Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
File: tT9AiUhnv7TtUYEBfagOor3tKuQ.mft (raw, json)
Hash identifier: dBJ4MUc6cxc+feYHSskV74Oo8CZvhA1rMioRcn2p4SY=
Subject key identifier: 7A:32:B9:9F:F8:88:20:AC:DA:4F:11:49:46:68:7F:2B:61:D9:86:74
Authority key identifier: B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
Certificate issuer: /CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Certificate serial: 01A0016ED4D77F1271ACBE7CE8DE88AD0AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:00:35 +0000
Manifest this update: Fri 14 Aug 2026 18:00:35 +0000
Manifest next update: Sat 15 Aug 2026 18:00:35 +0000
Files and hashes: 1: UbZ2SPbY4okiTXM5AfdEnS10_Es.roa (hash: PXQQVoIm69bnLgyq/S5RdMXgtOcrtVDgQ2+xqsOy19A=)
2: tT9AiUhnv7TtUYEBfagOor3tKuQ.crl (hash: 6/Dw6BlR5pw+MkxsJiwcQFzgW2bRVvU5QFp2WhMCyD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:d4:d7:7f:12:71:ac:be:7c:e8:de:88:ad:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Validity
Not Before: Aug 14 18:00:35 2026 GMT
Not After : Aug 15 18:00:35 2026 GMT
Subject: CN=7a32b99ff88820acda4f114946687f2b61d98674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:64:f6:cf:62:64:be:5a:60:27:75:3a:93:
f0:52:37:99:a0:d0:bd:2e:69:d6:b9:84:50:15:36:
2a:28:28:5d:18:a3:e9:93:b2:b3:fa:4d:6c:83:ab:
12:d5:03:41:54:2d:7c:44:a5:06:6b:58:47:e2:a6:
97:8b:f9:ed:0b:a4:82:a9:80:ce:55:02:f5:29:f9:
cc:80:ca:f3:8d:3b:d2:c0:21:45:35:b4:bd:2e:38:
9b:0e:7b:e0:36:16:24:25:25:6d:a3:80:ef:bc:ff:
5a:68:37:e1:0c:fe:87:6c:14:6f:47:07:4f:85:a9:
88:bd:67:ca:56:5d:a7:b0:83:a8:6c:a0:5b:2b:3f:
81:c7:9e:f5:14:16:54:4a:96:7b:3e:94:87:84:18:
52:97:37:c0:4b:bb:34:63:2d:8a:df:9b:69:18:e1:
66:b8:70:77:20:dc:67:14:47:a1:a1:28:48:f2:a1:
91:38:44:09:42:ee:53:fb:49:a6:a5:01:1d:19:c5:
de:44:81:4a:99:7a:e4:41:27:fd:4a:6f:04:1a:ee:
5a:b1:51:e5:72:95:bb:f1:00:a9:52:38:04:d6:76:
34:ba:62:4b:02:73:c6:96:bc:62:83:b1:62:74:d7:
f9:61:89:14:b7:14:7e:2b:51:a1:a3:89:c0:89:3c:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:B9:9F:F8:88:20:AC:DA:4F:11:49:46:68:7F:2B:61:D9:86:74
X509v3 Authority Key Identifier:
keyid:B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:e6:fd:f8:ae:10:c4:85:59:b6:e6:db:f6:41:3c:36:5b:
b2:cd:e4:8a:72:a9:ca:9e:fc:99:ff:33:d4:37:ee:35:86:c2:
db:f7:f3:a2:44:fa:53:c5:68:b4:9c:37:99:ce:4f:0a:a6:52:
e0:ca:53:fd:ef:46:7b:6c:e4:88:2f:09:cf:3c:9c:4b:30:32:
31:19:5a:ce:50:3a:61:d5:09:07:af:69:48:b7:5f:db:65:97:
f3:8c:33:f0:3c:d1:0d:62:30:68:e6:07:d5:46:8f:38:d5:57:
c3:97:e5:20:e9:53:34:19:ed:74:5a:cc:51:af:39:5a:47:5c:
0b:06:03:7b:fe:81:60:52:72:31:f4:ee:8a:ab:5d:ad:62:96:
57:8d:f1:27:d8:d9:ed:85:ec:eb:dc:64:a2:bc:80:be:d9:c2:
61:52:db:0d:af:e8:27:fa:85:26:56:52:86:d6:46:61:21:ee:
b3:97:51:99:d5:ed:39:4c:bf:d8:88:05:06:0a:57:54:43:1c:
12:7d:1b:e5:20:cc:75:7f:0a:30:aa:c0:9a:be:e0:0c:4e:d5:
7c:11:ff:44:3f:d6:2f:7c:e5:1d:7f:ed:2d:02:68:34:ac:d1:
e0:5d:26:6c:f1:1a:f0:53:3f:8c:6f:bd:2e:28:d7:48:68:20:
4c:c3:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:06 2026 by rpki-client