Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier: vpSCScXtMOj3laDCrSidxsR7xIbPIWAyWzh3UiTJius=
Subject key identifier: 8E:89:EF:3B:F3:60:5C:3A:02:56:DC:84:96:EC:BC:9B:71:13:BB:FE
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 019FCC01E23805760ABAC0C2F396EEE7FEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number: 02B8
Signing time: Tue 04 Aug 2026 09:01:43 +0000
Manifest this update: Tue 04 Aug 2026 09:01:43 +0000
Manifest next update: Wed 05 Aug 2026 09:01:43 +0000
Files and hashes: 1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: vN/wXd6cNaRT++KU0ASHVAQpRVkAgpHHUHh0pD0Z/z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:01:e2:38:05:76:0a:ba:c0:c2:f3:96:ee:e7:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Aug 4 09:01:43 2026 GMT
Not After : Aug 5 09:01:43 2026 GMT
Subject: CN=8e89ef3bf3605c3a0256dc8496ecbc9b7113bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:60:ed:b1:c6:75:c9:92:b9:d6:96:08:28:
6b:5f:de:03:83:98:72:9e:46:ff:79:11:ed:f0:ac:
8c:7b:66:f0:0d:ef:04:9f:ed:7b:61:bd:67:1d:b4:
e7:0b:36:0a:b8:d2:c5:13:f3:68:13:06:a6:5b:db:
a8:f4:10:10:30:cf:df:ff:f3:36:e8:45:2a:55:4d:
56:5c:b5:b6:70:44:c1:ae:f9:17:f4:73:64:a2:74:
a5:84:33:a3:7c:69:d7:dd:e6:8b:fe:69:6a:05:f1:
9c:7a:3c:e8:c4:21:0e:b5:50:8a:bd:55:f8:be:20:
8d:21:23:d0:c5:ea:2a:3e:65:e1:19:7a:7e:cf:69:
5d:74:29:07:6e:29:0c:da:29:a6:0c:2b:55:43:a0:
42:5b:0c:9a:89:15:d6:5f:7f:05:41:71:95:0f:72:
4f:33:a8:27:59:b3:bc:52:27:d3:5e:14:ec:ea:9e:
5d:d9:f7:e9:ff:1a:28:2f:9a:99:32:0f:b6:34:b5:
56:74:37:97:37:e2:9d:36:68:c4:6d:53:1b:11:46:
08:f5:cc:ca:e0:61:85:20:ae:56:c5:b3:eb:50:98:
74:c7:5b:53:f2:54:db:14:5f:71:ae:51:0d:34:36:
ee:6f:6f:0f:e9:56:96:4b:b6:7e:4a:4f:99:0f:10:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:EF:3B:F3:60:5C:3A:02:56:DC:84:96:EC:BC:9B:71:13:BB:FE
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1d:5f:7c:15:28:2b:24:29:42:79:da:22:3e:e3:2a:19:19:
fc:c7:24:ec:ed:13:a4:15:1e:a2:0e:86:d5:af:89:4e:5a:9d:
e4:c3:8f:42:fa:68:d0:ad:e9:7e:ad:88:d0:5b:6f:3a:a9:82:
8c:c5:02:60:d8:c5:1b:84:74:3e:e1:95:0d:26:ce:7a:5a:e1:
4b:cd:66:b7:4e:97:54:34:c7:53:08:5b:c1:28:fc:fe:63:0e:
3e:1a:65:1a:3c:d7:d9:8b:87:88:55:a6:f9:35:ca:08:cd:6c:
82:76:a9:95:5b:a5:f9:86:ac:42:4a:5d:7d:05:7b:8d:30:dc:
7b:99:08:ef:5a:7e:6d:d4:66:db:97:50:c0:e6:19:ca:93:b2:
08:04:3f:84:e8:3a:d3:d5:3c:32:a7:b9:b2:6b:10:eb:0d:58:
4b:9f:05:36:25:cd:e7:d2:db:98:92:2c:02:c9:c0:a6:c9:26:
80:f3:96:e2:0c:a3:5e:96:1c:e5:33:76:5b:a4:1a:d3:bf:8f:
5e:67:9e:49:c3:8a:a0:1f:11:11:6c:fe:7e:a8:ad:52:eb:c7:
ad:33:f7:5a:7d:e6:10:59:49:1d:e7:36:b3:fc:c2:ab:cb:85:
95:79:b8:f7:e4:2d:7f:b7:f5:79:55:bf:dd:20:b8:ec:fa:6b:
de:95:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 16:21:58 2026 by rpki-client