Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: 43CSAipyJ+bXNF5WsMfta2/HuMdTupImw4cG9iVpnaM=
Subject key identifier: BC:D3:5B:A2:17:61:0B:75:85:8B:06:51:3B:6F:41:91:39:85:89:E2
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019FCB5C88C9C3A5AF40AE28E1358A2913F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 19F7
Signing time: Tue 04 Aug 2026 06:01:06 +0000
Manifest this update: Tue 04 Aug 2026 06:01:06 +0000
Manifest next update: Wed 05 Aug 2026 06:01:06 +0000
Files and hashes: 1: W1R_MwtHoAdH6yPsB-c12WKhU7o.roa (hash: KLs4NvEKgNRCt+EdFhQCXmtrld1t0jSN+3oVmyVCXLo=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: cW5YfRrda0c71EMpAqL7jPrScPiiOH3h/EhZRnfuwfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5c:88:c9:c3:a5:af:40:ae:28:e1:35:8a:29:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Aug 4 06:01:06 2026 GMT
Not After : Aug 5 06:01:06 2026 GMT
Subject: CN=bcd35ba217610b75858b06513b6f4191398589e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:6b:2a:b5:1e:af:da:55:9f:24:9e:f3:44:
25:b2:32:03:53:22:d2:86:96:e1:65:94:ec:49:92:
40:d5:f0:2e:23:e2:98:80:fa:70:f2:24:6d:ed:66:
27:8e:7b:9f:47:11:77:57:c4:54:c2:35:54:99:f8:
6b:0e:96:4a:cd:ba:68:e6:d1:1b:88:cd:6c:96:95:
53:45:44:9c:32:fd:2f:c7:2b:31:28:00:c7:ea:79:
b0:6c:54:16:9e:69:5a:c9:4f:16:66:07:cc:4f:18:
89:1a:5c:10:bf:e9:50:f7:32:8e:98:fa:af:58:04:
b5:5b:47:84:b4:4d:1c:fe:75:e6:ef:f1:fd:9d:90:
cb:75:ab:db:50:ae:31:44:e6:93:76:8a:be:bc:ce:
e7:36:fd:e1:f5:af:c4:c5:3c:86:79:e5:bf:e0:97:
0f:b6:3a:45:01:73:7d:bc:66:38:ab:bf:9e:61:ee:
1f:5f:96:c6:07:49:ba:34:f6:0a:0a:2d:e2:32:0e:
42:1a:58:de:56:29:0e:35:18:5f:50:83:b3:b4:d3:
36:a4:83:fe:cf:d3:0a:5f:a5:05:19:e2:ad:e7:9c:
1a:c6:e2:0e:7a:3d:7c:6d:14:93:a5:96:4c:73:6b:
ee:6b:55:40:9b:d5:63:d4:86:3d:63:53:5d:10:f9:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:5B:A2:17:61:0B:75:85:8B:06:51:3B:6F:41:91:39:85:89:E2
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:58:70:51:ff:35:57:8c:be:2f:07:e9:67:15:26:bc:42:
d7:b4:1f:3a:2e:49:4f:1f:80:03:3c:ae:c6:54:fe:d5:1e:60:
27:07:22:16:4d:0c:8f:92:cc:fc:e7:5f:6b:b4:a5:bc:e6:08:
b2:0d:d3:54:38:93:01:43:10:24:52:fb:82:cd:dd:92:9d:d1:
e6:c7:10:36:78:22:c8:b2:e5:5c:9e:84:ca:c8:9b:c8:b6:9f:
3e:c7:5e:d1:67:d6:92:77:62:ab:d1:bb:95:7a:bc:51:17:87:
bf:06:ca:3a:94:a9:2f:69:26:03:a2:7e:b9:b9:a5:38:e8:91:
4c:99:d8:02:ca:ee:0d:ce:11:8d:f2:1c:98:ae:97:6e:1d:f1:
8a:6c:2f:20:79:77:d2:85:80:39:13:da:d7:17:89:bb:4d:b7:
17:89:d0:fb:1f:0c:a8:54:ac:fa:28:89:b4:7f:ea:a4:0c:ca:
36:47:ec:51:d8:7a:d9:61:6d:a9:77:33:8d:35:72:af:84:12:
5e:c8:39:3b:38:dc:e8:de:90:91:4b:ba:46:c5:35:7c:03:14:
72:55:58:ba:89:ba:bc:de:5f:29:3b:37:0c:3a:27:85:b4:43:
b0:0b:10:df:b1:05:5d:21:8c:d5:e7:4e:65:53:21:4b:69:ce:
19:d9:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:46 2026 by rpki-client