Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: aKSHdv/C+YHp0UERx5i8DUk+oQphcfbejobrFwQUB+w=
Subject key identifier: 9E:03:C2:0C:CD:31:15:33:0D:D4:F3:86:8A:AA:52:54:95:15:91:90
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019FA52A6DCBBF62623D8541D14066A01D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1754
Signing time: Mon 27 Jul 2026 20:00:48 +0000
Manifest this update: Mon 27 Jul 2026 20:00:48 +0000
Manifest next update: Tue 28 Jul 2026 20:00:48 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: VB3GnS2sEPGYMjsxCeFS2+CelIqrKJb0NERYiSc1Oww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:2a:6d:cb:bf:62:62:3d:85:41:d1:40:66:a0:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jul 27 20:00:48 2026 GMT
Not After : Jul 28 20:00:48 2026 GMT
Subject: CN=9e03c20ccd3115330dd4f3868aaa525495159190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:d3:d4:ca:95:6a:e5:d4:e7:1e:98:17:e6:
e1:be:72:9e:ec:34:50:5a:f9:9d:e5:cf:95:5c:71:
c1:31:56:b8:05:bc:9e:11:05:9c:1b:2c:be:d8:ba:
5d:0b:90:5a:78:45:22:cd:e0:12:69:83:27:ed:73:
38:e0:d6:fa:92:c9:23:34:75:36:9a:45:aa:98:61:
3c:62:15:fc:a1:7f:b4:1c:63:fe:87:a1:2c:b0:48:
3e:17:c7:b4:87:4b:40:8c:4d:eb:87:e0:de:66:11:
fe:39:01:e7:65:bc:88:c6:09:a3:0d:8e:22:aa:51:
ce:9e:c4:a1:0c:0f:b4:25:c4:89:c0:d8:21:2f:f5:
30:47:fd:ba:36:52:51:00:38:ff:62:9c:30:30:13:
da:b4:07:19:37:06:26:6e:4d:36:63:95:34:e1:fa:
02:81:5d:16:12:ea:0b:9f:4e:cd:07:bb:33:b8:f1:
c6:d3:5b:20:bc:5b:c7:a8:ca:2b:86:62:2f:3f:dd:
02:e9:e8:81:09:34:ca:a6:05:45:33:97:9b:78:55:
f2:b4:ef:f3:3e:d6:4f:27:44:bf:c1:e3:21:53:89:
55:62:5a:ac:73:cd:5b:34:6e:5d:fe:a2:ed:db:b0:
5a:86:cb:15:ef:ef:d1:1e:08:a4:4f:de:bb:49:35:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:C2:0C:CD:31:15:33:0D:D4:F3:86:8A:AA:52:54:95:15:91:90
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ed:af:14:1a:94:22:b1:aa:b9:53:28:87:43:b2:a4:39:71:
a4:e7:e2:24:90:5e:99:38:7d:21:de:2f:b1:e5:9a:ce:40:0a:
ab:b2:b4:a3:3e:44:5f:d9:86:f9:d5:8c:a0:bc:5e:e3:b4:82:
5f:6a:9c:7e:f3:12:a7:6a:f8:91:2a:7b:1b:9a:00:d8:fe:38:
d2:13:04:fb:fd:4b:93:dc:b3:3d:b8:d6:8e:86:6c:a0:c9:12:
ee:b5:cd:54:2c:01:54:38:42:c1:16:2b:e2:81:35:bc:8a:cf:
9f:25:69:64:65:28:1b:66:6e:e4:fd:40:24:c4:a4:da:8b:10:
22:e5:d7:63:92:d9:b7:c2:46:f9:33:47:05:d1:d1:c4:d6:e6:
db:f9:94:9e:8f:68:f4:d2:2e:fe:e9:78:29:e6:9e:53:6f:b9:
d0:77:e1:eb:f3:1c:2a:0f:99:0d:00:2c:e4:c2:97:1e:4a:fa:
df:b0:a3:22:f0:76:c0:44:6c:d0:cf:01:97:0e:c3:4a:06:7b:
72:f3:69:81:9b:e3:86:91:32:78:5f:31:b5:50:80:f1:10:91:
d4:fc:7e:e9:01:43:f2:88:7c:4d:6e:c2:56:98:3b:f2:41:6d:
13:57:97:54:fa:81:16:54:a6:16:86:72:53:71:20:b1:38:51:
bd:1d:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:38:36 2026 by rpki-client