Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: gR5fTZUR1GlV0m8w5LX5f65bhew3UdGUYBiLaBji04k=
Subject key identifier: F0:1A:8A:2D:05:13:C3:06:0C:6D:25:4E:B6:B7:A9:35:60:9B:90:61
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019FA4177B77FF5BEE526E20173E9AB832FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 15:00:29 +0000
Manifest this update: Mon 27 Jul 2026 15:00:29 +0000
Manifest next update: Tue 28 Jul 2026 15:00:29 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: 8wsz35N36Dd5D+iqQBXLcz1iuFE6k7AAdRC1VxkFdkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:7b:77:ff:5b:ee:52:6e:20:17:3e:9a:b8:32:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jul 27 15:00:29 2026 GMT
Not After : Jul 28 15:00:29 2026 GMT
Subject: CN=f01a8a2d0513c3060c6d254eb6b7a935609b9061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:3c:90:c2:8e:05:e6:3a:ba:ce:c3:9c:a6:
c5:5d:74:5b:a4:15:97:1b:63:05:15:cf:c9:1a:13:
4e:17:3a:65:9d:54:e5:b6:32:3c:b4:c3:ab:50:c8:
4b:61:f1:b9:e3:6d:83:65:23:f6:b4:4b:28:57:f2:
c3:67:58:70:21:ae:4c:20:e6:ca:fb:c6:01:77:77:
01:3c:a5:1f:f7:e7:47:cf:31:5f:5b:03:b6:51:e6:
3f:1f:60:a3:e3:be:04:1a:fd:3c:82:99:ae:8f:62:
4c:80:ca:3a:f5:60:65:68:4f:20:85:56:ed:1c:69:
97:83:15:0d:ea:e5:01:e7:49:1f:90:1b:94:3e:9b:
f9:3b:e5:40:f2:2f:64:79:85:e0:6b:31:cb:31:c1:
1d:0c:83:24:e2:ac:a7:ff:14:54:91:2e:b7:c7:57:
09:9b:59:9c:e9:68:22:63:86:e7:39:8f:6d:bc:88:
9d:7a:e5:e2:5c:09:d6:44:ce:7e:4e:4e:cd:6b:90:
3a:bd:e4:7b:ac:54:63:12:5f:07:e6:91:db:19:ef:
28:fd:72:14:cd:d0:bf:4e:4b:60:29:67:e3:63:fb:
7d:5b:f4:00:60:06:57:7c:2f:a3:9e:0a:04:d0:6a:
8f:f9:3c:f9:44:f3:63:e3:b7:0b:be:31:05:4a:97:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:8A:2D:05:13:C3:06:0C:6D:25:4E:B6:B7:A9:35:60:9B:90:61
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:53:23:4d:95:5b:f1:8e:b3:d8:1b:b5:2e:90:02:eb:9a:41:
5a:f7:9b:a0:74:57:0a:ff:a6:28:dc:3a:de:18:14:fa:c3:06:
13:cc:ae:7f:0d:69:ea:7a:a0:54:22:71:86:c2:15:cd:83:3a:
92:e9:c1:d9:1f:d7:48:a2:87:30:2d:3c:4f:f9:c8:38:fd:18:
a1:30:0c:dc:1e:87:25:d5:d3:50:6b:2f:74:10:d6:71:7c:f6:
83:7a:62:b8:e9:76:36:3b:3b:82:e4:00:7c:56:c1:38:16:69:
76:ae:4e:f8:78:9a:dc:f9:0b:c5:4b:5f:a1:2a:45:0b:1e:0f:
6d:9b:4e:0a:a9:c0:e6:a6:0a:a5:5c:25:d0:bd:32:ce:d5:ac:
87:e6:20:90:25:40:21:0a:25:fa:a8:b7:00:bc:76:2d:1c:1c:
15:69:55:d4:a6:15:fb:bd:ba:46:9c:59:6f:32:2e:3c:03:1c:
a9:dc:06:fe:5d:af:1d:1d:eb:b7:ff:d5:4c:21:21:29:48:f3:
23:27:f1:7c:5f:d3:cc:7a:92:bc:11:de:e0:d2:e9:dc:5b:c6:
ad:50:27:6d:4e:ed:81:74:f6:5b:52:ff:2f:e1:04:73:ba:00:
bb:2f:df:d4:ff:37:49:6b:ce:98:90:93:64:ce:25:00:a5:cb:
dc:74:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:32:33 2026 by rpki-client