Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: 6JABu6TnVVPzHrCllP0CgQS7VOjOlQNt4hhrOAiqNwU=
Subject key identifier: 6B:1A:8D:D9:98:82:D1:EF:A0:06:12:BE:07:FC:40:66:E8:93:0F:00
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019FA26001D8064CD13BEF7294611C88CD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1737
Signing time: Mon 27 Jul 2026 07:00:28 +0000
Manifest this update: Mon 27 Jul 2026 07:00:28 +0000
Manifest next update: Tue 28 Jul 2026 07:00:28 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 4P1KZtMCiYcpaBqd4kkLxDu9D/6aBX6nMJtMt/jJK/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:01:d8:06:4c:d1:3b:ef:72:94:61:1c:88:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jul 27 07:00:28 2026 GMT
Not After : Jul 28 07:00:28 2026 GMT
Subject: CN=6b1a8dd99882d1efa00612be07fc4066e8930f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:ac:20:d7:6e:24:8a:d0:a3:b9:93:65:2c:
3d:66:58:dd:48:1d:fd:e7:be:55:e8:4f:80:a3:25:
00:ca:76:4c:40:be:b8:17:c6:fe:0b:bb:1a:19:f5:
ec:80:fa:e2:e3:2f:a3:89:35:b7:be:c5:79:bc:51:
37:a2:f5:70:91:cb:89:42:48:a5:96:91:cf:11:d3:
1e:44:08:3c:87:72:3b:7e:6b:cf:42:c6:e5:cc:c8:
2c:e3:59:fa:64:dd:db:24:57:03:e6:04:49:8c:2f:
1d:98:34:f1:0d:c5:48:09:f2:7b:7e:48:54:a0:ab:
5f:81:4e:1a:d4:38:2e:8e:b5:f0:79:ef:6d:7e:67:
2f:d2:33:8a:77:a7:aa:78:45:7a:4f:fa:e0:65:71:
83:b0:4f:99:30:24:62:f1:3d:ab:54:b2:c8:3a:d9:
87:a0:eb:de:b7:aa:13:a3:19:ae:ae:7b:b8:d5:a2:
8e:73:8f:c2:54:73:f3:b7:48:dd:c9:e0:d9:68:aa:
d2:1a:43:34:3e:74:bb:96:78:9d:1e:f1:2c:20:d9:
4e:f2:08:1a:a4:2e:45:8a:57:9d:c4:3f:60:3f:aa:
8e:36:f6:5c:8e:a4:d0:1e:3d:ef:9d:ef:60:38:c0:
67:cc:a7:81:ef:6d:e0:4c:9e:a0:93:dc:c3:7c:f8:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:8D:D9:98:82:D1:EF:A0:06:12:BE:07:FC:40:66:E8:93:0F:00
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:51:5d:db:0f:5f:2a:a9:88:38:1c:0f:c8:ff:ad:1c:60:
ad:2c:16:77:66:a9:0f:9e:d7:74:47:ca:d0:47:0a:85:19:14:
03:e2:cc:f3:1c:a0:e6:41:83:71:26:6e:e7:a6:b1:f2:14:06:
5e:61:75:56:29:c9:f7:ba:d8:52:95:c6:30:7f:0d:7d:28:6c:
17:12:fc:b2:66:6d:04:3f:83:33:56:41:d1:aa:1a:60:ce:8d:
7a:eb:5d:85:be:99:d5:72:30:37:07:b3:52:f8:33:35:09:49:
3d:d5:4a:7a:1e:5e:57:33:36:f8:4c:0c:33:a1:9a:a2:fd:82:
e1:4a:16:03:8f:4d:2f:dc:71:99:a5:c8:7c:4b:3a:1f:02:98:
2f:94:71:db:08:91:8f:b7:da:c0:32:f9:14:2a:97:7e:d4:d1:
c6:b0:f0:09:d0:ac:fd:f8:08:82:93:0b:93:09:08:3a:63:d7:
a4:27:2f:5d:78:58:04:ce:d0:c4:0d:e3:f2:e2:b4:61:2f:62:
dc:49:ff:5b:77:dd:a2:f5:14:cd:89:da:ea:87:de:14:62:2b:
bd:7e:ad:13:6c:02:5e:c6:9e:74:43:38:57:1f:6f:bb:d0:cc:
0b:a7:e0:d6:5a:69:64:9d:af:6b:07:69:e9:d0:c5:2c:7d:81:
07:47:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:58 2026 by rpki-client