Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: 7g2edP9wy5dD0nf0fJttxQ5AcVCiJACWEKZ4UAMIsuk=
Subject key identifier: 80:6E:8A:EB:F3:18:E3:5E:E9:BA:70:AC:6E:1F:D9:69:E7:B7:8E:1E
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019F85690C65F0492B8A1DC258B496D3A024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 16:01:21 +0000
Manifest this update: Tue 21 Jul 2026 16:01:21 +0000
Manifest next update: Wed 22 Jul 2026 16:01:21 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: zQLWiHq8AKRQoFaYkOz1aAMY58szIU9gKcwXdekwc5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:0c:65:f0:49:2b:8a:1d:c2:58:b4:96:d3:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jul 21 16:01:21 2026 GMT
Not After : Jul 22 16:01:21 2026 GMT
Subject: CN=806e8aebf318e35ee9ba70ac6e1fd969e7b78e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:12:d4:64:01:98:dc:e4:43:ae:c1:86:b7:
fa:fb:8a:4b:e4:de:ba:70:b4:89:3e:0b:ac:e4:07:
ab:86:97:0a:07:02:79:34:00:95:07:1a:2c:ae:57:
20:52:39:80:c7:cf:dd:aa:fc:86:80:f6:a9:2c:6b:
27:7d:64:50:80:09:c7:71:ba:e8:fd:ff:bb:9f:96:
df:5b:66:a7:1e:05:29:1d:1e:2d:cc:c9:6e:36:08:
38:9d:61:1f:24:00:bc:71:35:4a:2c:b3:2c:8d:02:
35:22:75:86:86:be:a3:28:b6:b3:70:ba:c5:fc:e2:
56:4b:a2:f5:06:f8:62:8b:9c:06:e4:20:3a:c8:65:
4a:97:e4:51:98:89:53:a8:00:a3:86:36:03:02:cf:
b9:81:2f:b6:44:0c:e4:f8:64:bb:4a:b7:82:ef:28:
d7:7e:a4:5c:8c:d8:ea:32:22:4d:da:f9:18:92:53:
43:7a:75:0b:34:b3:5f:c5:59:bf:ba:01:d5:5c:ba:
d4:75:5a:bf:5f:8d:13:62:40:43:3a:3e:26:89:06:
8c:58:00:6b:0a:ef:30:4c:6f:a7:c6:09:8d:d4:59:
7f:f6:07:fd:7a:d1:13:9c:9a:99:42:fa:28:3a:d1:
71:22:f2:34:91:cb:f5:a4:d3:bb:63:d7:6b:a7:37:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:8A:EB:F3:18:E3:5E:E9:BA:70:AC:6E:1F:D9:69:E7:B7:8E:1E
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b5:31:d0:d9:40:82:ac:1b:cf:b3:e2:6a:39:e2:1e:dd:50:
00:fa:87:35:a8:85:c7:f2:51:b7:54:2c:00:23:54:c3:72:2c:
f6:2b:a5:6b:55:c1:9a:6c:78:9e:89:07:af:f9:85:17:ac:da:
e4:95:bd:08:17:22:77:4c:99:b4:8e:f5:f4:3b:0e:2f:90:ad:
c9:49:1d:21:80:ee:f4:b3:e2:b6:7b:b7:a8:49:46:4b:1c:7c:
79:af:6e:ce:4e:b7:75:74:2b:bb:48:10:40:44:a7:8d:d4:18:
9e:a1:6d:2b:43:e3:4f:47:01:53:c2:9a:ba:9e:3b:e5:97:f2:
12:2f:98:66:f8:d7:1e:06:29:80:02:b2:d2:29:49:3e:7e:bf:
3f:84:45:aa:4f:76:09:00:c0:df:fa:c9:46:5f:77:5e:67:ad:
92:cb:59:d0:76:c2:94:6e:dd:58:ea:8d:c1:a7:bf:03:78:d2:
c5:c6:02:18:c7:34:5e:38:4d:41:e6:cb:0b:66:de:43:16:8f:
15:40:87:1a:51:6f:90:1d:75:ac:dc:ad:92:78:18:a7:2f:8e:
5f:1e:b7:62:0e:d6:8c:d3:1e:98:04:b0:3f:bd:26:df:8d:fe:
14:8d:3d:62:ca:dd:fd:65:e2:19:06:48:3d:6e:32:ea:d6:5a:
a3:27:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:26 2026 by rpki-client