Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: +Em96ORhstqAO4XuE0/Eul6grbz57VpoiR9q9YB4FVY=
Subject key identifier: 2B:F8:E1:A5:7A:DE:6C:94:FF:F6:E6:F0:BD:7F:6F:57:6E:B4:B5:4F
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019F122E8D812B22CA7B4ABA6B7061FAAE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 07:01:08 +0000
Manifest this update: Mon 29 Jun 2026 07:01:08 +0000
Manifest next update: Tue 30 Jun 2026 07:01:08 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: InXpgRYUikh4RWhrjTf4m91ve0CEcyCWFICp/cWeOZ4=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:8d:81:2b:22:ca:7b:4a:ba:6b:70:61:fa:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jun 29 07:01:08 2026 GMT
Not After : Jun 30 07:01:08 2026 GMT
Subject: CN=2bf8e1a57ade6c94fff6e6f0bd7f6f576eb4b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:08:99:e8:6f:89:86:22:61:90:fb:70:1f:
65:9e:47:aa:f0:4c:4c:2f:ec:40:ef:db:0a:06:15:
de:e2:ea:d6:a3:10:d8:55:81:66:d5:cf:50:6b:58:
cd:30:7e:c1:9c:30:21:a3:f9:5b:9b:db:bb:2a:02:
0c:11:65:c1:c6:a7:7a:26:00:c0:ea:18:85:6f:24:
64:85:e5:77:d2:27:0a:0d:d0:43:03:31:e4:d5:a3:
8f:18:92:80:ef:9d:fc:c0:66:ed:50:09:57:9e:ca:
ca:af:9d:ba:75:fa:85:a4:02:68:f7:4b:26:61:ac:
6e:0a:66:70:e9:e9:7e:db:97:e4:ee:a3:89:b9:07:
ee:73:89:f0:07:55:c0:aa:6b:d3:04:e3:0b:93:83:
3b:a1:d8:c1:bc:b5:06:d3:c9:e5:f0:1d:ae:3f:05:
bf:d7:8c:8c:63:a7:61:24:87:f3:50:c5:73:12:c9:
7a:03:ba:ae:23:21:8c:89:8d:4f:eb:6b:8c:8d:9b:
e7:12:f6:9c:30:8d:f4:77:e4:a2:33:a4:3a:c3:16:
5d:8b:a9:07:c9:9a:a3:c8:da:9f:8e:ed:b2:8b:99:
1c:bb:27:10:54:52:fe:c0:87:c5:7b:ab:52:fd:37:
85:dc:90:02:f1:79:42:77:ef:c7:30:be:df:83:28:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:E1:A5:7A:DE:6C:94:FF:F6:E6:F0:BD:7F:6F:57:6E:B4:B5:4F
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:c1:11:27:e0:cc:1a:73:35:82:18:1c:df:ea:2b:d0:85:
ea:6a:e4:d2:d2:8c:1d:2d:65:6e:8e:6f:73:68:b2:fa:74:98:
ad:b9:f5:73:0e:e9:ee:1a:67:cb:e5:90:87:89:f0:96:0d:36:
85:a2:aa:10:7e:7c:95:62:b4:8e:c2:6b:86:fe:d7:d4:4a:03:
72:1a:94:f3:0d:77:8e:c0:d8:48:2e:2e:5f:14:08:52:49:87:
8b:78:0b:7b:a3:32:7f:91:d7:57:82:c8:07:d8:4a:39:1e:56:
86:75:81:41:20:ba:10:c7:e6:1f:85:b6:79:e0:4c:69:ff:7d:
e2:c2:f9:24:f6:19:bb:5a:dd:11:7f:c7:d5:62:5f:1d:15:4c:
e2:be:f3:31:91:84:bc:cc:d6:95:dd:f6:00:a1:22:27:81:ff:
c2:b2:58:02:31:3f:d7:8b:c4:c8:2c:e6:f4:69:3e:9e:68:0f:
11:e2:a0:63:7b:08:a1:5f:36:e1:78:64:9a:9c:ab:b1:6b:43:
bb:b1:84:2c:31:11:a2:cc:5a:5c:9e:13:4d:42:ef:5c:a1:9d:
d7:c2:13:62:c0:4d:9e:38:1e:e4:86:45:c4:f6:cf:cf:3a:ee:
c2:7e:69:0e:52:8e:0a:a6:8f:d6:ac:f8:94:3f:93:dc:af:30:
73:f0:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:07 2026 by rpki-client