Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: 28stzX1GUPORdGQswFMTjtA3pZWFC778OOR0IoPpbEs=
Subject key identifier: F0:78:92:A2:93:E2:78:2D:FC:F8:38:44:EF:DE:61:56:3C:88:E3:45
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019FA297609DC744BFB654C71E19C1A04DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 03B2
Signing time: Mon 27 Jul 2026 08:00:57 +0000
Manifest this update: Mon 27 Jul 2026 08:00:57 +0000
Manifest next update: Tue 28 Jul 2026 08:00:57 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: xSwuFSUrQHA+6qp9ztPipRMy1Z0N0/HH4OEbuyeuujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:60:9d:c7:44:bf:b6:54:c7:1e:19:c1:a0:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Jul 27 08:00:57 2026 GMT
Not After : Jul 28 08:00:57 2026 GMT
Subject: CN=f07892a293e2782dfcf83844efde61563c88e345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:7a:ca:91:53:d1:d2:b2:0b:6c:88:01:d5:
41:d8:86:4d:35:45:52:6b:20:10:40:3e:aa:a3:dc:
d3:d5:76:f7:b7:72:a3:96:ae:17:6e:f8:5a:98:00:
c8:72:89:a8:cb:bb:19:1f:8b:03:a4:be:8b:13:60:
6f:cf:de:7f:3e:dc:52:12:38:71:f2:7d:ed:90:8a:
a7:73:93:90:41:fc:90:8c:7c:29:1e:8c:6b:92:77:
e4:26:5c:16:a9:fb:f0:95:c8:c7:d7:ed:71:08:df:
2c:ac:d5:5f:43:12:c2:4d:6a:9a:a1:8b:be:ec:ae:
57:3b:d5:d2:cf:3f:81:4a:f3:52:b3:77:04:b9:36:
b0:a3:dd:ba:58:c7:df:8c:22:49:5a:81:5f:40:e2:
c8:df:96:37:65:a4:c6:9e:a4:b4:9c:9c:f7:71:a3:
e5:36:af:77:05:f4:26:fd:72:b3:78:3d:85:6a:fd:
bf:02:f0:e6:3f:b6:e0:5f:d4:7e:8e:9d:b1:32:a1:
8a:2e:af:d8:15:47:5d:ca:47:58:e9:a9:44:79:86:
b3:2f:50:bd:8d:a8:f8:11:9d:f7:4d:7b:8e:9f:85:
71:f3:09:ad:1b:ae:5e:4b:71:e7:93:6e:e4:55:3b:
4e:08:b6:4c:fe:ea:bc:60:4d:03:c0:b2:71:2a:90:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:92:A2:93:E2:78:2D:FC:F8:38:44:EF:DE:61:56:3C:88:E3:45
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:21:a7:c7:2e:30:87:3f:e0:3d:15:1b:ef:5c:73:37:a9:
92:c3:eb:e3:fb:5b:65:23:f5:ae:2e:f4:07:37:4f:5c:63:bc:
89:37:ee:f8:a0:ae:b0:cb:04:a1:f8:cc:b1:3a:24:fc:11:d5:
e0:80:02:1c:43:be:46:e5:de:2b:14:36:b6:e5:67:5e:e0:cb:
0b:b2:ea:ee:e7:86:53:50:4f:24:b7:9c:04:9f:6b:db:c5:58:
6c:69:2d:7d:d0:84:07:19:32:80:80:51:28:03:cf:1b:0d:1b:
1c:32:42:89:dc:09:e4:ef:ea:dd:da:51:e5:4a:a2:6d:9e:e4:
d3:97:52:83:9f:69:8a:db:15:d5:46:9f:55:25:56:d7:88:e1:
1c:94:b4:e2:65:78:5f:0b:0a:dc:91:bc:c3:85:29:ba:0f:a6:
51:0b:77:1f:d7:89:47:d4:43:65:e0:90:11:cb:65:cd:15:1b:
64:18:f6:82:0a:68:a5:2a:5a:cc:01:8e:84:02:75:98:bc:d2:
30:90:ab:3f:e7:bf:e4:1e:30:38:7e:0f:56:71:16:ae:d1:a8:
b6:eb:92:76:71:a5:fb:6e:c3:6b:f4:83:0c:94:8b:80:7c:bc:
9d:8e:d5:d1:2c:c7:ad:2d:f7:94:5d:19:5d:84:c9:8c:ae:d0:
4a:a7:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:13 2026 by rpki-client