Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: fiwNMY9dThGy0M0rYPjRuNU5/1L6Ev6/SVQ2lQJbtqw=
Subject key identifier: F2:36:1C:12:E8:68:E7:D3:F0:C8:72:55:D7:B6:73:F0:7C:35:59:DB
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019F5E243B7028990C26897D72CD42A3465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 19AC
Signing time: Tue 14 Jul 2026 01:01:00 +0000
Manifest this update: Tue 14 Jul 2026 01:01:00 +0000
Manifest next update: Wed 15 Jul 2026 01:01:00 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: flbOq7wUkNkf3gz5Yc5Y0g2rht4je/tsiFFPb0BVUoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:24:3b:70:28:99:0c:26:89:7d:72:cd:42:a3:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jul 14 01:01:00 2026 GMT
Not After : Jul 15 01:01:00 2026 GMT
Subject: CN=f2361c12e868e7d3f0c87255d7b673f07c3559db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:eb:00:ec:a5:bc:a9:a1:3d:92:81:ad:ad:
64:e8:f8:2b:45:3a:23:fb:f7:f0:b7:ab:8f:d5:ad:
8a:2f:e2:4c:3b:cb:03:44:a8:88:b3:9b:d6:63:1b:
91:e5:52:78:00:22:88:eb:ca:8a:25:86:c9:92:43:
79:74:72:59:d9:31:c6:01:29:f4:a5:69:74:26:30:
33:d2:5b:a7:c4:87:b8:72:c5:49:c2:23:24:33:0c:
38:89:5c:c6:c3:6c:0e:df:ae:e5:20:2e:33:8f:a5:
49:24:64:0f:6e:e9:19:e1:11:00:e7:d7:62:e8:1b:
91:8e:d8:01:ee:3d:30:c2:ee:5b:80:2f:c5:e8:4b:
8e:e7:0c:24:fe:d3:48:b8:fa:f2:4a:6a:e3:b1:69:
ba:d2:6d:0c:65:7c:83:4e:01:cf:c3:df:ac:04:d5:
48:95:b6:8d:ae:c8:36:aa:5a:4b:fe:2a:07:fe:5f:
02:d9:06:64:5a:c3:b3:55:7b:21:59:fb:33:70:1f:
fe:ef:d5:7f:9c:10:fb:96:57:14:c1:2b:e1:46:14:
27:90:2e:21:59:b6:a0:38:07:c5:ee:26:c2:1c:7d:
d1:14:72:ba:93:ea:94:69:e0:d9:7a:bf:5d:37:54:
c3:f9:83:8e:de:90:d0:e0:b8:a6:e1:81:6b:a2:7b:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:36:1C:12:E8:68:E7:D3:F0:C8:72:55:D7:B6:73:F0:7C:35:59:DB
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:00:7a:b2:0d:1e:ee:ac:2a:0f:b6:28:a1:a8:cd:f1:a8:20:
1a:b9:6a:a6:b1:07:2f:2e:61:19:5a:1f:13:6c:85:52:9a:c1:
66:27:3c:bd:e4:90:17:0e:4c:57:ba:02:30:20:9c:0b:c0:85:
a6:49:d3:b7:a1:8a:de:f4:71:55:0f:11:e3:a0:51:67:66:71:
f0:6e:3d:f7:58:aa:a8:a6:c7:32:11:9c:7a:84:96:8b:98:83:
a1:83:5f:a3:92:11:e3:58:2e:ae:a2:f7:c4:d1:8d:e9:0f:f7:
e5:7f:51:9d:b8:8b:a5:d2:b7:7b:91:75:e3:14:bb:0e:34:c8:
90:79:47:2e:70:06:4d:97:5b:03:d6:5a:6f:13:9f:53:67:f5:
36:d1:7b:88:8c:da:ce:f3:7c:92:e7:91:21:f6:a6:60:0b:87:
07:c5:89:8d:da:98:ba:08:cc:f5:ce:16:77:15:89:69:9b:eb:
7f:61:4e:db:df:a1:e6:05:5a:4d:4d:e5:2b:68:1b:56:e8:9f:
ce:44:69:3d:ff:7d:df:65:b1:23:37:06:40:a1:df:86:bd:e4:
42:0c:95:4a:80:8a:bf:a8:36:b7:86:df:77:4e:a7:df:f4:4c:
a3:87:7f:6b:6e:45:55:3f:bf:59:fa:fc:3d:3b:75:92:7b:af:
68:b2:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 07:49:23 2026 by rpki-client