Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: xYVHgAwHkNfBgTs/qvElJmoGZ5lROtL3Zb1xR4RLpCE=
Subject key identifier: AB:00:32:B7:34:71:C5:D9:F3:47:81:71:62:5A:27:22:E2:F7:82:AF
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019F9EBA86B597D335668AA2213385082E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 14:00:52 +0000
Manifest this update: Sun 26 Jul 2026 14:00:52 +0000
Manifest next update: Mon 27 Jul 2026 14:00:52 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: Iexvz1Xh3ePBwJGFcEVIVgus9TOHetQbDtbxXZg598E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:86:b5:97:d3:35:66:8a:a2:21:33:85:08:2e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jul 26 14:00:52 2026 GMT
Not After : Jul 27 14:00:52 2026 GMT
Subject: CN=ab0032b73471c5d9f3478171625a2722e2f782af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:ad:62:ae:f1:21:4a:21:b8:9b:2f:dd:39:
84:fd:8b:d9:56:d4:f8:6b:2e:20:13:1b:2b:06:96:
e8:88:e7:6e:8b:bc:1d:5a:d8:e2:9c:56:3c:28:6b:
8e:af:12:f1:5d:bc:58:56:3f:14:88:5f:f0:68:e5:
7b:38:b1:97:3a:b1:22:67:87:02:e2:61:2b:c8:27:
01:c7:66:a6:f4:ef:9c:04:93:f1:81:9a:b8:28:e3:
b7:ff:00:f7:5f:09:28:db:c5:57:20:34:65:74:aa:
5e:6f:9b:48:29:5e:c0:61:bb:8e:fd:f0:bf:3b:36:
3d:23:cd:ad:d1:a8:56:ed:f4:75:48:17:7e:3d:93:
47:48:b8:fa:66:32:b8:7e:f9:8f:79:2f:28:d6:15:
1a:6d:d5:d3:2a:42:f7:64:3b:d0:d8:dd:52:8c:9f:
f9:57:94:bc:93:00:80:b6:f4:f0:e6:ba:e7:03:b5:
4e:0a:ad:a9:e8:8a:91:6e:2c:9c:b4:39:03:fe:b2:
ed:48:37:80:b6:91:31:c0:49:ac:b8:f4:be:36:7c:
9c:1d:3b:17:db:07:fd:f0:df:c4:8f:c9:c4:dc:a3:
65:38:21:76:6c:45:4b:52:a5:e2:2a:54:af:71:c4:
db:eb:90:73:e2:01:73:15:22:77:df:b0:61:43:fd:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:32:B7:34:71:C5:D9:F3:47:81:71:62:5A:27:22:E2:F7:82:AF
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:b5:91:a5:9b:bf:be:68:51:4b:ea:11:90:28:20:4d:de:
0b:92:1e:e8:05:f8:d3:1b:e8:f1:99:42:eb:e5:40:1c:7d:ca:
0d:3c:83:6a:48:d8:cc:e5:a9:7e:4d:f2:f9:93:6e:dc:db:ae:
5d:49:82:99:a8:d9:5b:47:a3:3b:2b:32:8c:40:90:0b:1a:4a:
09:79:27:31:01:bc:e1:76:85:69:da:01:df:f3:26:a6:a2:2c:
39:38:42:ea:25:69:cc:20:66:ff:9e:fc:e6:a8:75:c4:fc:39:
e3:d2:cb:4c:78:cd:14:22:e2:99:53:25:21:c8:fa:22:de:37:
52:32:a5:22:c1:77:9f:48:6c:f0:c8:95:9d:7d:c6:36:9e:bc:
c4:ad:ea:81:c3:3a:2d:4f:c0:5a:08:2a:ae:a3:f6:0f:b4:0f:
6f:ba:4d:08:43:76:e4:1b:69:bb:5b:c1:b3:78:50:df:4a:f1:
9b:08:50:4b:e1:68:73:76:c8:ac:0d:3f:a0:3b:ca:6a:4c:6e:
e6:02:15:69:c9:69:af:c2:45:78:13:11:d9:56:38:b2:06:12:
76:db:05:a5:c0:b2:9c:f0:06:b7:8c:29:46:85:a9:04:05:01:
36:a6:01:7b:85:e5:b9:de:10:0f:c9:b6:b0:3d:a4:7a:1e:4c:
ec:dc:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:44 2026 by rpki-client