Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
File: tW8vzp5iphaOKy6UggRb8ssKtug.mft (raw, json)
Hash identifier: tHg36Y8opFC1PsYQBhtMLGNmuO6/VZ1ICFyL84uB0dY=
Subject key identifier: 98:B7:B0:E3:1C:14:6B:18:DA:79:F6:32:27:40:96:85:14:B2:B8:5B
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 019F6F180F5949D1E2C0CE1E9D72E70C339A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
Manifest number: 72
Signing time: Fri 17 Jul 2026 08:01:15 +0000
Manifest this update: Fri 17 Jul 2026 08:01:15 +0000
Manifest next update: Sat 18 Jul 2026 08:01:15 +0000
Files and hashes: 1: 3IFlA7XZRz-rJyiUo52SmKm4VsU.roa (hash: Gp8N57OCRY5f9RVcKJ2qU+3skzf1F3jJT8s5mJ+AwBs=)
2: h4sliK0wW-wV_fLIV-hVMdt8j90.roa (hash: nC61aBs28ehRtgiS7EhPTBum3rJp7V4Sc7tA8g7RTn0=)
3: tW8vzp5iphaOKy6UggRb8ssKtug.crl (hash: MImXaK2zqfVA0+n5crnSbBCN3uG089mmP+96I5e13xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 07:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:18:0f:59:49:d1:e2:c0:ce:1e:9d:72:e7:0c:33:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Jul 17 08:01:15 2026 GMT
Not After : Jul 18 08:01:15 2026 GMT
Subject: CN=98b7b0e31c146b18da79f6322740968514b2b85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:5b:32:1c:31:63:e1:89:16:b4:0f:2e:23:
c0:e8:1c:3c:d4:1b:be:99:2f:84:3b:e1:41:86:cb:
09:85:92:a4:a8:c0:95:a2:65:b0:de:3f:53:1f:20:
44:23:47:9b:74:6d:0d:38:9c:14:d7:f4:20:4c:98:
45:6e:1a:ef:09:1e:6a:99:31:e2:8d:82:6f:36:9a:
44:c0:7d:98:e4:1e:db:90:76:70:3a:53:98:79:34:
60:cc:25:04:c2:0f:20:9e:87:d0:2f:a2:95:08:da:
48:71:e5:95:2d:51:0b:4a:c0:2b:aa:12:1a:f0:b9:
3f:7f:79:9b:b0:80:93:01:91:14:14:d7:a7:47:83:
e8:44:91:7d:de:40:91:93:8a:ef:16:da:88:52:b9:
c9:21:cb:d2:91:77:e4:68:2c:df:25:1e:fb:b0:e7:
83:ca:06:e5:e1:07:7d:b6:b8:d2:ca:9d:e3:9b:3f:
3c:6c:9f:69:46:19:27:03:fb:25:bd:85:38:de:20:
d0:3d:ad:f8:c5:34:6f:5c:4f:e0:9c:9a:4d:53:ba:
25:23:03:f3:6b:aa:8c:74:fd:99:0d:e0:1e:06:c2:
8e:07:43:f4:9e:cd:c7:c8:a2:0f:f7:6b:0a:ce:66:
09:86:94:56:3d:36:89:c0:41:3e:4d:07:86:34:21:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:B0:E3:1C:14:6B:18:DA:79:F6:32:27:40:96:85:14:B2:B8:5B
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:06:07:ec:cb:b2:2d:b0:0e:2d:7f:74:c9:6c:b4:7d:96:
8e:11:df:2c:f3:2c:7e:79:42:9e:d8:4d:79:3b:3f:08:91:ca:
b7:59:2f:72:57:66:93:7e:a5:f4:db:d0:28:f4:5e:17:7b:c6:
1d:70:b5:15:0e:93:7a:16:a7:7f:17:c8:f3:de:fb:34:75:e3:
72:07:3f:c4:12:fb:df:42:1d:48:9e:36:90:07:14:a4:4a:29:
37:03:d5:57:40:51:dc:91:40:3a:a8:fc:44:65:4d:0e:aa:85:
a3:2e:bc:e2:26:69:cd:ca:88:3e:f9:b0:98:5b:d3:a7:c0:0b:
6a:42:b6:42:1b:40:77:96:4e:a2:4f:ba:ae:64:62:e7:ad:3a:
46:c2:a3:34:22:fd:dc:a9:d7:54:4c:a0:96:f1:a9:46:a1:dc:
3f:36:c5:74:2a:a9:76:18:57:6e:97:63:b8:70:da:56:c1:60:
27:40:dc:b2:06:51:2b:25:2c:6e:6e:db:0b:01:c6:66:a4:9d:
dd:a8:17:e8:8b:7c:7d:0f:e2:42:ee:8b:b8:b1:93:de:ae:29:
bb:88:80:b9:0b:87:28:1a:6d:8b:42:b0:e8:7e:26:f5:fc:13:
6b:2e:2b:7f:3b:06:ee:26:7a:1d:e9:2a:fd:95:a3:28:46:a6:
de:0a:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:43:09 2026 by rpki-client