Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: y9zFPD9NUIkcjcO01w2ydoa77ae1sNhW4XqjS27Y+PQ=
Subject key identifier: 35:1A:2C:01:52:37:78:58:99:B8:5B:86:48:CF:C8:3C:E2:75:4D:CC
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019F82309AD65D61E714ED5590FA7EE0DDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 01:00:51 +0000
Manifest this update: Tue 21 Jul 2026 01:00:51 +0000
Manifest next update: Wed 22 Jul 2026 01:00:51 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: smvEx5i2iWrYidiLaDh8H91jspK/oZa3pJ3haQEUClY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:9a:d6:5d:61:e7:14:ed:55:90:fa:7e:e0:dd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jul 21 01:00:51 2026 GMT
Not After : Jul 22 01:00:51 2026 GMT
Subject: CN=351a2c015237785899b85b8648cfc83ce2754dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:82:6a:57:33:74:b7:71:ab:81:2a:f3:6a:
23:df:29:39:5c:1d:97:89:27:ef:d2:70:66:e5:72:
1b:09:0d:3a:da:c4:be:eb:1d:e2:9c:b4:58:1d:6c:
09:d9:1b:50:6f:ce:e4:a6:84:66:ff:6f:c3:d9:07:
a2:f5:c3:9f:6e:ee:5f:cb:45:04:bb:69:1a:b7:84:
f4:3c:9d:65:aa:94:3d:32:7f:82:db:f0:3f:fc:09:
dc:cb:6b:c0:f8:e8:83:7b:0f:4f:67:12:aa:4c:9d:
f2:c2:1e:5e:2e:1c:68:15:15:07:8b:98:98:d6:09:
e7:8b:ff:cb:c2:2a:f1:e7:dd:2e:45:d2:cf:01:b5:
82:d1:63:21:a8:a0:1d:ba:a7:d9:35:16:60:b1:5b:
17:75:54:9e:34:2c:e0:7a:68:a3:89:fd:d5:98:71:
a2:ce:0c:72:79:6e:de:9c:ba:07:bf:02:c2:44:46:
f3:e6:9d:c8:25:91:a3:39:8a:0f:4c:2f:5e:6e:c8:
fe:a4:a8:c6:4d:af:d6:68:0f:60:4c:18:c2:f0:38:
e5:b9:97:10:cf:69:43:24:a2:9a:0d:6c:18:ea:cc:
b5:49:68:75:99:c8:e4:bd:19:cc:d3:d8:d0:a8:f9:
3e:e2:82:fa:0a:6c:ff:47:54:61:1b:48:e4:60:fd:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:2C:01:52:37:78:58:99:B8:5B:86:48:CF:C8:3C:E2:75:4D:CC
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bc:36:d6:a2:65:68:ea:e2:94:e1:4f:c4:9a:ba:9f:28:d8:
04:82:85:1a:e6:dd:a8:60:3d:9b:63:ac:ad:10:4b:ce:bc:a8:
5a:0d:91:fd:8d:28:87:aa:c6:8c:ff:3d:88:c1:5e:de:e4:59:
9e:8f:b5:13:8e:8d:41:97:d7:7c:7c:c2:f8:37:09:f3:85:5b:
0e:7d:70:61:75:c5:a8:e4:93:4b:c0:91:ef:6b:9e:57:3b:9e:
78:e3:95:30:a5:2d:f9:65:55:a2:b5:6c:4b:a2:08:b3:9d:ce:
0f:8d:1f:de:4b:c4:e5:97:a9:b0:98:0f:2b:5a:c9:6c:bb:d1:
eb:46:18:46:89:75:c9:9e:b7:7f:6d:2b:ff:ab:36:3b:07:fd:
cb:46:6f:9f:80:13:1b:76:5f:1b:7e:8d:84:a4:df:c1:bb:1d:
8d:b2:5d:1c:1b:0c:80:e2:fc:8f:4a:c4:dd:d9:30:73:98:29:
95:b7:f3:44:91:67:d1:4a:e9:0d:16:8a:6c:c5:a9:fb:60:ee:
6a:03:93:d5:ce:c1:bf:68:7e:b4:3c:2a:ca:81:06:f1:00:bb:
59:07:a2:11:e5:44:01:10:7d:b7:e9:6a:9c:8f:fc:0f:1a:fb:
c1:8d:ce:0c:2d:1e:08:c1:fc:45:ff:ea:1b:e0:00:2d:a0:25:
31:5b:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:08:49 2026 by rpki-client