
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: ftUaGma7JmXfRpA14m6HGRq6AHS1G9UUwRt9Yz8Krxs=
Subject key identifier: EC:3B:64:C8:91:FC:67:7A:1F:45:F8:A9:EF:A4:6B:BD:AB:D2:D0:BC
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019FA1849F1AB5F8CDBB16081338264C0031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 03:00:50 +0000
Manifest this update: Mon 27 Jul 2026 03:00:50 +0000
Manifest next update: Tue 28 Jul 2026 03:00:50 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: LjDbEVKxB1Tc9JlgYegSyvgD4ZhC+hrWqXVDKxRXpcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:9f:1a:b5:f8:cd:bb:16:08:13:38:26:4c:00:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jul 27 03:00:50 2026 GMT
Not After : Jul 28 03:00:50 2026 GMT
Subject: CN=ec3b64c891fc677a1f45f8a9efa46bbdabd2d0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:3b:43:fd:06:3e:66:6e:c8:55:6a:b7:9f:
34:6d:27:b7:0b:b6:cb:1a:28:a7:96:ae:67:a8:20:
a4:d3:dd:82:44:4a:b5:7c:0a:c8:c7:eb:59:13:2a:
8a:95:8f:e3:9f:b1:a5:83:6d:7e:38:da:1f:2f:61:
89:70:20:4b:c1:e4:6d:8d:8c:43:6c:f4:1d:e7:56:
8d:63:c0:47:17:2d:43:04:42:7f:b7:39:09:a1:3c:
06:2f:dc:d6:6e:04:3e:fa:b1:d9:87:ad:1c:3c:b3:
bb:12:6e:9b:6e:33:fb:7b:71:23:2e:90:db:66:91:
43:e9:8e:d2:64:62:df:7f:7f:ae:fc:55:8b:74:6c:
04:60:06:ed:9b:c0:28:c2:6f:73:cc:52:9f:d1:67:
d6:f9:cc:7e:18:48:fd:8e:ea:8d:b2:c4:3d:28:a2:
37:0c:73:00:e3:47:fb:7b:94:fd:43:e8:4f:18:31:
25:79:be:1c:98:80:77:d4:e2:ef:a9:00:c6:e5:f8:
5e:6d:ca:20:db:f5:62:8e:81:b5:d0:ae:f5:2e:c4:
e5:f0:d1:60:94:6d:9f:d6:5f:dc:24:d4:c6:2b:a6:
6f:14:90:0f:3d:71:12:8c:c7:b1:4d:8a:99:57:9e:
d1:d3:54:3e:4b:42:0e:45:39:43:ee:a2:a2:ec:b8:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:64:C8:91:FC:67:7A:1F:45:F8:A9:EF:A4:6B:BD:AB:D2:D0:BC
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:4a:1b:97:ec:09:25:c6:17:06:f9:89:0c:2e:6a:87:d0:
56:da:4f:5f:df:c7:1a:b5:3d:ef:ac:d7:83:d6:89:70:1d:29:
8a:48:6c:68:c0:36:0e:30:65:68:36:b8:34:f4:de:e6:b6:fb:
39:d3:9a:cf:52:f2:f5:6c:3c:34:a1:b2:02:2c:7a:a5:13:87:
b8:5b:40:a4:16:92:a9:95:f2:d8:8d:2e:5f:1e:c1:95:67:0a:
a9:21:83:b6:b4:44:96:34:d6:f5:94:5c:64:db:77:78:e2:64:
a4:64:51:d1:db:12:00:15:47:5a:14:81:03:f8:26:9a:b1:b9:
f8:30:0c:22:ab:91:c5:cf:ea:87:0e:3c:2f:d1:ed:cb:2b:dd:
b3:1e:8d:6e:1f:81:c6:97:de:90:3f:d8:f2:82:48:7b:a3:52:
4b:67:c4:7b:20:92:b8:ca:5d:44:0d:13:69:9d:4f:cc:37:68:
a5:e9:bb:f3:ba:1d:f5:7c:ba:97:d7:27:51:bd:56:c4:b2:e1:
a5:1e:3b:fa:2d:c9:48:bd:8d:29:e7:ed:ce:8a:35:08:71:d0:
6b:17:eb:9b:53:0a:93:3b:70:5a:72:83:76:ec:7e:59:89:80:
44:da:5d:67:56:3d:22:2d:5f:d8:84:0b:31:c1:13:5d:a9:29:
39:ce:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:37:27 2026 by rpki-client