Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File: Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier: wO/fsHCDHypNVGvIkX9nveYQIL5FeVzEsFPeq2H5m7U=
Subject key identifier: 68:9F:F6:50:96:DE:A1:11:B0:49:15:C9:BC:60:4A:4A:82:D8:A6:54
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer: /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial: 019E1CB4D6D6F634D7F19D259F5928771038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number: 06
Signing time: Tue 12 May 2026 15:01:13 +0000
Manifest this update: Tue 12 May 2026 15:01:13 +0000
Manifest next update: Wed 13 May 2026 15:01:13 +0000
Files and hashes: 1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: trCKzvICcPPj9YqksZs/rJoTmKHejEXDQArawDb7klA=)
3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:d6:d6:f6:34:d7:f1:9d:25:9f:59:28:77:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Validity
Not Before: May 12 15:01:13 2026 GMT
Not After : May 13 15:01:13 2026 GMT
Subject: CN=689ff65096dea111b04915c9bc604a4a82d8a654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:4b:6e:9b:7c:fd:b5:1f:24:48:a9:b4:0f:
99:d4:dd:25:e7:0c:5d:77:69:98:cc:1c:ce:bf:e3:
06:a4:e4:52:b6:18:3b:ae:0e:56:5c:47:f3:e5:cb:
75:c9:3a:01:35:8c:d0:a8:9c:0c:ab:34:40:b4:8a:
8b:bc:26:b8:22:e2:35:f2:59:7f:99:87:24:da:08:
a4:33:44:7c:a0:8b:b7:1c:d1:8d:62:69:41:12:a7:
ec:b5:1e:67:3c:45:f1:46:80:c8:ff:d9:9f:64:61:
8b:cb:0f:01:b8:a1:ab:0e:bb:d0:ce:41:5f:37:76:
6a:7e:bf:ad:2e:8b:c2:b5:d3:89:ce:f7:71:cd:da:
7b:d3:e7:81:a7:7c:44:bd:3c:41:ff:53:37:41:c6:
b1:19:d4:39:6e:26:fe:82:63:33:ab:72:74:ba:e4:
25:49:14:6e:0d:51:47:52:81:bb:08:15:8c:d8:49:
c1:27:a8:28:8c:86:7b:56:ce:58:b3:39:7a:95:18:
9e:ea:28:91:d3:95:d2:cc:d0:b1:0b:80:be:5c:f3:
3a:02:be:88:90:3a:80:91:e9:df:23:43:16:44:d0:
3d:d2:ce:c9:e5:8a:b7:04:ef:00:59:a3:88:f6:98:
52:18:01:a5:47:78:f5:05:05:ef:cf:0f:c1:56:43:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:F6:50:96:DE:A1:11:B0:49:15:C9:BC:60:4A:4A:82:D8:A6:54
X509v3 Authority Key Identifier:
keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:20:f0:26:70:85:5c:0b:7b:b6:ba:97:38:ab:6a:84:49:58:
f0:65:a0:54:f8:c4:6e:95:1d:72:51:c7:4b:c3:37:c5:20:79:
e1:63:c6:a5:1b:55:46:0b:d6:2a:3b:b4:ec:d9:93:af:5e:07:
49:53:95:6a:d0:92:db:3f:6d:da:39:d0:25:b5:0d:fd:ef:c5:
b4:6a:05:29:d1:00:2f:6f:34:1b:6a:4d:ac:52:fd:16:62:d9:
d0:cc:af:f9:c0:cd:8d:ce:1b:66:f0:e1:6d:59:f9:8c:a7:f4:
a6:66:41:d6:4d:3c:26:37:00:ad:ed:1a:16:ff:a0:fc:68:7a:
07:01:21:f7:c9:2f:ea:99:bf:cd:73:2d:e6:05:9f:0e:30:a2:
ac:60:c4:dd:c3:c2:2b:fb:91:38:57:8c:29:9f:fe:c1:ea:08:
cf:9f:6a:13:2b:5a:c9:8d:a2:2b:79:f0:05:14:45:cd:ab:36:
5a:05:94:0b:fe:b5:f9:c7:72:06:f8:4a:ef:da:f7:cb:f9:55:
a8:b5:55:2f:00:c1:d6:9f:dc:67:95:ae:06:d9:8c:25:22:34:
bf:da:a0:8b:fc:bf:2e:ba:ea:48:f7:90:40:a2:d7:77:db:1c:
f5:d5:03:c2:de:0d:cf:3d:14:31:d0:a6:6e:37:98:b7:7e:66:
bc:ea:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:58 2026 by rpki-client