Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: H+N8AAu/ctlA0iPAnp7IkROArklEsyZRbhLNMsWKB8Y=
Subject key identifier: B8:1E:AE:B4:AC:68:FE:E7:0F:8B:D6:0F:E7:D4:A0:3B:24:88:48:86
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019E1F10989CC58A8F79FE898C90F9AE2960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:00:41 +0000
Manifest this update: Wed 13 May 2026 02:00:41 +0000
Manifest next update: Thu 14 May 2026 02:00:41 +0000
Files and hashes: 1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=)
2: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: rRHPOuerEANWrWvWUruX2hOLWSM2GJTslpEcOHlYRO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:98:9c:c5:8a:8f:79:fe:89:8c:90:f9:ae:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: May 13 02:00:41 2026 GMT
Not After : May 14 02:00:41 2026 GMT
Subject: CN=b81eaeb4ac68fee70f8bd60fe7d4a03b24884886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:48:b7:61:a3:b9:72:0d:b7:bd:87:90:c9:
78:3e:e9:1e:12:03:57:d3:99:6c:e8:18:44:51:34:
1a:3d:44:d2:2b:58:5f:81:3a:c7:b7:ca:c6:34:42:
2c:b1:82:e6:c3:ac:c2:d2:58:b2:f3:7b:9a:38:57:
91:c7:2c:8a:84:70:5e:ba:d8:9e:27:0e:ba:dc:88:
3a:2e:82:8f:32:22:47:75:ce:1c:c2:e0:f0:64:35:
eb:2e:58:3d:9b:a5:50:cb:b6:a3:d5:fd:52:9f:eb:
32:05:b8:3a:c0:b6:57:c0:bc:2c:94:3a:c4:b6:5b:
a3:0f:cb:6f:7d:5e:f0:d7:c9:7f:1e:c5:df:49:84:
14:06:b7:1a:8b:83:1c:26:0d:a2:8e:4d:bd:1d:d4:
77:fe:01:0e:99:a7:c7:1c:d3:8a:7c:ea:d6:a5:15:
84:0e:21:97:13:24:60:5d:ae:43:18:dc:71:d1:e9:
f3:9f:e6:a9:62:e0:6a:e3:c1:fc:09:22:b7:7f:40:
0b:57:40:18:5c:50:72:76:50:cd:7f:5f:bf:2b:2d:
4d:8e:43:27:6f:cb:17:44:c4:74:90:10:81:91:b2:
95:52:af:5f:d9:75:5d:c1:c4:77:bc:93:dc:42:bf:
2e:5f:e0:15:06:dc:fe:5b:81:25:e5:8d:58:98:53:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:AE:B4:AC:68:FE:E7:0F:8B:D6:0F:E7:D4:A0:3B:24:88:48:86
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:b3:fc:36:14:e6:3d:7f:a3:72:47:ef:8d:6a:66:7f:24:
2c:50:e6:6e:45:6d:41:cd:12:58:3b:c1:04:54:7a:6e:72:d7:
a2:b8:44:a5:d0:cb:fd:41:e9:81:46:38:28:32:0a:d3:7f:31:
4f:2b:c2:09:51:08:67:25:65:85:03:b4:08:44:68:9c:52:ae:
f2:de:3d:10:e1:34:ac:f8:e5:b0:34:45:90:ab:f5:ca:ab:fa:
4f:34:5b:99:df:23:ed:5c:4e:e0:d1:22:97:18:f4:76:d4:74:
a8:97:28:ae:d3:62:0b:19:fb:90:70:8e:69:25:a4:60:58:90:
ab:1b:e6:36:e6:81:14:3a:70:54:c7:af:ef:f3:17:91:9f:fc:
58:a1:01:0b:6d:b8:45:fc:04:3d:47:32:d0:b7:5b:90:7d:83:
34:fc:b9:4c:ec:ff:51:47:e6:cb:19:d5:b9:59:2e:1a:a5:41:
b0:3f:43:1f:a4:56:ae:94:d9:85:ff:b0:90:0f:72:3f:ee:29:
9a:55:a4:ce:95:2b:93:f4:c1:5f:11:35:b4:e1:37:db:d2:fa:
d2:11:85:b6:95:0b:a4:99:93:ef:60:a5:a2:dc:24:bc:94:25:
aa:d6:2e:b9:6e:61:95:c4:1b:39:55:65:4f:2b:79:97:46:3f:
1b:50:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:04 2026 by rpki-client