Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: vhfInW2FuMmSHerJ9ysnmYsN1fM95VMH88KE+HYWWzY=
Subject key identifier: F1:21:13:9A:D7:B7:D0:E8:48:C9:89:D3:50:CF:F6:F5:C3:29:CF:6D
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 019FA07287877DC72084BC66DBF249766A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 22:01:28 +0000
Manifest this update: Sun 26 Jul 2026 22:01:28 +0000
Manifest next update: Mon 27 Jul 2026 22:01:28 +0000
Files and hashes: 1: N79dGcqXOAWTraGm-dUGr_n7g5o.roa (hash: izRmr4QFMP3HYYiVhDYKTcRuMtp1aQuZsgseKcKqny4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: SUDxxB4Ijn6wI/ttYL2wlDYLxb82q4gsMhSs/0TFpjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:87:87:7d:c7:20:84:bc:66:db:f2:49:76:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jul 26 22:01:28 2026 GMT
Not After : Jul 27 22:01:28 2026 GMT
Subject: CN=f121139ad7b7d0e848c989d350cff6f5c329cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:af:4d:ac:25:3a:b4:93:48:4c:b3:0a:11:
5e:c3:8b:22:17:e6:3f:d7:e2:36:fc:cd:06:f8:d0:
e7:b6:ea:c9:c3:6c:17:47:b9:ae:69:51:f7:7d:80:
f9:1d:91:b3:47:a5:6a:3b:36:0c:c2:ac:dc:70:b3:
24:e5:a4:8f:82:68:ff:13:d6:5a:3d:00:50:53:3c:
94:9c:31:47:cd:bf:ac:1e:3a:04:35:90:48:c7:77:
69:b4:d2:0f:e2:64:62:f9:14:36:21:10:34:68:71:
81:43:7a:51:bd:b8:12:4a:10:78:4d:23:83:bd:75:
f7:dc:c2:90:95:b8:cb:8d:8c:2e:65:fb:90:82:57:
f0:93:d6:12:b0:b7:86:40:6f:51:ba:bd:32:c9:63:
d9:c1:a1:f8:51:c5:e6:2d:fc:07:f1:e6:08:c9:bb:
fc:2e:9b:b4:02:b0:90:9b:6e:2a:21:2a:e8:5f:bf:
dc:e8:07:6e:f2:86:46:b8:03:0d:05:79:06:32:c0:
89:79:0e:14:bc:06:59:1e:d5:cc:ba:98:47:19:5d:
8b:9b:1d:6f:66:70:95:0e:a6:9e:e5:f2:b4:03:05:
98:9c:e7:1e:6b:d4:30:71:a5:ab:2d:c2:76:91:88:
cd:70:54:5a:a4:c2:e2:ba:12:13:38:8c:fa:c0:e2:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:13:9A:D7:B7:D0:E8:48:C9:89:D3:50:CF:F6:F5:C3:29:CF:6D
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:a5:71:5a:43:2e:76:ce:bf:57:78:26:4a:88:8e:da:ff:
b1:9c:dc:fd:ee:bc:c5:d3:a0:e3:f0:63:db:1b:b0:c9:bd:fc:
b3:ef:2b:10:9e:7a:2a:6f:ac:9e:2e:79:68:b3:db:e9:de:86:
d2:8e:00:0f:50:4f:0a:90:47:6e:30:69:14:26:26:27:a0:08:
ac:b3:07:02:94:24:54:3e:02:46:6d:d4:c8:00:17:58:02:5b:
02:d0:e8:d3:37:0f:64:65:0c:c0:d9:54:4a:12:3a:c9:0c:63:
93:ba:42:86:5c:ef:ff:cc:fa:40:fa:c7:17:df:fb:97:90:e5:
f9:4d:9f:57:ea:3f:aa:a4:b8:63:e2:df:34:2b:fe:d3:6d:68:
f2:71:ea:2a:ed:fd:18:7a:3e:ef:35:6b:4a:56:4b:7a:ed:c7:
77:06:81:d0:6f:d1:c0:19:2d:33:4f:e6:3e:72:ba:c3:3c:8c:
52:07:16:12:3f:49:d3:dd:97:ad:61:6c:d2:b8:d2:95:b9:37:
40:13:b8:ea:d3:ba:66:95:b2:c4:ca:ac:c3:ed:91:95:cd:06:
9a:f5:0a:16:07:c8:12:1a:ca:42:c2:08:a7:a0:be:6e:70:2b:
ae:b3:ec:fa:5c:50:77:01:54:a2:d4:fc:17:f3:8f:a7:a4:d0:
88:62:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:49:16 2026 by rpki-client