Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: YWXZCKIWoEchNpDqMWXTZV278XU872ONEmuGuAKvDZI=
Subject key identifier: 08:34:48:63:2A:E9:76:0D:75:14:FE:C3:82:C6:7A:A1:DB:0B:A4:05
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 019F85D7632481E36A66B17734337E920A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:53 +0000
Manifest this update: Tue 21 Jul 2026 18:01:53 +0000
Manifest next update: Wed 22 Jul 2026 18:01:53 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: ZmIonHLxfWwPpOCkEXJ1T536SPXZ6q9FWx2VoZi7B+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:63:24:81:e3:6a:66:b1:77:34:33:7e:92:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Jul 21 18:01:53 2026 GMT
Not After : Jul 22 18:01:53 2026 GMT
Subject: CN=083448632ae9760d7514fec382c67aa1db0ba405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:dc:c9:66:02:e1:43:7e:7e:a2:a8:68:8e:
68:b1:2b:bf:09:f0:2a:9a:aa:48:6c:ac:97:ee:7c:
52:2a:d2:5f:95:e8:a2:fb:8f:41:59:f0:cf:0e:e1:
e3:9f:9c:bb:ab:5a:db:69:16:61:b8:33:ea:f3:f9:
13:c7:d7:18:2b:77:56:48:b6:b9:cc:81:80:7a:3d:
56:32:23:1c:2e:bc:1e:a9:d5:a1:e3:ef:5c:ae:36:
d3:cc:ea:ae:07:e6:5c:d7:fd:5c:8c:80:d7:aa:81:
d8:3a:a7:92:c3:91:4c:19:1b:e4:d8:c6:98:2a:33:
bb:7f:48:f3:2b:1d:d5:c9:0a:db:34:49:1e:74:37:
15:79:3d:0a:30:30:d0:55:df:d2:94:c1:9e:fd:80:
ae:a3:7d:61:c2:44:7d:9f:fe:43:f6:30:3e:01:63:
8f:6b:14:d2:74:b5:c8:49:46:7a:47:93:38:78:ab:
57:2e:a4:05:a8:f6:50:71:64:87:0a:45:aa:d2:91:
55:a6:4d:53:de:82:6f:9f:f9:ad:41:1d:a0:35:a4:
11:92:85:c6:21:49:af:bb:40:f5:f9:df:13:00:a3:
38:39:47:ec:cc:00:6f:04:11:d5:52:d1:8a:1e:a9:
24:58:70:90:dd:75:35:64:53:84:d3:97:9d:f4:be:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:48:63:2A:E9:76:0D:75:14:FE:C3:82:C6:7A:A1:DB:0B:A4:05
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:c7:2d:c7:4d:69:45:38:bf:c9:01:49:ae:a1:7a:ef:2b:
17:b8:4e:cf:0f:34:a3:22:30:e0:1a:24:81:6f:f6:19:26:9a:
30:f6:59:9d:39:8b:f4:4b:1d:5b:82:74:45:af:de:47:b2:6a:
61:c2:a1:e5:b8:43:7a:99:df:01:49:f5:f8:9d:f1:8c:58:f2:
31:76:3a:2e:cc:be:d7:4f:00:12:9d:e7:ac:fb:48:fb:bb:44:
a5:60:e2:f7:b0:17:5d:fb:ec:79:12:2b:8d:8d:e7:f8:40:40:
77:de:8b:fb:96:b3:c5:7a:2f:87:82:c9:a5:7d:7e:0f:bd:72:
14:63:9f:5b:39:2f:d3:ab:17:66:f8:90:9a:f1:d3:49:8e:c4:
b0:83:14:88:90:e9:1d:9c:54:ec:6f:90:4b:bb:f4:96:10:cb:
71:13:2f:60:e5:9f:20:c1:fb:04:87:22:1f:66:89:89:ca:dc:
41:32:dc:70:ad:7e:2f:e4:90:e3:9b:9f:23:78:d2:2a:90:c8:
93:af:2f:92:41:b0:e9:a0:3c:74:82:69:db:0b:93:3c:2b:69:
30:53:95:01:af:98:03:fb:df:41:60:9c:a9:50:de:67:8f:33:
56:ae:51:1e:15:2b:1c:72:7c:fc:e5:f2:21:46:96:36:c0:12:
fd:9d:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:44 2026 by rpki-client