Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: JOhBiKBDP3H2EQYVfMCGKO4sNa8uuLKGo8h2UiXSwSg=
Subject key identifier: 58:D1:94:30:DD:D2:EF:DC:48:C5:C8:C8:01:1D:43:8F:46:B8:BF:24
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 019FA229197D557F268E3FEFD09209C31791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 06:00:30 +0000
Manifest this update: Mon 27 Jul 2026 06:00:30 +0000
Manifest next update: Tue 28 Jul 2026 06:00:30 +0000
Files and hashes: 1: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (hash: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: nLrcTkXvd0U+ezXWm0vce58CHt1B5X3HgxZjWyAHKDM=)
3: uz3G_zDw5uNl_xC9huZfw-K_ce4.roa (hash: lgXmUNKY9C0bvQMUFuOJnJImq7SU/P/bySj8SdoyC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:19:7d:55:7f:26:8e:3f:ef:d0:92:09:c3:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jul 27 06:00:30 2026 GMT
Not After : Jul 28 06:00:30 2026 GMT
Subject: CN=58d19430ddd2efdc48c5c8c8011d438f46b8bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:c4:ce:24:c2:5a:8d:fa:6a:2f:4c:22:73:
4c:66:29:50:b8:20:66:b4:ae:a5:c1:8a:e6:8a:b8:
35:65:d2:66:41:79:f2:41:8d:c4:a4:bc:e5:a1:96:
0c:2d:37:83:b1:be:19:b5:63:2f:22:69:88:55:93:
46:d0:3d:cb:c7:dd:53:f6:cb:ad:d9:ad:db:0c:f9:
4a:26:74:40:7e:7d:d2:b6:db:a1:db:8c:69:f7:63:
90:f3:4c:ba:55:97:28:fd:4a:05:46:ad:a4:2f:65:
8a:a0:57:d1:16:3e:87:19:d1:5f:79:69:76:7a:5e:
9e:f3:34:98:13:20:9a:4a:a2:29:d8:73:57:e2:9a:
1b:ca:88:a4:c9:31:b2:26:d7:7b:31:50:e6:a5:87:
0d:e1:af:c5:8b:61:5d:d8:c3:2d:f2:36:a8:c1:57:
4a:df:de:d0:3f:27:5f:d8:3f:8d:dd:35:16:f1:23:
d0:0a:7c:f9:ba:e9:c4:30:f3:87:8d:18:01:e2:51:
1b:33:69:76:1c:12:4a:3a:2f:0d:a3:9b:3b:66:66:
78:e8:0a:c8:f1:53:6d:2e:22:50:2e:de:df:d3:57:
97:a0:af:a5:d4:87:57:e6:2a:cc:90:84:a3:5e:24:
c3:cf:c0:a3:ef:0e:b0:77:21:d5:45:4b:40:96:6d:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:94:30:DD:D2:EF:DC:48:C5:C8:C8:01:1D:43:8F:46:B8:BF:24
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:f3:2a:f7:5d:1c:fc:db:9b:86:b4:01:79:16:a5:70:1e:
9a:ed:27:20:57:8a:aa:5c:e8:41:6d:31:41:20:2a:93:a3:47:
d9:b7:e6:3a:0a:b0:16:e1:c2:a8:34:a3:88:eb:5d:4f:48:1a:
58:64:01:a1:b3:1e:5d:be:ce:b0:75:b1:81:9d:6c:7a:4c:bd:
e2:82:ee:0e:f2:61:76:cb:63:13:a0:e4:a0:f7:1e:cc:50:b8:
36:a4:6f:10:b7:1a:33:94:27:16:1a:ea:27:56:c8:5c:fa:b6:
16:60:9e:5d:ad:07:dc:3d:ed:7a:f4:4a:0d:e0:8e:77:72:bd:
8c:26:fc:3b:aa:ba:53:39:a5:9a:4f:d8:e6:3d:1e:44:33:21:
e1:ae:ae:5f:f3:5d:35:c8:6c:86:a5:92:2a:a3:d7:f8:8c:d4:
f3:2f:c1:c7:da:a2:5e:6c:bd:f4:bd:45:57:72:28:2f:77:d9:
3e:30:2d:cc:87:c8:19:a8:65:b0:23:8d:e3:ba:0e:a0:46:8e:
f9:21:29:4c:a4:a1:9b:b7:36:10:2f:59:ff:16:db:3f:d9:14:
64:5b:4c:df:de:6e:bb:aa:6a:ad:1d:43:6b:40:4a:b0:38:fc:
8c:b0:50:81:13:2b:6f:ed:48:14:23:93:43:d9:42:df:08:ad:
bd:ea:ee:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:03 2026 by rpki-client