c:c2:bf:19:e5:56:e2:a6:49:5f:16:00:6f:00:92:
fd:bb:84:08:f8:04:cc:3f:19:93:27:cc:00:c8:2c:6f:1c:b9:
5b:44:ae:8b:ac:97:6d:b4:be:b6:c0:4b:c4:a5:93:a5:2e:e1:
c3:59:6d:cd:8a:3c:4b:01:33:ba:8f:35:2a:28:6f:6c:1b:b5:
07:cb:5c:38:27:27:81:5a:76:a6:55:4b:3d:b4:99:1b:f2:be:
78:8f:23:70:b6:5f:55:09:79:e6:b2:7a:ca:56:cf:0c:9e:e3:
c7:31:23:12:1a:71:7d:93:d7:19:ae:99:d3:3d:f4:c5:d0:d4:
a1:5b:d6:7d:ba:4e:3d:f2:e5:5c:88:39:4a:39:4a:84:f8:ef:
7d:45:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:14 2026 by rpki-client