Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: erSmZtBIXwQUt//W8oFQslZBfXOdHfWXlVv0NbcKRQs=
Subject key identifier: 73:51:A0:C5:7B:1F:3E:05:A6:08:22:0B:10:0A:86:3C:5A:FE:61:69
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019FDB072CC482D8399B9A8F5BE59F53D208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 19F1
Signing time: Fri 07 Aug 2026 07:01:48 +0000
Manifest this update: Fri 07 Aug 2026 07:01:48 +0000
Manifest next update: Sat 08 Aug 2026 07:01:48 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: 2xo0TT8FqMagQxOXH0RkwyEQeQzj/F8kkl3PUGR6m08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:07:2c:c4:82:d8:39:9b:9a:8f:5b:e5:9f:53:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Aug 7 07:01:48 2026 GMT
Not After : Aug 8 07:01:48 2026 GMT
Subject: CN=7351a0c57b1f3e05a608220b100a863c5afe6169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:f9:5a:a1:90:4a:a9:fb:b0:e6:b9:c6:33:
ca:66:8d:da:7a:10:78:7f:a7:03:0f:18:de:67:1d:
04:50:76:66:a9:55:e7:ff:27:77:a9:2e:c9:68:b9:
34:d8:eb:c8:b8:a6:07:f7:af:fc:7d:b6:1e:73:e8:
df:83:9e:2d:1a:17:71:81:11:7b:91:ea:e0:19:a5:
79:5c:c6:65:e9:82:12:11:37:24:89:88:ac:5d:ed:
59:6d:17:64:08:60:41:c8:5b:1a:54:b6:9e:df:57:
0e:93:6d:6d:f1:ac:11:6a:4a:92:6a:8c:f1:3f:82:
a1:97:7a:18:18:b3:0c:ff:31:46:4d:45:4f:57:09:
ca:66:4f:19:38:b5:c6:bc:52:aa:6a:87:1a:de:00:
60:eb:92:02:9d:c0:19:1a:53:a1:35:67:22:e1:d7:
0a:9d:03:20:22:fd:19:36:2f:af:61:d2:30:c2:13:
4b:5b:c8:dd:bb:df:40:1b:bf:66:77:03:55:8e:84:
82:c9:5c:ed:0b:9b:35:bf:da:af:28:6b:27:90:76:
f9:cf:d2:17:b2:a2:c5:76:cc:7d:99:72:72:4b:34:
a7:1c:55:0a:f0:0b:30:bc:a7:5f:94:64:9d:48:a9:
bb:65:5c:b7:7a:00:fb:e0:14:28:25:97:96:ea:9e:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:A0:C5:7B:1F:3E:05:A6:08:22:0B:10:0A:86:3C:5A:FE:61:69
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:7c:1f:71:4a:cc:bc:97:e1:60:06:33:fa:68:c7:99:1a:
ea:e1:e9:a4:42:62:1c:1f:20:d8:d8:1b:f0:35:28:9d:9c:9b:
59:95:c1:4e:3f:35:97:e3:84:72:ed:a0:90:2c:d1:d2:cc:63:
7e:45:f9:ff:11:44:1a:f9:31:2a:9f:21:41:a2:d5:eb:17:9a:
b8:bd:0b:05:fc:9d:66:48:43:91:07:7c:02:5c:06:cf:8b:c4:
c0:b2:fc:e0:93:7a:28:70:0f:25:3d:56:ee:cf:34:d0:a9:ac:
48:1b:dd:37:2e:07:52:d3:30:fe:9e:9a:0a:59:8c:68:01:19:
83:13:22:09:96:3e:8b:f9:2c:a5:30:cc:21:30:06:00:45:4f:
fe:06:f4:be:62:1d:16:9b:1b:0e:58:72:9b:1f:7e:5b:7e:30:
60:f5:55:7d:91:28:ce:82:4f:1c:65:6b:58:6c:3b:5b:86:c2:
59:e4:84:0e:5a:12:81:1b:f0:a0:de:1d:89:76:4c:fe:43:ea:
21:19:af:25:ce:e9:e7:45:5f:c0:26:56:d0:54:6d:f8:40:97:
29:c2:b1:b2:c8:3d:d5:9f:54:92:d4:a0:55:fb:8a:60:94:35:
cd:7d:a1:2d:e4:29:9e:fa:db:4d:9c:ac:c4:cd:b0:48:77:ef:
a4:32:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 16:26:33 2026 by rpki-client