Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: FXKjxnG7L63WnJN9+K7rQr+/hQlBgWCjxZRX0sZXdLI=
Subject key identifier: B4:00:8F:C9:36:38:4E:BE:9D:30:16:90:C1:80:C7:35:F1:F0:FE:68
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019F935AB5974FCD2C656F6ABBB86FBBF53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 1427
Signing time: Fri 24 Jul 2026 09:00:23 +0000
Manifest this update: Fri 24 Jul 2026 09:00:23 +0000
Manifest next update: Sat 25 Jul 2026 09:00:23 +0000
Files and hashes: 1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: xQJ8Bl3OBk+nTJdRlgj9Q+HwicyxEi2JE8ASGerKhU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b5:97:4f:cd:2c:65:6f:6a:bb:b8:6f:bb:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Jul 24 09:00:23 2026 GMT
Not After : Jul 25 09:00:23 2026 GMT
Subject: CN=b4008fc936384ebe9d301690c180c735f1f0fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:dc:55:97:78:e8:6c:b9:0d:75:83:38:a1:
13:80:b7:38:ba:b9:00:f4:c6:ab:77:e8:ec:4a:16:
7d:ba:dc:da:52:03:b3:e2:30:4c:fa:8a:77:01:2d:
5f:c0:26:70:1e:d0:ca:15:31:55:79:22:ca:a8:eb:
a3:1a:cd:a3:72:f9:3e:d7:f2:a2:ce:4d:85:43:b5:
5f:1c:bd:40:c5:4f:18:75:a7:c8:6c:82:11:fd:8c:
e3:06:98:df:ff:20:0a:7c:6e:7d:6a:eb:aa:ea:47:
e1:2b:6a:09:44:ac:ae:60:1e:c6:e6:fe:21:70:18:
2b:7d:d9:e4:fb:25:78:dc:2e:31:c7:ba:63:c6:15:
c5:a2:44:59:5d:ef:2c:17:76:b2:d5:e2:36:09:13:
81:37:2b:81:1e:f3:b6:37:5b:f4:8c:cf:8a:96:d8:
75:87:fe:20:63:95:3c:42:fd:27:13:6e:c2:06:5a:
7a:92:44:d8:57:aa:f2:d5:21:12:b0:7c:57:14:b7:
6b:e0:62:d6:47:42:2d:68:76:91:3e:f4:42:d5:f0:
f8:5d:56:87:5f:50:5c:ba:d7:cd:18:cb:91:cc:cf:
d1:86:bb:12:fb:3d:0f:79:f3:9f:e6:c2:8c:14:5d:
f1:31:a1:b1:a3:03:04:a5:22:ac:76:54:c1:5b:2c:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:00:8F:C9:36:38:4E:BE:9D:30:16:90:C1:80:C7:35:F1:F0:FE:68
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:ce:2e:69:d4:5c:13:7b:3f:4a:c1:2f:9b:7c:44:e1:f2:
34:06:19:d8:5f:8c:ec:77:8f:02:4a:5a:e3:80:7f:bf:25:c2:
fe:01:5c:6f:74:a5:2f:d4:42:b1:37:5d:c4:50:e9:67:8f:75:
d0:c4:0c:3e:cf:4c:d7:d3:15:b3:3c:e9:4f:3d:fc:09:ef:12:
04:eb:ca:f9:4c:90:cc:cf:5d:ba:90:e3:90:e8:56:e1:1e:9d:
14:7a:30:97:27:80:42:60:c8:e7:c9:f6:06:a2:ca:76:2b:8b:
ad:8c:35:30:ce:5c:73:0a:7d:49:f5:eb:7e:09:b3:a9:d6:72:
e3:88:f1:c2:a6:de:a9:41:fc:40:c1:df:b7:63:b3:35:6b:aa:
38:82:36:50:58:bd:06:bb:07:4a:f5:e2:b8:53:e0:69:c9:f0:
bf:08:90:8e:e6:e8:19:ba:bb:e4:37:f2:3b:91:ac:c9:d2:d7:
43:0d:78:b6:4c:d6:88:19:14:6d:b8:49:e4:d6:39:6e:6a:5c:
a2:4b:3a:32:b2:c8:3d:92:d7:fa:31:c7:74:85:6b:47:fd:dc:
a2:39:b1:54:88:30:0d:8b:15:55:48:42:b5:1d:b1:09:9c:32:
13:0f:ba:f9:64:24:1a:ba:0f:d2:9a:2b:12:87:68:fe:46:72:
9a:15:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:34 2026 by rpki-client