Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: iwLr+4LoMjMElWmlo8H6mQGQn3VUZAh+8Tq2s+hAyCk=
Subject key identifier: EC:CF:40:8F:AA:CA:96:79:E4:57:E9:E9:9D:45:C7:07:B8:EC:04:5A
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 019FA1F26F03685C260CEBE2DFD10163960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 1431
Signing time: Mon 27 Jul 2026 05:00:47 +0000
Manifest this update: Mon 27 Jul 2026 05:00:47 +0000
Manifest next update: Tue 28 Jul 2026 05:00:47 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: gSpE2Pko2zp0jBFPgqnLFg+agjD1y3Td1j8PVa+9nBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:6f:03:68:5c:26:0c:eb:e2:df:d1:01:63:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Jul 27 05:00:47 2026 GMT
Not After : Jul 28 05:00:47 2026 GMT
Subject: CN=eccf408faaca9679e457e9e99d45c707b8ec045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:3c:89:5e:32:a0:a7:2b:a9:52:8d:0e:0e:
06:78:e5:40:1a:31:7c:ea:ee:09:77:85:5f:d1:03:
b8:cb:5c:ba:c9:16:64:cf:a3:c0:90:4c:75:74:c1:
16:20:a9:de:67:8a:62:9c:9f:11:ce:9c:ba:b3:d3:
bd:ef:62:4a:9f:ce:84:e0:9d:8b:8a:48:31:f2:ec:
87:30:64:e9:87:90:6f:71:7a:7a:cb:4a:0c:db:9a:
59:7d:87:f2:b5:a4:83:68:ef:bb:65:47:23:ee:a7:
7f:da:5c:c0:ce:d5:ef:2d:2c:2e:c0:b0:7a:07:68:
c8:f2:bf:fc:90:7c:37:87:5f:8e:2a:41:f9:7c:38:
51:91:f5:58:64:f8:e2:59:d1:31:08:0e:b6:37:5b:
91:23:5c:9b:ac:e5:01:75:aa:64:86:e2:f5:ed:ca:
0e:58:12:12:b0:34:f7:4d:fe:2d:51:bf:f1:da:24:
92:7c:58:38:56:6f:2d:20:44:85:d4:25:ae:55:6f:
e1:c7:b2:02:c1:a0:8e:ad:e5:c1:f4:88:ec:68:8b:
0e:c8:41:85:3a:13:27:53:43:2a:e8:c4:54:de:e7:
4d:a8:78:a1:d9:a6:aa:fb:03:2c:01:b5:d3:82:27:
44:7a:5a:83:6a:e7:6c:4b:9e:a3:84:65:51:11:66:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:40:8F:AA:CA:96:79:E4:57:E9:E9:9D:45:C7:07:B8:EC:04:5A
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:76:ff:e8:69:5e:f0:a2:12:60:47:83:e1:ca:8c:3a:c1:e5:
ed:b6:18:0c:4d:e8:d8:f3:8d:67:43:2c:01:2d:8a:1c:11:54:
be:3f:7b:3e:89:10:1b:53:e7:71:a6:7f:ed:4d:03:94:10:1e:
48:02:93:ea:53:7b:1c:c5:fe:26:6b:a1:6b:35:71:b7:b7:e8:
84:26:d8:f2:80:d6:c5:e4:06:5f:cb:06:81:f6:31:17:18:23:
dd:72:ed:1b:f7:e4:b4:0c:d9:03:2d:25:1a:59:de:f5:4f:e4:
98:ff:68:53:0f:c1:a1:4a:29:52:77:72:ca:83:30:dc:47:fc:
27:ee:3e:3e:a3:35:07:e3:7d:02:2d:d1:aa:c3:c5:dd:aa:3e:
39:1a:71:8c:90:b5:9f:f2:f0:b9:01:23:dc:29:55:d4:f1:0d:
39:c6:d0:14:b9:37:25:a3:89:57:7c:12:c6:d9:3e:9c:41:a1:
fa:0c:f7:df:f6:26:48:ef:cd:a4:0d:7e:54:56:47:06:6d:5e:
ca:1d:80:26:c9:b4:77:43:7b:15:19:3d:ec:f3:01:ac:9c:79:
53:3d:f5:18:5e:a8:6b:88:d1:88:66:5d:91:f7:bc:58:2a:1e:
1c:4b:12:1b:5d:e9:75:7a:f6:fc:e8:58:61:06:80:85:08:b4:
27:51:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:33:31 2026 by rpki-client