Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: 8nUyNNwDUSBm0F9k7xAKOcmyGDRepdXK9OUAQL1r6mQ=
Subject key identifier: 94:8C:D5:04:A1:87:16:5D:47:0F:FA:5D:D7:BE:A8:8B:41:69:BA:EA
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019FF9B5D2C5374CA2C3C8678323D9BCECA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 0261
Signing time: Thu 13 Aug 2026 06:01:10 +0000
Manifest this update: Thu 13 Aug 2026 06:01:10 +0000
Manifest next update: Fri 14 Aug 2026 06:01:10 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: OpuRBAIeTZn+Fg1nA9k+oJ0zcnyNyUX1pE2huOxByvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b5:d2:c5:37:4c:a2:c3:c8:67:83:23:d9:bc:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Aug 13 06:01:10 2026 GMT
Not After : Aug 14 06:01:10 2026 GMT
Subject: CN=948cd504a187165d470ffa5dd7bea88b4169baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:e3:79:65:c1:86:aa:f0:60:fd:5d:12:01:
a5:52:37:d8:7d:15:0c:6c:b5:4e:36:a3:78:47:77:
3b:27:54:3f:f4:c7:ca:6a:94:1f:46:c9:c2:5f:53:
a4:68:e9:f2:eb:0e:b9:7f:c5:54:33:2f:1f:a9:48:
b4:ca:21:d1:b3:82:a4:21:44:5c:e2:5f:cc:f3:e0:
14:2c:01:67:3b:ab:ff:fe:c2:3d:c1:41:a7:2c:fc:
30:30:1c:67:ce:30:ea:32:ed:71:05:09:1b:08:34:
ec:e6:7b:89:7c:86:38:a3:8f:5f:0b:22:34:3e:69:
18:09:82:55:47:b4:9d:66:58:82:ad:02:b1:1f:49:
aa:f0:03:9f:bf:6b:e4:5b:19:da:8f:30:d0:9f:f5:
26:90:4a:59:c3:19:3f:12:77:0c:7b:f9:ec:f7:be:
1a:25:86:40:11:c6:f2:06:24:0d:0b:27:6e:5f:3e:
0a:b3:a0:82:09:7c:a9:40:ae:f4:23:13:28:01:6c:
20:a0:02:07:a5:66:31:09:a4:0a:99:00:dd:6e:79:
be:a6:c7:fb:2e:bf:01:79:99:6e:f0:9d:75:b3:23:
00:62:80:66:48:86:29:d6:10:00:02:c2:36:4a:4d:
13:26:c8:36:30:19:d3:a0:6c:43:07:36:79:2d:e4:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:D5:04:A1:87:16:5D:47:0F:FA:5D:D7:BE:A8:8B:41:69:BA:EA
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:59:eb:a7:3a:e8:64:f6:d4:cc:27:ce:59:09:f0:14:bd:
08:03:33:41:ca:21:69:51:2d:3c:8d:91:e2:5b:29:82:9a:2f:
7e:c6:79:b2:d2:4c:53:ce:2d:ad:36:23:01:f3:cd:20:c1:42:
99:cf:26:cf:ae:af:2f:1f:55:10:51:83:ce:4d:d4:24:56:22:
b3:c0:9f:e8:77:78:90:a0:ec:29:58:6a:c8:79:e5:ef:93:e9:
73:20:f7:97:4f:33:c1:fd:57:87:88:a1:61:4a:12:f1:44:36:
c7:26:05:a0:9a:d1:9a:aa:83:96:fb:78:8c:29:29:c6:47:94:
56:b6:a6:12:44:62:2b:63:0f:eb:7e:21:82:f3:a8:49:3e:44:
58:9f:29:53:f1:5c:bd:00:79:f0:5a:13:eb:b2:dc:5b:35:d9:
65:d3:90:44:74:5e:1b:fa:89:5b:12:94:ca:32:29:dd:1d:61:
d7:1a:39:1b:ec:be:86:62:d8:45:8b:76:81:50:96:cb:62:96:
e4:15:77:b8:e1:46:79:55:d1:45:75:49:29:3f:c6:54:54:4d:
bf:7e:f6:f6:f8:20:58:c7:7c:c1:2d:e0:fc:36:ab:7d:d7:5e:
9e:0e:9b:48:a4:69:49:1c:4a:55:93:1e:4a:00:9a:4b:a5:a9:
2f:67:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:55 2026 by rpki-client