Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: mtZLsajWAg7dGgk6nZ22/GMz/UHdMlvSsC+mWuHxpG4=
Subject key identifier: 12:40:2C:D1:04:B6:A4:E7:B1:57:B7:D7:E9:EE:71:02:DE:5D:3E:C5
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 019FA0DFE526AA9EF6FB8CA8074E18536CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 046C
Signing time: Mon 27 Jul 2026 00:00:55 +0000
Manifest this update: Mon 27 Jul 2026 00:00:55 +0000
Manifest next update: Tue 28 Jul 2026 00:00:55 +0000
Files and hashes: 1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: q0pneKe1egN5+FvI8m2FE91tSI8kkJ5mCc3YPdh01U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:e5:26:aa:9e:f6:fb:8c:a8:07:4e:18:53:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Jul 27 00:00:55 2026 GMT
Not After : Jul 28 00:00:55 2026 GMT
Subject: CN=12402cd104b6a4e7b157b7d7e9ee7102de5d3ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:24:14:ec:7e:cb:e8:f6:6c:51:4b:44:8e:
c7:52:42:30:ce:9a:2d:1a:72:28:fc:74:11:f8:d4:
8a:35:20:cb:69:10:71:8e:81:73:9d:f1:03:15:85:
d9:4e:fb:20:02:7d:57:1e:f8:89:6a:48:e6:4b:01:
9a:a4:cd:68:b0:76:d1:c7:ea:f0:a6:2a:08:5d:e3:
86:89:77:19:46:bb:97:28:26:fd:b9:85:aa:af:bd:
ba:1f:be:3a:cd:e7:a8:ee:9d:6d:74:af:5e:04:9b:
00:a5:51:90:35:81:e6:6a:8b:51:e3:0c:ea:c5:5e:
08:f6:a8:48:90:ea:9d:e6:a6:50:81:6b:08:dc:76:
96:f3:db:7b:0e:f9:f1:d1:75:96:87:8b:b4:cb:14:
54:bb:8f:92:c0:29:cd:6c:1a:ae:1a:9b:74:a5:33:
b6:ff:dc:8a:5c:f0:ed:29:3e:42:15:0f:6e:4b:a6:
95:83:4c:e7:d1:15:5e:61:75:72:42:7f:34:6d:e6:
c7:fd:28:17:5d:f2:a0:de:35:89:d5:91:36:2c:48:
9e:b7:d0:07:1a:f5:e8:e1:50:fa:bd:86:0a:eb:5c:
68:68:76:80:d9:08:7f:30:0e:4b:83:88:7b:62:ee:
27:b2:1a:2c:9d:cb:1b:ee:1f:57:a6:8a:3a:57:83:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:2C:D1:04:B6:A4:E7:B1:57:B7:D7:E9:EE:71:02:DE:5D:3E:C5
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:d6:50:c1:7f:69:01:16:93:10:cd:68:77:16:d4:1d:23:
26:18:90:77:e2:79:33:f8:36:3e:86:a7:42:b9:64:d4:70:2c:
5a:0a:41:5b:56:02:de:a5:9d:d3:d7:c3:82:11:c2:97:cc:ad:
98:c3:d3:0d:35:11:04:b8:0d:be:9b:fa:9c:3a:1a:c0:81:26:
0d:21:66:18:ab:44:7d:b6:ee:2d:95:a9:5c:21:90:00:20:2a:
ca:66:27:e5:8a:e1:bc:00:af:78:3a:6f:3c:98:ab:30:72:75:
84:be:e8:d3:9d:22:bb:74:2f:31:a1:20:55:2e:07:cd:79:a5:
4b:e0:37:66:65:cc:a1:40:ae:e4:b1:48:d7:a9:30:55:fa:41:
75:00:64:61:b1:e1:cb:4c:78:87:64:30:48:5c:56:b4:d0:f1:
8d:71:55:1b:dc:1c:a6:bc:c6:49:4e:54:d3:d2:fe:f0:90:8c:
d4:36:07:70:43:15:8c:c0:44:4c:25:bc:2b:a9:bc:84:32:d4:
fd:04:e3:c8:c8:56:ff:4e:de:15:b7:84:c2:cf:08:cc:a7:a8:
78:ac:8e:da:4b:9a:59:96:d1:f3:e9:c8:22:4e:3c:01:a4:d0:
35:eb:07:a9:42:9b:75:2d:3e:9e:76:06:4f:d7:f3:44:88:76:
65:85:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:44 2026 by rpki-client