Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: JwbvcOH1VTdD0p0celhvO20Spua7RRjhXIXOOK7phy0=
Subject key identifier: DA:E1:7B:4B:AA:31:FC:44:1C:83:6B:86:5B:EA:44:26:AC:8D:B0:B7
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019F38608C81C385E3AD0F9CBB478E93B6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1409
Signing time: Mon 06 Jul 2026 17:01:19 +0000
Manifest this update: Mon 06 Jul 2026 17:01:19 +0000
Manifest next update: Tue 07 Jul 2026 17:01:19 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: SN2IYgarYxf/D368h5jge6SLsHF+ftEaIN7r/V9R/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:8c:81:c3:85:e3:ad:0f:9c:bb:47:8e:93:b6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jul 6 17:01:19 2026 GMT
Not After : Jul 7 17:01:19 2026 GMT
Subject: CN=dae17b4baa31fc441c836b865bea4426ac8db0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:9e:37:19:ac:6a:4e:9e:90:4d:7c:ad:ca:
2a:14:d6:93:d5:93:66:cb:0d:15:43:a6:be:99:3c:
b0:51:82:f2:c2:69:02:d0:19:b8:85:7c:47:4d:fe:
a0:82:01:34:75:6a:c5:b6:6e:0a:bb:f2:07:a5:45:
34:27:12:12:fd:8f:eb:f8:e4:a0:7d:05:ec:a7:52:
50:01:43:18:7f:ed:d3:74:6d:e0:2a:15:55:6e:c7:
59:1f:ab:02:b0:58:3a:71:3c:b6:10:7e:80:96:42:
0a:1c:28:c2:2e:7e:94:98:33:2a:a7:02:20:17:77:
7f:d1:a8:d8:50:3a:02:7b:66:5d:e3:42:d6:18:d0:
5f:e4:c9:01:48:8c:71:a1:af:07:be:84:66:50:58:
a0:6a:11:30:07:df:15:6e:7e:c2:d1:6c:fd:63:e3:
df:4b:62:1c:90:c9:e6:54:e9:08:c5:fb:46:1b:77:
0f:70:a9:f3:c6:aa:7e:c5:1c:ac:06:af:a7:ad:ab:
6d:1a:e6:8b:bb:55:1b:d6:32:a0:2e:61:73:8c:f6:
77:8d:ac:05:2d:13:f8:2c:fe:d6:74:d5:4f:33:70:
96:ac:e9:83:c3:1a:d8:3b:b0:1b:e0:44:42:4d:a0:
77:e0:2b:b2:c0:b6:9d:08:b6:60:bd:62:a8:28:fa:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E1:7B:4B:AA:31:FC:44:1C:83:6B:86:5B:EA:44:26:AC:8D:B0:B7
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:90:a6:60:69:9e:e1:3d:e2:cc:a1:97:f6:0d:e9:4d:0b:da:
e0:bf:7c:d6:7f:9f:67:ca:b5:36:8d:2c:b3:8c:1b:d2:4a:72:
a8:c4:06:7e:6a:99:57:5d:eb:d7:b2:d8:a0:e5:a6:db:7a:10:
b6:4d:d9:7e:57:79:f1:ff:8b:3c:61:6d:7d:2b:1f:f3:3a:f3:
f1:29:1f:64:cc:a4:ea:95:95:f3:d8:cf:1c:a6:d1:4c:a9:2a:
75:7d:b4:b5:79:82:68:60:8c:28:bd:19:04:d4:24:06:69:d0:
59:7e:05:22:a9:5d:90:82:6c:9d:57:16:f6:ee:3e:14:f7:04:
25:75:0e:ae:ee:e1:21:a9:2d:c9:ba:6d:65:b6:65:45:e1:fb:
3a:fa:3e:f9:70:27:c4:81:ab:c9:ef:1f:31:5b:f8:25:7a:ba:
c5:25:ec:ad:a2:ff:e2:27:ca:c5:0c:3e:2a:ad:b9:3c:4d:c5:
80:8d:67:a4:e2:ee:f0:b8:06:a2:10:20:1d:26:b2:b9:46:7e:
c2:23:f1:6a:40:22:dc:ae:1b:35:bc:c6:d4:85:92:43:e6:ba:
70:00:fc:c2:ba:bf:d1:fb:b4:fa:ed:6f:92:00:fb:b4:21:c4:
d4:8d:04:f9:17:3c:57:ab:de:44:bc:37:9e:ea:d0:c5:12:73:
ad:21:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:19:56 2026 by rpki-client