Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: ZtZoOmWHXlMUWCIpRicjsf0oZcEb64ZeM9FproWKje0=
Subject key identifier: 87:1D:E8:2A:9D:18:FB:B8:F3:A6:F4:6F:13:D8:15:2F:B3:A6:65:4A
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019FA305706FC29EC5E3D6B3C45EC1CDF11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 04E0
Signing time: Mon 27 Jul 2026 10:01:10 +0000
Manifest this update: Mon 27 Jul 2026 10:01:10 +0000
Manifest next update: Tue 28 Jul 2026 10:01:10 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: 4SGqAmAyrn1XbzWBm4JsTsW0gyavfE2+qBqm8uEfHFo=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:70:6f:c2:9e:c5:e3:d6:b3:c4:5e:c1:cd:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Jul 27 10:01:10 2026 GMT
Not After : Jul 28 10:01:10 2026 GMT
Subject: CN=871de82a9d18fbb8f3a6f46f13d8152fb3a6654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:0c:35:c3:df:d6:39:e2:2c:f9:96:8b:59:
77:f6:25:9c:f8:65:29:b2:ba:24:0c:03:2f:e3:f4:
cf:fa:db:be:43:a0:dd:47:83:98:67:d5:cf:c1:ac:
12:75:9e:37:26:55:e3:9c:56:ee:69:ed:27:b3:3b:
e7:77:7d:f9:68:dd:75:0f:39:02:9a:84:ca:bb:41:
6c:ea:df:92:47:fb:95:90:71:1c:7a:62:9c:d5:d8:
a8:7c:fc:40:fc:40:70:a5:49:32:10:4a:63:20:18:
b7:37:be:01:e1:13:23:44:60:6a:d9:99:4f:6f:24:
63:2e:a6:97:3f:38:fb:eb:44:4e:96:bb:e6:bd:e4:
aa:3e:ed:46:ea:6b:c1:72:63:08:ab:8f:75:2e:46:
14:36:55:24:a3:cc:3a:cf:8e:04:fb:ed:43:b5:f3:
ec:d8:50:8d:b3:6f:9d:16:6f:81:c8:0d:c0:1e:69:
84:4b:70:e4:9b:d5:85:33:ba:93:37:4f:7c:74:bc:
57:40:ae:ad:07:34:92:2f:79:14:c5:51:1f:f2:d3:
6d:11:05:12:ee:19:3b:de:6e:24:cc:d2:a7:26:dc:
e4:6c:7b:28:f0:6b:e9:c9:a1:22:15:50:d4:28:42:
21:2f:a2:ae:fd:7e:13:c2:45:58:59:dc:38:f4:3e:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:E8:2A:9D:18:FB:B8:F3:A6:F4:6F:13:D8:15:2F:B3:A6:65:4A
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:f5:c6:40:ee:5f:8b:72:3e:d1:e1:76:3a:e8:48:b6:00:
a3:40:5b:ba:b9:8a:b1:5f:ed:8b:ef:30:41:51:a5:73:9c:2c:
16:f9:1c:2d:56:52:d1:9b:54:63:e6:78:1c:d7:04:9e:bb:8c:
30:27:f5:a6:d8:38:8f:cc:0f:5c:d7:c9:1b:4f:23:d4:df:97:
51:b4:cf:74:c7:f7:65:80:42:3a:13:a5:54:15:2e:97:61:d9:
db:8a:6b:17:cd:f5:dc:cf:9a:23:7a:bb:b2:62:96:ce:04:66:
d0:53:d0:c7:9d:02:30:b3:fc:e0:12:88:f2:8e:c2:0b:e2:6a:
09:85:51:e8:89:43:0a:eb:42:c6:ba:0e:8c:0d:92:06:fa:14:
df:3a:76:f5:04:32:52:ae:04:13:3b:b0:06:82:49:22:36:5b:
2a:19:05:8d:3a:36:dc:8b:80:5a:32:75:3d:a0:80:f8:f5:fd:
78:0a:b2:f5:bb:bc:7c:ba:05:a5:58:93:39:a6:19:d2:44:52:
b7:e4:35:8c:32:71:de:f3:49:3c:aa:22:39:c3:55:31:e2:35:
f4:2f:0c:48:bb:68:6d:fe:cf:d5:8d:47:85:5d:6d:f6:b8:77:
e5:ba:4d:3d:9f:ee:06:64:8e:37:f4:0b:10:3e:a1:7f:17:1d:
46:0d:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:26:49 2026 by rpki-client