Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: T3tT35FeQLm+egASpX7+S0f9HebGdZ96wRFyWHx4Kc8=
Subject key identifier: 00:6A:58:C8:88:BA:37:A6:FA:7B:37:8D:2D:25:02:33:B5:37:51:C8
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 019FA2CF244884AE0B2E04F58198D76727AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:51 +0000
Manifest this update: Mon 27 Jul 2026 09:01:51 +0000
Manifest next update: Tue 28 Jul 2026 09:01:51 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: uYuDj9+MIHFjlLPiLLpXRJ2FCiU57wlpkvHIjdXp12w=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:24:48:84:ae:0b:2e:04:f5:81:98:d7:67:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Jul 27 09:01:51 2026 GMT
Not After : Jul 28 09:01:51 2026 GMT
Subject: CN=006a58c888ba37a6fa7b378d2d250233b53751c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:62:f0:2a:99:3f:03:97:21:7e:fa:85:a8:
0b:4d:32:d0:e6:73:9a:2d:77:4b:ee:83:96:8f:da:
7d:aa:9d:b4:d2:9c:e7:48:12:b7:a3:d7:ae:32:aa:
8d:9a:87:fc:6d:23:36:11:bd:f3:97:15:0c:d4:40:
43:72:91:39:46:b9:c9:e4:cd:e8:91:4c:57:f0:ab:
3d:45:9b:b9:95:72:1b:93:89:bf:bf:68:8f:05:e1:
f0:f4:65:01:7e:0d:c9:ba:41:2f:c7:c3:23:31:b4:
9d:04:c6:a3:32:cc:4b:00:63:fc:6e:4e:41:1e:6d:
af:59:52:88:a2:00:00:75:4d:dc:43:c1:4c:03:01:
ee:4c:3a:f6:5e:cb:cd:67:7f:61:90:92:e0:0e:c1:
7f:1c:4e:f2:69:ca:b5:a2:e9:eb:39:23:bd:89:76:
84:cd:1c:12:01:ec:ed:5c:7a:d7:72:97:56:9c:e0:
25:74:0b:4e:2f:f9:fe:d6:86:06:64:bc:17:f6:a9:
98:9e:50:7f:f9:63:c0:fa:eb:5a:0a:17:a0:8e:cf:
95:d0:a8:ef:17:ee:7c:e6:12:46:c2:a7:e1:e1:e0:
a4:dc:b6:30:b7:76:82:6e:b2:9a:b8:20:c7:a2:49:
b3:8b:a7:41:4d:0a:38:2f:50:db:61:9a:e1:c8:c8:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:58:C8:88:BA:37:A6:FA:7B:37:8D:2D:25:02:33:B5:37:51:C8
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dc:05:10:8c:d2:48:72:bc:f1:99:74:c9:9d:53:93:98:e3:
fd:4c:e1:a8:31:76:d9:a3:a6:74:1a:22:d3:80:46:cb:c5:fe:
34:1e:00:07:5b:49:20:e8:94:ad:71:66:f4:09:93:72:e1:57:
c4:54:33:bc:5e:ce:0a:4f:38:d2:9e:45:fa:62:ff:f2:e5:74:
a7:65:7a:43:81:61:a1:b5:9c:a9:66:e8:5a:d7:ea:80:5d:91:
9f:20:18:da:87:53:68:0a:98:36:3a:04:96:24:c1:40:84:d4:
a4:18:5f:fd:98:4f:63:80:18:7f:c9:d1:4a:68:d1:93:c7:43:
4a:83:aa:39:21:a6:77:e4:17:20:79:7b:49:e1:25:3e:3c:19:
21:ac:a4:c7:db:c8:0b:69:bd:a1:a5:24:96:6c:5b:9c:32:c4:
3c:50:3e:98:8a:fa:8d:5c:35:53:5a:71:60:8d:ed:72:cf:21:
20:5a:75:d5:7f:0f:f1:c8:20:86:62:b3:f2:51:51:10:75:7a:
65:18:3f:87:01:51:40:e6:b2:cd:36:ad:12:e5:ff:59:bc:e2:
4a:95:86:3d:2d:fb:7c:c5:11:47:7a:23:81:3d:48:ee:a2:f9:
3b:a3:85:a0:5c:54:95:00:a5:a1:49:51:9d:78:46:50:9a:70:
6b:06:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:56 2026 by rpki-client