Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
File: TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json)
Hash identifier: RVurT1r7s3mCqeToY+3/PM6/Y/MVejSx0GmDf/iDM3I=
Subject key identifier: B0:CA:74:91:88:27:07:E3:B4:80:01:49:35:BB:27:EC:A4:58:0B:01
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial: 019FA2291F35DC314A4F90F5990BD756AE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
Manifest number: 0678
Signing time: Mon 27 Jul 2026 06:00:31 +0000
Manifest this update: Mon 27 Jul 2026 06:00:31 +0000
Manifest next update: Tue 28 Jul 2026 06:00:31 +0000
Files and hashes: 1: GHKMa_KSipTSmf3pI2wnkS6Tr20.roa (hash: OnS7nAX4PtptEhEkwUT11ufA7pPlMC3cHL0kMdeoeW8=)
2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: hlxAb19H9kAIkiQM93GWIwy67YDJkl+7Mm5kkShRFQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1f:35:dc:31:4a:4f:90:f5:99:0b:d7:56:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Validity
Not Before: Jul 27 06:00:31 2026 GMT
Not After : Jul 28 06:00:31 2026 GMT
Subject: CN=b0ca7491882707e3b480014935bb27eca4580b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:5f:d0:8c:09:c2:4a:dc:9e:d1:e8:2d:76:
3f:24:71:65:88:81:cb:f4:41:4a:e8:61:67:d7:0f:
00:d9:df:70:6a:e2:7c:c2:58:f2:76:a1:f9:63:a3:
a6:48:43:86:93:f1:32:ea:4a:30:2e:1a:ff:d1:a2:
5b:b2:50:1a:c9:78:1e:7a:c1:a0:2c:fd:3d:1b:98:
d8:23:7a:60:95:2a:c9:ea:66:a2:09:85:af:ca:73:
a6:f7:e4:a2:3e:0b:a7:33:99:08:37:64:6a:76:08:
77:a3:ec:92:1c:54:59:c5:43:72:02:49:3b:7d:fa:
45:e6:a1:0d:b4:f9:66:a6:02:ac:07:c5:31:59:28:
f9:be:f8:37:97:5a:7b:f0:d4:d1:9e:0a:58:bc:ca:
ea:ad:39:f1:0a:e9:7a:1b:a3:9c:06:02:6a:cf:4a:
48:85:c3:99:55:92:64:96:22:35:2f:1e:b5:4b:6c:
d2:a9:61:f2:06:3e:c6:51:20:05:5a:ed:60:78:3e:
40:48:89:5d:94:cf:e3:12:86:70:6c:24:3c:36:63:
5e:f2:dc:65:72:39:06:b9:4d:31:37:2c:ca:19:01:
bd:89:d6:ff:64:17:fa:18:66:d2:1e:e5:70:a4:ca:
3d:72:30:d5:0f:5a:44:88:9b:58:41:22:40:6d:47:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:74:91:88:27:07:E3:B4:80:01:49:35:BB:27:EC:A4:58:0B:01
X509v3 Authority Key Identifier:
keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:60:28:a3:9e:11:88:fe:c6:4b:ee:7d:8c:53:8b:a4:a4:b5:
45:cd:9c:82:ba:67:87:7c:f6:77:e6:41:cb:62:7d:65:75:bb:
15:ab:f1:3e:a5:0a:40:c3:de:b9:92:29:4e:3b:92:55:fb:1f:
85:e5:6f:c8:64:c3:36:fe:c5:68:13:d4:1f:d4:52:71:ea:c9:
79:f3:6c:a0:74:d4:9b:e7:79:ac:9c:be:09:93:66:f5:b3:b7:
cd:f4:98:d9:1a:5b:1f:5a:01:56:52:68:a4:1a:22:f3:77:99:
1c:01:8a:e1:36:ce:b6:22:e8:ce:8a:db:43:a9:5c:fc:2f:1b:
2a:d1:68:b2:58:2d:9b:f9:79:1b:33:60:40:44:cb:d2:7e:f5:
5f:f2:3f:45:6f:c8:57:be:03:0d:c1:52:88:c4:a8:6a:66:a2:
21:64:ca:42:95:5e:05:6d:af:af:dc:63:73:93:39:8a:12:c7:
f4:93:65:64:3d:79:27:43:54:b8:6e:60:b3:dc:01:00:c6:be:
5b:b0:47:08:21:d4:a1:9c:ae:a9:88:34:57:0e:72:5b:3e:b0:
fd:69:75:ca:ba:a6:2c:80:54:5e:9e:ce:60:65:84:19:48:85:
ec:da:7f:6f:0a:ba:9a:14:0b:fe:e1:a7:20:ce:bf:da:81:6e:
14:fd:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:04 2026 by rpki-client