Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: f4y02jVWItxQZa5vt1YSI0ByBIAxESgpIDObetUJsn0=
Subject key identifier: 4D:E1:84:A3:A2:46:A8:85:FD:88:ED:CD:E8:CF:73:63:6B:CE:C4:AB
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019FA1F2E17A10153C799092BBC8B6371DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 0266
Signing time: Mon 27 Jul 2026 05:01:16 +0000
Manifest this update: Mon 27 Jul 2026 05:01:16 +0000
Manifest next update: Tue 28 Jul 2026 05:01:16 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: yQ5SGPIiD6H2RUUy+xMTK+R/xfJXswJuEu+deayPX60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:e1:7a:10:15:3c:79:90:92:bb:c8:b6:37:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Jul 27 05:01:16 2026 GMT
Not After : Jul 28 05:01:16 2026 GMT
Subject: CN=4de184a3a246a885fd88edcde8cf73636bcec4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:07:3b:75:0b:5b:12:3b:9e:e3:b1:96:f8:
23:71:8c:a0:ab:19:59:0c:46:ed:2b:23:fc:c0:0b:
ea:1f:ce:f1:05:e3:9e:f3:01:4c:d5:ea:94:96:c0:
95:be:ea:58:24:aa:c5:79:0b:31:7a:2c:db:be:14:
ae:ab:8e:ac:81:b6:57:b6:6b:cf:7c:e3:b3:8c:a1:
98:34:e4:74:ce:1c:65:c8:57:ce:cb:50:9a:e1:6f:
5b:6c:ce:ed:27:d7:05:7e:b6:57:e8:27:f0:ea:c5:
a6:b8:32:02:8f:09:6f:d5:cc:c7:10:be:f7:3c:fb:
85:32:8c:87:27:f8:6e:e7:45:cf:11:90:c6:ec:5e:
1b:94:c2:2e:17:34:0f:37:fc:cb:c7:10:ec:30:5c:
42:fc:9d:bb:29:86:64:e4:0e:7f:68:16:c3:46:b1:
0a:be:98:75:d0:c9:61:3a:1b:5a:2e:dc:08:2f:e9:
89:3a:5d:2e:9a:28:2e:7f:a0:50:5f:eb:43:1b:87:
07:3d:6b:95:78:3b:a2:65:30:5c:f2:b4:da:20:40:
87:69:dd:57:61:22:81:3b:6e:b4:ec:be:1d:43:2b:
d0:97:0f:fa:4d:6e:f3:f4:0a:e1:6e:4f:87:08:e0:
4f:62:cb:a8:80:99:5e:a9:6c:92:cf:dd:0f:b5:18:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:84:A3:A2:46:A8:85:FD:88:ED:CD:E8:CF:73:63:6B:CE:C4:AB
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:fd:d7:d8:12:aa:16:bd:1e:c1:01:f0:52:0a:e3:2b:77:
63:a2:07:10:6a:ec:10:7a:51:f5:10:15:3f:c6:c4:e1:fb:0e:
e0:23:28:2a:23:9c:9b:6a:19:f3:d5:75:3a:c9:34:a7:75:8c:
95:c9:1e:bc:22:d5:f9:38:7d:1d:42:6d:0a:de:0e:6f:f4:00:
b2:10:dc:35:ba:b7:63:d1:13:f5:86:d5:fa:bf:4a:0e:82:7f:
6a:8a:23:59:83:40:33:39:55:e8:da:1e:0b:1f:61:c3:cf:49:
b7:d7:00:37:5a:96:ed:2e:82:c3:8b:7f:09:83:4e:4d:0e:6a:
91:d4:2f:3e:18:bb:0d:a1:bc:89:c8:ec:46:24:38:1f:f2:3a:
8d:4b:2c:99:58:7a:45:3d:45:7b:0e:be:7c:eb:00:0f:3d:1c:
58:55:9d:fb:62:81:1a:e6:c4:df:4e:d9:1f:85:c8:9d:2e:52:
b1:23:a2:b0:49:31:55:7e:06:f2:82:d8:b4:30:dd:87:ad:90:
33:e0:67:f6:3e:0d:26:56:fe:65:6e:ea:9e:50:c3:68:d1:2d:
1b:33:cc:2f:c9:c3:d9:8a:c3:db:0f:bd:54:e1:4b:ba:12:f2:
97:a0:f4:27:fd:4d:a8:18:4e:3a:b2:0b:8f:55:01:ee:5f:9d:
cc:9c:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:08:48 2026 by rpki-client