Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: 6nGs3dLvoN5givz72hVpzj5heelYkiv/kSC1NmBdZPA=
Subject key identifier: FC:69:B0:18:ED:1B:35:0E:4E:08:FB:4A:55:AF:C0:1F:2E:C4:E1:45
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019E1D904126424ED412F289F82000306F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: KuPTZMxQntfPvhpCj5YtfOYSxf0JS9oUyhTpiTJknWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:41:26:42:4e:d4:12:f2:89:f8:20:00:30:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=fc69b018ed1b350e4e08fb4a55afc01f2ec4e145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:d6:33:fd:d7:80:ee:e2:ef:6f:cc:ef:6b:
60:75:a2:52:47:a9:d3:9d:ae:72:df:dc:81:ee:32:
95:a0:b9:f7:b4:90:67:99:fc:87:4e:96:82:17:29:
38:98:fa:58:4f:51:c2:58:72:0e:a9:71:d0:a6:99:
15:34:1c:d4:ca:00:11:d2:ec:0d:78:6c:6d:7c:b0:
4e:df:6a:98:19:68:ac:c0:98:3b:1d:33:2c:5e:73:
93:e5:e6:3b:2d:2d:6e:30:02:c1:4a:d2:73:a2:f6:
76:7e:41:70:78:a3:20:4a:99:cd:67:ea:1e:c4:50:
3e:fa:91:23:6e:01:2b:95:5f:eb:95:33:e6:cf:54:
9a:14:0b:12:a5:fe:cd:ef:5c:d6:c3:47:50:3c:aa:
46:30:f6:0b:e5:19:25:67:ac:67:cf:97:11:d4:a3:
b8:d2:58:cf:18:f4:49:12:04:a9:70:9f:aa:b7:b7:
60:00:21:ee:d5:25:27:b4:19:87:8b:fa:57:e3:f1:
12:01:6e:62:8c:a2:9f:58:73:80:5a:d7:c7:dc:58:
6a:33:28:4b:de:2f:e2:cf:84:a0:85:a9:65:0c:05:
0b:7f:56:11:47:17:cc:2a:2c:2d:5b:25:cc:6b:85:
60:cb:c3:65:93:f5:0d:01:14:b4:dd:8f:fc:1e:74:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:B0:18:ED:1B:35:0E:4E:08:FB:4A:55:AF:C0:1F:2E:C4:E1:45
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:49:bb:63:0b:e4:3c:b9:f2:f2:63:f7:df:48:6e:e2:59:
8b:53:e9:d0:58:ba:a4:38:5b:80:5f:e5:5d:37:10:7f:d8:23:
1a:c8:11:42:37:89:a2:b2:79:2f:7d:8b:a5:da:a0:b6:2a:40:
a0:37:94:ee:7f:e5:e2:e6:be:14:02:5a:58:52:ab:99:30:d9:
7b:00:65:04:91:64:79:3c:3d:20:cb:7a:c6:bf:86:e4:e3:f7:
3a:06:35:88:9b:17:0a:65:5b:b1:12:c8:8a:19:d9:b1:20:c0:
a4:45:b7:5e:07:cc:a9:ad:de:ee:17:9a:3b:b8:68:cc:9d:d7:
d2:0b:59:9f:67:da:86:ed:c0:83:b3:a8:1d:ea:37:e8:2f:7a:
61:1e:5f:1a:58:4d:70:46:bd:ac:b9:4f:8e:0d:94:a7:33:1e:
e7:fb:c9:53:e4:3b:74:c1:fb:eb:7f:6f:12:e7:8f:19:50:61:
26:b3:2c:77:1e:02:18:5e:45:89:12:1f:07:85:31:7a:4f:f5:
98:38:6c:21:68:aa:5d:46:45:d5:cd:8d:64:1e:e9:bc:57:08:
43:48:84:14:12:b3:1a:c2:ea:f7:6a:f9:e5:72:1b:95:83:c1:
84:0d:41:e5:6b:7f:f2:cb:8e:70:21:b1:3f:1e:ff:54:e9:90:
f9:b5:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:41 2026 by rpki-client