Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File: tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier: 3ZhGFYpR8XuC1Cjnvgm8Glu18x4FGqcXjZhKRBMfTDg=
Subject key identifier: D0:0E:58:10:8B:CB:3C:8F:46:E8:5A:DE:AD:C1:4B:9E:90:2C:F2:33
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 019E1C7DA8FBB73212048B8CEC81281E75A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number: 11
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: 9Uh8hi2XjzjTI07m52BOUEVY774.roa (hash: yoDrm0qg0msJJ0YvgT2enc8jij0zEDKh7V20lRAU8j4=)
2: pIrh8t_NNRD8MCPix_SqJSVgY7E.roa (hash: eE3cynxx6yPYag5fkQ+E+tY5KNgvElDMK0Zwn7c5OSI=)
3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: bu0YzDVzEdCRfSZzriGwRpzJXoEWZ7BPmq7SodYiK1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a8:fb:b7:32:12:04:8b:8c:ec:81:28:1e:75:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=d00e58108bcb3c8f46e85adeadc14b9e902cf233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:d5:e4:61:97:11:2c:62:dc:8d:b9:7e:ea:
f4:30:cb:a9:f9:e4:06:77:26:dc:ac:0a:e8:75:c3:
5d:29:d9:71:a2:fe:8d:9f:79:3f:ea:e5:46:33:3d:
4b:a1:e5:60:5a:3b:11:55:26:4c:e8:8d:b0:e6:aa:
88:db:4a:22:4c:10:e1:86:9e:67:d8:0d:09:4a:a9:
29:04:fd:c2:1b:bc:bf:6b:85:22:71:29:36:03:e4:
ab:17:a3:38:f6:d2:ce:d3:9f:d8:ee:50:99:1c:c2:
46:c9:c7:dd:b3:a6:fa:76:e3:9c:14:18:ca:e1:1d:
ad:e5:7c:4f:b3:b9:ab:8b:72:4c:bd:de:9c:9b:a9:
54:26:5b:d5:1a:b6:60:42:d2:d2:5f:29:7f:98:cd:
8d:58:9b:22:5d:e6:8b:06:ef:9b:81:f4:ee:cc:b3:
18:35:14:02:1a:6b:fe:d4:0c:2d:0e:07:c6:3b:9e:
7d:f3:d8:0a:68:59:54:c5:ed:2a:f3:ae:46:8d:18:
90:e8:08:c2:f1:c3:27:cc:f2:c4:9d:88:7f:f7:6d:
37:d7:d5:5c:cb:19:38:47:b0:e8:ee:d3:e0:65:c0:
66:ac:60:7e:8b:f1:a7:3b:fe:a0:46:57:e3:b1:f5:
be:61:1e:2e:ed:d6:0b:57:12:6c:b2:c4:c2:2c:15:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0E:58:10:8B:CB:3C:8F:46:E8:5A:DE:AD:C1:4B:9E:90:2C:F2:33
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b0:d2:6a:a0:c7:d7:da:90:7a:1b:8a:23:0f:33:6b:15:bc:
e5:db:36:ca:fd:5d:14:38:88:3f:58:06:dc:01:9f:f4:9c:16:
a5:da:f2:2c:90:74:43:29:b0:bc:3e:7b:6d:12:2f:1d:28:f3:
9e:dd:e4:0e:1e:bb:5e:b7:73:b4:8b:ca:fe:06:eb:b7:88:8d:
c7:70:23:31:b0:ed:15:93:c2:21:88:60:90:80:54:b9:b9:1f:
a1:53:df:8b:f9:e6:ae:3f:b0:64:73:59:2f:be:a9:0e:56:74:
0c:7c:0d:f6:a5:01:39:5d:1b:bd:41:96:47:0c:2b:22:8f:6e:
aa:77:f5:bf:23:2e:b9:76:84:eb:df:e0:38:ed:dd:66:cd:62:
57:26:77:b8:dd:31:ca:e7:cb:71:9d:15:06:b8:35:44:9f:8c:
46:91:2b:69:dd:d6:77:8a:4b:5f:b2:c1:9e:7a:a4:21:6f:47:
4a:b6:87:17:fa:e9:1c:9b:cb:c2:70:6c:a6:32:93:e1:8b:29:
58:bc:0c:1a:61:1d:e5:f4:f7:c9:e3:fb:08:aa:71:a0:81:40:
8a:0b:72:da:c8:a5:d2:6a:78:4d:39:73:1c:3a:5b:26:3f:bf:
a9:1d:70:1a:94:1f:40:3f:46:63:07:8e:aa:d1:71:7c:03:95:
74:4f:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:02 2026 by rpki-client