Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: bfqRJYN7DrnsO0gb72xeeekfNCyjA7PD/cfiQtGtkmU=
Subject key identifier: D4:63:0E:BB:F6:F4:18:ED:2E:CE:7E:9C:F2:5C:A7:B4:3A:1E:6E:AD
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019FCC0172AF0C829E5273272AD3D316ACA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 19E7
Signing time: Tue 04 Aug 2026 09:01:14 +0000
Manifest this update: Tue 04 Aug 2026 09:01:14 +0000
Manifest next update: Wed 05 Aug 2026 09:01:14 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: wyrOwR0j1e2jM8/yabgzsUTzZJYXEX0H45vxjBkBpko=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:01:72:af:0c:82:9e:52:73:27:2a:d3:d3:16:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Aug 4 09:01:14 2026 GMT
Not After : Aug 5 09:01:14 2026 GMT
Subject: CN=d4630ebbf6f418ed2ece7e9cf25ca7b43a1e6ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:da:24:8a:69:3b:44:ea:eb:aa:74:ed:58:
8e:71:94:77:65:b7:d5:46:71:d1:c8:d1:48:70:b6:
6c:50:24:d2:49:08:f9:41:03:11:a3:8a:d5:4f:e2:
9b:01:72:c7:c4:23:34:f1:27:04:2c:bc:20:84:70:
3e:02:ba:bf:81:b5:43:b9:04:8b:ec:b0:6a:9a:fa:
47:6d:2e:17:cf:29:89:17:64:27:9a:82:d3:e7:59:
86:53:54:90:67:bb:59:b3:ef:b1:01:f1:49:e6:87:
71:a3:a1:1a:0f:8a:7a:c6:db:89:05:b1:39:f9:22:
d3:97:d7:bd:74:f3:15:40:a6:7c:28:ba:04:e6:75:
5f:06:2e:c1:d1:17:ab:c1:62:76:0a:99:65:cc:93:
f0:69:af:e9:10:e0:63:ca:1d:fb:29:50:b0:66:91:
f0:d5:0f:ad:d0:f8:63:2d:3d:24:66:35:5a:bb:61:
cd:36:27:68:65:1b:9b:eb:be:bb:a0:93:fa:5a:b6:
c2:9b:5c:e9:75:40:a9:db:46:4c:c5:39:f1:7d:12:
25:2f:e4:a2:5f:68:fb:df:c6:43:9f:69:50:cc:90:
36:94:f4:cb:b2:42:2e:02:8b:1b:c9:c1:ef:1f:6e:
27:8b:38:f3:fe:7f:e7:24:af:b0:0f:35:10:3d:f1:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:63:0E:BB:F6:F4:18:ED:2E:CE:7E:9C:F2:5C:A7:B4:3A:1E:6E:AD
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d6:6f:16:68:eb:33:d8:b4:50:8f:47:dc:7d:6d:cf:d5:76:
4e:2f:6a:b1:82:f3:26:6a:a1:64:7a:56:da:f3:2a:ae:a3:5d:
0c:15:59:18:4b:19:a5:a9:3f:bb:e1:5e:f5:76:57:bc:91:94:
30:a9:ac:54:90:09:12:5e:90:84:d6:84:b5:97:0e:a1:4c:c6:
ad:22:2b:73:23:fd:69:05:0f:b3:4e:0c:2c:ea:67:57:8b:de:
da:a8:4d:3b:0e:64:58:48:8b:fa:7a:eb:a5:99:d3:5f:59:80:
84:f0:99:db:b7:98:fe:d5:11:e0:c9:ce:54:a9:f3:8f:0c:23:
7d:41:50:5d:ca:11:a1:09:19:7d:38:30:8f:5e:ab:91:6d:e8:
43:4d:ef:60:88:97:22:26:53:b2:94:b0:37:53:b4:f6:c1:4a:
bd:f5:c9:6f:88:63:8b:2e:6e:29:23:0e:0b:fc:e0:a3:47:cb:
e5:69:22:34:3f:b6:84:ef:a4:24:57:1f:99:33:31:26:36:f2:
75:c5:b6:fd:d8:b7:25:14:e5:d4:d6:df:e2:fa:79:e0:d8:3f:
8f:27:f1:83:44:14:73:08:ab:fa:35:b2:76:a6:a3:77:88:82:
3a:be:14:2b:a2:72:2a:bc:92:76:83:af:b3:1f:5b:3c:13:bb:
6c:75:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:03 2026 by rpki-client