Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: GW2li0ZvyNPxpxCYQ7XO3e7ZHSKYB9JaygrR4ovWs/g=
Subject key identifier: 3C:C1:64:66:0D:59:F6:94:6A:6F:1B:83:AF:EB:C8:E3:B9:0F:AF:E8
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019F3ABD10556C93AD1B3D34229719C65E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 164D
Signing time: Tue 07 Jul 2026 04:01:36 +0000
Manifest this update: Tue 07 Jul 2026 04:01:36 +0000
Manifest next update: Wed 08 Jul 2026 04:01:36 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: Fr46xRYWabNUpuHVZrwrC3My2XxHEP1CevWUhMKekoc=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:bd:10:55:6c:93:ad:1b:3d:34:22:97:19:c6:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Jul 7 04:01:36 2026 GMT
Not After : Jul 8 04:01:36 2026 GMT
Subject: CN=3cc164660d59f6946a6f1b83afebc8e3b90fafe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:36:f2:8d:08:c8:c7:27:fa:f8:4b:e5:37:
ca:ce:da:75:56:d1:63:0f:a2:28:43:32:75:d1:1c:
57:79:94:cf:c1:f9:86:40:00:ff:f4:39:4c:9b:d9:
87:da:97:10:8f:09:62:f0:4e:70:0d:94:5a:7c:0b:
a9:6f:49:e2:41:88:f2:84:6b:50:7a:02:9f:d2:56:
82:06:3a:d3:e0:65:0e:fa:b5:7c:fc:0a:31:1f:01:
f4:c6:29:14:6d:ce:22:5e:72:e9:35:7d:53:0f:b4:
7c:9e:3a:ab:1a:81:76:11:fc:f9:0d:76:2d:3d:1d:
25:ef:5a:90:81:c9:17:2d:93:2e:c4:99:6c:0c:ed:
bb:4e:ae:cc:2e:34:6b:69:99:aa:e4:1e:16:29:05:
81:35:e8:05:9f:32:12:31:73:05:b4:9e:94:8f:19:
15:a4:f0:47:d9:9c:76:d9:d8:db:e3:6e:f8:a0:09:
1c:c8:67:b3:b4:ea:ea:90:27:ba:8b:d7:c8:e5:75:
c0:31:0b:7a:85:e5:4e:50:98:c0:3d:99:59:90:47:
49:c9:8e:ec:de:8f:8d:64:cf:ec:2a:0a:fb:7d:27:
5e:2d:b4:06:6c:9a:82:3e:4a:35:e4:09:69:1a:81:
65:95:a3:c3:d8:1a:8a:98:c6:8c:1f:c8:c2:2e:44:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:64:66:0D:59:F6:94:6A:6F:1B:83:AF:EB:C8:E3:B9:0F:AF:E8
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:fc:39:58:0f:a4:8a:34:92:60:94:89:e6:87:07:78:87:
8b:43:bc:88:4e:63:60:52:a0:07:d1:63:12:23:56:ca:bb:2e:
12:5a:95:01:1e:bf:dd:dd:94:28:27:44:78:81:52:d3:02:08:
12:d9:65:5f:aa:5a:a4:d4:6c:76:a8:a2:45:28:fe:db:24:20:
70:30:b5:cd:a6:12:c4:be:eb:40:78:18:40:43:05:48:e1:2c:
49:77:ca:7f:75:58:ee:7b:82:96:5e:85:c8:e6:11:2e:49:08:
94:ae:72:06:2f:44:13:22:ec:f4:bc:64:43:d7:36:7d:73:21:
67:32:b6:d5:ff:9e:23:a3:f7:e3:31:70:6b:90:13:9f:dd:79:
66:35:71:db:73:92:ba:a8:a1:55:5d:8d:e0:3f:18:06:90:ff:
13:3b:54:ff:dc:25:d0:5e:3f:89:a4:2e:6e:9a:1f:dd:57:9d:
ca:07:ff:1d:dc:f9:9d:da:30:1a:10:86:eb:2e:ee:2a:e2:08:
ca:bb:48:80:cd:6e:f3:81:5e:34:dc:f7:00:46:40:f6:64:9b:
ec:18:79:3f:ba:96:35:10:02:2f:7a:c4:ce:b3:d0:42:5b:fb:
2a:4f:c6:c7:e8:9c:fd:8d:f5:d2:64:13:fe:7c:ba:4d:b2:f9:
02:18:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:44 2026 by rpki-client