Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: 9UEVmKMYOQjMMO4K+Q7jPq763eqsC01HUF5G5qKeUOo=
Subject key identifier: 7B:9E:03:1B:8F:19:6D:22:B1:DE:71:C2:EE:66:3B:21:FE:FB:69:DE
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019FF97F51F0521E356C2D544B42D4743947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 01C7
Signing time: Thu 13 Aug 2026 05:01:38 +0000
Manifest this update: Thu 13 Aug 2026 05:01:38 +0000
Manifest next update: Fri 14 Aug 2026 05:01:38 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: rE4JUxKw+7Bvv4FUIRTBJ4IzyLxWze+dxrTpRjezQZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7f:51:f0:52:1e:35:6c:2d:54:4b:42:d4:74:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Aug 13 05:01:38 2026 GMT
Not After : Aug 14 05:01:38 2026 GMT
Subject: CN=7b9e031b8f196d22b1de71c2ee663b21fefb69de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:0d:d8:5c:d1:cd:38:53:b8:fb:5e:c3:ab:
74:e9:df:00:7a:fe:55:3f:59:ae:46:b5:78:1e:76:
06:36:0b:39:64:cb:27:fe:7a:70:ae:82:c7:b6:b6:
45:3c:1e:9e:d3:e5:b6:57:cc:09:e0:4e:95:49:63:
cc:69:f7:cb:31:9f:e4:97:84:03:2b:58:97:90:38:
0f:16:52:7b:1c:ae:8d:2e:67:ff:f7:49:02:96:32:
28:65:5c:e1:cd:bf:aa:1f:ac:b7:4b:b6:a0:c3:be:
4f:8a:8c:1d:69:d4:f3:3c:97:5e:8d:cc:4a:d4:71:
c2:ac:7e:1c:6e:ea:c9:9d:d4:91:a8:26:89:1b:68:
bf:8c:7c:e4:6f:56:96:96:f0:83:9f:b9:25:19:f4:
a7:7b:ca:24:66:07:32:3f:e2:b1:7e:6e:9c:3e:58:
0a:7b:84:bc:54:46:72:36:da:d9:ba:24:77:75:3e:
04:a1:8a:db:61:aa:ff:89:76:66:a3:18:50:71:f8:
b3:2e:23:e4:48:cd:ef:e5:9e:c7:0a:62:25:cf:e6:
0f:a9:72:14:8a:5c:17:a2:c9:79:e9:99:96:43:fb:
40:19:b6:0e:17:11:28:bc:84:97:7f:30:ea:70:81:
97:d5:60:27:ae:fb:98:83:e7:61:df:0c:80:d0:db:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9E:03:1B:8F:19:6D:22:B1:DE:71:C2:EE:66:3B:21:FE:FB:69:DE
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b0:3d:16:91:26:cb:74:27:fd:20:75:ed:24:ca:1f:1a:93:
fe:12:ee:b4:0f:43:a8:16:24:78:8a:12:bd:14:76:0f:ff:05:
11:88:82:6d:a4:12:1b:27:80:09:37:e6:92:5d:c8:02:89:7a:
c3:3d:c7:94:ac:06:61:62:03:1e:fd:80:e7:1a:c4:5f:37:ac:
0b:92:8a:cb:2d:f2:0a:da:6e:ae:ac:44:60:b3:a1:ca:d1:77:
0e:72:dc:23:82:84:44:90:18:c0:69:76:61:63:b6:ee:38:81:
fb:c6:ca:b8:34:42:1d:dd:28:3c:d8:6e:6d:56:ed:4d:27:9f:
b7:c7:c7:cc:a8:81:6f:12:db:48:27:dd:61:7b:94:f7:bc:28:
ba:1c:a6:23:6b:eb:58:bb:27:38:88:94:1d:f1:ca:ed:3b:d9:
de:40:c1:7d:7a:6a:49:0c:0a:de:81:ec:05:69:5f:8c:34:f3:
de:9c:e9:b0:fb:3b:5c:a3:21:cb:5f:3b:1a:ea:af:32:f4:4f:
8f:8e:58:48:b4:1d:93:f0:f0:41:99:19:df:c2:05:7d:2d:ee:
be:fa:fc:7a:c1:97:9d:69:95:4d:83:3e:3e:f9:2d:a6:3a:54:
95:f9:02:37:9a:13:1f:44:d6:bb:e3:1c:0f:46:4c:3d:00:1c:
ff:57:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:42 2026 by rpki-client