Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: m6lQbjSxJrwMxrJ4uIsm/hy+KQ+PhNHaLiOVtNxPhkM=
Subject key identifier: F6:17:48:8C:DB:41:0D:81:D1:95:99:F7:38:3B:CF:BD:40:1E:CD:00
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019F9323B3E2C3128C8599D2C8A3877FA099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 1438
Signing time: Fri 24 Jul 2026 08:00:18 +0000
Manifest this update: Fri 24 Jul 2026 08:00:18 +0000
Manifest next update: Sat 25 Jul 2026 08:00:18 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: 1xvEuw2Dy74YilQY9GNKzbwSYsA4xuh7sXd2UUBnl3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b3:e2:c3:12:8c:85:99:d2:c8:a3:87:7f:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jul 24 08:00:18 2026 GMT
Not After : Jul 25 08:00:18 2026 GMT
Subject: CN=f617488cdb410d81d19599f7383bcfbd401ecd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:9d:5a:f2:88:a6:6d:f1:41:86:53:d2:c5:
c6:6f:56:27:65:4b:bd:03:5a:55:4d:71:63:c0:ea:
1f:fe:6b:94:71:90:63:2e:ca:ff:fe:4f:4e:41:61:
24:35:00:28:bf:95:cf:d0:7c:90:ee:2a:a2:5b:7a:
ef:50:48:ab:50:57:d1:8f:84:7a:3c:5b:8b:59:9f:
5d:9f:cb:a1:bc:e0:02:f5:6a:90:27:df:57:a6:b0:
7e:5c:25:06:8a:c7:0a:c6:7e:84:e2:71:85:50:42:
1f:92:fd:52:7c:86:ac:f2:11:ae:40:14:4e:81:c5:
bc:5a:87:42:b1:f8:bb:88:e5:9f:f4:df:93:e6:2b:
36:00:11:3b:b9:23:3a:63:88:a2:a3:ce:d5:77:d5:
06:a5:14:ca:f6:52:c6:08:9c:7f:15:4a:33:2f:36:
f3:86:1d:16:9d:b7:e0:1f:fe:7a:dd:6c:c7:5e:d3:
2b:23:3d:b5:2b:a0:4f:29:a6:88:98:87:38:9c:4c:
a5:61:89:e5:da:7a:64:e3:74:ef:10:b9:a0:b5:b0:
8d:48:f0:b2:00:ce:36:e8:ab:93:64:dc:59:0a:6c:
2d:43:08:70:64:6f:10:53:96:4c:63:3f:19:11:48:
27:16:3e:ac:81:6e:7f:90:bd:48:b0:b4:7d:52:be:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:48:8C:DB:41:0D:81:D1:95:99:F7:38:3B:CF:BD:40:1E:CD:00
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:ab:32:d3:ce:8f:31:11:03:ac:95:d0:80:43:82:e5:76:
97:dc:6a:24:9b:25:4f:0f:df:c9:43:ab:b6:21:d4:5c:3d:2a:
9c:5d:36:5e:9c:ad:bd:ff:25:42:fc:50:83:6c:ef:c5:97:98:
c0:01:38:54:44:47:41:96:ea:d2:e8:48:29:3c:4c:c1:c8:af:
7c:ae:78:35:1b:35:f1:c8:0b:55:1e:c8:0f:4f:4e:00:77:ae:
0a:b0:17:c4:04:33:23:a1:e9:83:e7:5c:3c:c8:91:e0:67:06:
bf:cd:57:16:f8:c8:f0:c7:4a:a8:75:07:96:a6:12:cf:22:09:
83:94:4e:b7:99:48:1c:3c:5b:18:ab:e6:df:43:07:ee:c2:91:
9b:77:35:12:fe:ff:93:92:90:d2:52:16:01:85:ce:95:a1:f0:
38:37:c3:27:0b:18:2c:c6:f2:fa:b2:59:2b:ce:16:f2:74:1e:
fe:bd:42:12:af:1d:4e:46:c2:ce:9a:c8:dd:60:88:cc:ae:49:
fe:96:3d:2b:3b:72:e3:96:c1:15:f3:32:4d:fb:6d:f3:ed:5d:
2b:87:c9:55:10:6f:40:ed:ac:08:96:12:b2:c3:98:4d:2e:4c:
a1:77:c4:a8:01:ea:df:cb:98:1f:0a:a9:88:b5:3f:b7:6c:ec:
6c:23:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:48 2026 by rpki-client