Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: x3dNl0cEB+f2T1h3hx94JwUzwCgAZ1Ak3vWaiSx6hOs=
Subject key identifier: 14:6E:C7:A1:CA:1B:5C:53:74:48:06:63:99:C2:80:B0:A6:8A:DA:C1
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 019FA0A8A534F2285A91A0439BE114A631EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 23:00:34 +0000
Manifest this update: Sun 26 Jul 2026 23:00:34 +0000
Manifest next update: Mon 27 Jul 2026 23:00:34 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: k1nHajEyRsvQrAVX75eukDxkDAX2MnJrs7nsFteqqvg=)
2: ocvm0IdE2g81VMWQHWvGerIOuso.roa (hash: vva88+yWqRlVE96LUlXUKJ3JPb4q0jP0+58DLgtlF9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a5:34:f2:28:5a:91:a0:43:9b:e1:14:a6:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Jul 26 23:00:34 2026 GMT
Not After : Jul 27 23:00:34 2026 GMT
Subject: CN=146ec7a1ca1b5c537448066399c280b0a68adac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:43:36:81:18:44:9b:8f:fd:21:ed:90:22:
32:63:42:ff:8e:5f:20:bc:c7:f9:94:39:e4:0a:ed:
df:cf:ff:cc:98:ed:f8:8e:99:8f:cf:e7:96:47:59:
4e:37:f7:76:8b:b0:0c:10:18:24:8e:de:3a:eb:19:
33:0b:c9:da:f9:c8:cc:b3:26:8b:d9:c6:6e:43:ea:
d5:a6:38:67:ed:09:6a:db:d3:2f:c4:b3:b1:a8:a4:
1d:3e:30:fd:5e:36:60:64:5e:ab:f9:62:14:38:79:
19:1f:19:83:87:c3:0a:f1:c3:b1:1e:97:f8:58:1d:
88:eb:c6:23:f0:b3:05:eb:d5:0e:0e:48:32:3d:e4:
56:f5:9c:b7:19:8d:6d:3f:a9:86:1e:d7:c2:3a:63:
0b:ee:5d:9c:a7:64:41:93:49:65:00:dc:cd:df:4e:
5b:e2:ce:5e:ce:fe:93:6d:14:f0:af:7c:49:4e:6d:
a7:23:7e:95:08:9b:9b:84:fd:5d:50:93:bc:19:2d:
71:50:14:ad:1b:21:af:a7:b9:a8:99:c0:9c:47:f2:
90:e3:da:c5:3c:07:df:9f:ee:4b:5e:ef:4d:b9:3e:
5e:80:1b:45:5b:ff:21:b5:40:55:53:e1:1a:8c:13:
fc:ba:ba:0b:3b:22:4c:91:43:3e:9e:9e:7e:78:8f:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:C7:A1:CA:1B:5C:53:74:48:06:63:99:C2:80:B0:A6:8A:DA:C1
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8e:61:34:5d:ae:46:71:58:59:d8:7a:09:27:b1:59:6e:06:
74:72:a6:5a:20:4b:e4:96:bb:5f:ba:64:dc:63:b9:ce:a4:97:
be:48:02:e0:1c:92:9d:e3:e5:a6:8c:f8:6f:b0:04:e7:dc:be:
3b:f8:6e:9d:e8:0c:0c:d2:b6:c1:67:e3:72:dc:02:4e:5d:98:
7b:df:89:11:e5:0d:f4:3f:59:a1:7a:d5:3f:79:fe:2a:d9:a8:
7d:56:71:d9:ef:53:cb:1d:67:07:1d:16:a2:52:a4:5b:2b:ab:
00:d7:e2:42:b7:d0:a5:dc:c4:fa:e2:88:1a:66:68:3a:f8:19:
fc:ba:d9:95:bf:1d:a4:79:cc:43:5b:da:07:52:a9:f3:a5:f1:
66:d5:5b:27:4b:1b:f7:61:39:7c:e8:c4:ae:2f:c4:87:e5:e9:
4c:07:be:9b:b2:b4:a7:7b:7f:f6:bf:20:b5:33:5b:12:25:7b:
46:64:c5:af:7e:74:d0:68:d7:79:b8:c9:8c:bd:5e:88:8c:e0:
97:d4:a2:3a:72:32:b0:a6:75:bc:52:f9:d0:65:9f:6b:80:fc:
08:f3:81:32:4b:8d:b3:8b:36:84:c4:00:31:62:d9:81:ee:7a:
f2:38:d9:86:63:b5:e8:4b:2f:1d:3b:91:3f:91:56:6b:b2:2c:
f8:39:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:16 2026 by rpki-client