Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: rmYnUYgxIJmsVAm65aYVx6nwzNCaOfbbri3A8SAOspA=
Subject key identifier: 79:0D:92:B5:8F:38:06:BB:B4:BC:5F:7F:B6:FC:D7:56:6D:A6:48:A7
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019F19E882EB6505013314A20083507D2E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1287
Signing time: Tue 30 Jun 2026 19:01:35 +0000
Manifest this update: Tue 30 Jun 2026 19:01:35 +0000
Manifest next update: Wed 01 Jul 2026 19:01:35 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: FF2WY2/kelURgX4cUJm01qQUUZO69DZSce91lyCP5dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:82:eb:65:05:01:33:14:a2:00:83:50:7d:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jun 30 19:01:35 2026 GMT
Not After : Jul 1 19:01:35 2026 GMT
Subject: CN=790d92b58f3806bbb4bc5f7fb6fcd7566da648a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:d7:85:0c:e4:13:53:07:c4:d4:9b:dd:95:
22:7d:a7:80:1b:6b:86:c8:d5:c0:b7:a5:4f:d5:53:
fe:3b:a7:87:b7:61:6c:11:7f:71:26:37:df:ad:f8:
e8:19:ac:9b:9c:22:46:e7:f0:94:a1:b9:a3:10:36:
f0:61:3b:c3:c9:a4:25:35:4d:3c:48:26:5d:a0:37:
91:65:2d:34:6d:87:ae:dd:52:24:ae:6c:31:b3:92:
f1:7e:57:35:64:03:1d:76:a9:66:e5:25:b2:1d:ac:
cc:29:d3:2b:ef:34:91:e5:d5:f0:98:45:e1:7d:66:
ec:9d:8d:8f:e1:0c:6f:20:87:cc:04:dd:f6:60:a5:
6b:0b:bb:0f:af:db:77:e5:97:bb:cb:bb:53:7a:2e:
2a:da:8c:7a:80:c5:58:86:3c:e0:9c:13:97:2a:96:
bb:40:e1:5b:73:04:b0:4f:3d:f4:2e:69:24:f0:05:
95:63:94:e8:07:36:98:52:57:95:2d:e2:b2:a5:e0:
4e:76:21:4c:6d:e3:be:a5:82:07:73:aa:62:df:e8:
70:5d:23:f4:94:b9:b3:28:a2:9a:5e:b4:f9:bc:50:
b0:7b:4e:a8:cc:27:2c:34:42:e5:1d:9b:bd:ce:c8:
98:b1:9e:7b:65:27:da:0f:de:c5:9e:bd:5f:10:57:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0D:92:B5:8F:38:06:BB:B4:BC:5F:7F:B6:FC:D7:56:6D:A6:48:A7
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:62:bf:f6:ed:b7:ec:50:f8:41:8c:ac:03:ca:b8:07:72:
94:fa:8a:08:40:a0:76:e3:9e:ae:3d:ea:88:26:f2:a7:67:21:
80:67:c6:2f:3d:7a:3c:30:8e:7e:38:bc:8c:ab:92:7f:ff:b7:
12:e6:85:d7:80:9c:e5:6c:d3:be:49:be:f2:ef:fd:c6:f4:77:
ae:8e:a2:2d:78:09:42:d5:07:26:4a:10:05:a3:bc:2b:9e:07:
0f:9a:7d:cd:b4:e1:26:a6:54:e2:72:b0:ae:25:1b:12:ce:2d:
f6:4e:a8:7a:3b:21:b0:6b:0b:56:c7:da:44:ca:71:e3:9f:d9:
6f:0d:92:9e:9b:ed:47:e1:21:a9:8c:09:53:0c:2e:5c:dc:33:
57:83:03:f7:25:6d:c6:3d:47:74:80:dc:38:e2:79:f7:35:e0:
69:28:7b:21:c0:38:55:55:e9:7c:02:7b:69:11:f4:fb:82:c2:
d0:5c:f7:0d:a4:62:50:c8:d6:b6:cd:d6:93:13:ae:03:02:52:
80:eb:d8:ff:27:26:f4:34:89:41:96:f3:85:ea:aa:31:c2:4a:
f5:ee:9c:f8:d6:da:87:50:d4:47:9c:61:cf:18:e0:37:94:7f:
e6:c2:a3:a5:0a:37:be:4d:fd:59:41:59:e7:f0:94:0d:20:fc:
c4:82:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:18 2026 by rpki-client