Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: 6VMG7iv8S6fMNzUwwdFFagxhr4GcsAGZ6/9erEyA3js=
Subject key identifier: 1F:9C:51:89:5C:5B:A5:73:16:57:E0:14:E0:05:99:6A:0F:A0:80:2C
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019F864458C1962638B0237408273BA3C413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 20:00:53 +0000
Manifest this update: Tue 21 Jul 2026 20:00:53 +0000
Manifest next update: Wed 22 Jul 2026 20:00:53 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: mqk45rWA5wgEBdNzUHJw0dyE0fSslGnK0cxDAw3PESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:58:c1:96:26:38:b0:23:74:08:27:3b:a3:c4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jul 21 20:00:53 2026 GMT
Not After : Jul 22 20:00:53 2026 GMT
Subject: CN=1f9c51895c5ba5731657e014e005996a0fa0802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:35:68:d8:81:35:20:b1:d9:8f:d4:53:5f:
0f:bc:84:36:83:c0:0b:c2:44:47:0e:92:67:0b:e1:
aa:24:03:57:4c:04:fd:77:e1:64:71:02:1c:d1:ef:
23:6c:a0:87:06:64:3f:9a:06:19:e1:0b:2c:d1:17:
17:16:44:33:09:d9:2e:4b:97:a3:3c:cd:22:7d:a8:
23:ea:e7:b4:de:fb:9b:79:52:eb:7a:4e:83:c2:f2:
df:23:f6:13:ff:fd:67:0a:17:a0:20:cd:bd:60:0c:
a0:cf:f4:6b:44:44:05:4a:2e:20:48:95:a6:3f:1d:
9d:84:aa:cd:bc:a5:b6:8a:be:c3:7b:05:87:fc:4f:
87:a9:a7:c2:aa:67:bf:f1:dc:00:f7:1b:ec:8b:66:
c4:a1:21:e7:d4:47:fe:a2:97:61:55:6e:82:4f:0c:
40:ce:ee:b1:dd:ef:22:4d:51:24:17:7b:a5:84:4b:
bd:21:62:fc:2e:1d:74:3a:90:fe:ef:9d:e9:3e:6d:
b0:21:50:fc:ce:4f:c6:58:21:9c:75:f6:ec:a3:9e:
2c:3d:76:b0:b3:b3:0a:76:87:9a:6d:eb:a8:47:9d:
62:4b:9f:df:8c:fe:18:ee:a9:8e:17:a5:40:63:57:
f6:67:c6:6b:24:08:b7:de:6b:d5:bd:ed:c3:8d:04:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:51:89:5C:5B:A5:73:16:57:E0:14:E0:05:99:6A:0F:A0:80:2C
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4a:94:a9:6e:6f:0f:e2:cb:54:d7:7e:a8:85:24:0f:6f:57:
ef:ca:47:4e:da:07:66:6b:eb:e0:c9:93:0f:b6:17:36:27:0c:
05:14:9d:73:62:c3:14:04:b5:9a:0d:c9:a9:43:8e:a3:51:27:
70:07:a8:b9:87:45:ad:db:78:4c:06:1a:56:7c:b8:43:26:df:
c2:52:94:3e:37:cc:e6:11:1d:fb:01:0b:b0:bf:36:4d:a9:d0:
6f:0e:f1:a9:6a:32:09:ea:2a:48:83:24:30:cd:17:dd:ae:b6:
e8:7f:59:df:a9:43:a8:b8:38:af:e8:23:98:45:d5:66:21:05:
0e:55:5d:34:37:78:8f:99:ec:bb:e3:eb:f0:90:8c:a1:1c:27:
f5:c5:5a:cb:12:14:7b:bb:4e:69:89:c0:e8:d6:d2:f6:52:1c:
f7:ab:b7:7c:0f:01:e4:6c:4b:25:13:da:ea:f4:f9:81:5d:17:
3e:02:8f:1a:72:b5:1f:7a:1a:e8:53:f7:43:f9:9a:c2:3e:60:
bb:70:4c:57:66:f7:8f:45:4f:86:37:66:b5:00:89:2a:ac:c2:
95:56:1c:d1:1d:9e:27:18:aa:ce:29:91:9c:14:6f:d4:f4:0a:
10:cd:98:44:21:e9:65:5c:6d:4d:3d:b5:82:cd:0c:2d:c1:6c:
e9:c8:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:36:57 2026 by rpki-client