Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: X4mPb/z01wDrEliw/nSxmr3LAdXYJ3nazc2gbGQpEes=
Subject key identifier: 4F:03:77:EB:46:18:E0:7E:CD:83:04:C7:4C:95:96:23:18:FC:74:8D
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 019F8F7E941A081492279EB50109AF73DA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:04 +0000
Manifest this update: Thu 23 Jul 2026 15:01:04 +0000
Manifest next update: Fri 24 Jul 2026 15:01:04 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: /nc4CVD+xjyTsvyXMjqEWw6MRQEMd832IHZKqeKS1U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:94:1a:08:14:92:27:9e:b5:01:09:af:73:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Jul 23 15:01:04 2026 GMT
Not After : Jul 24 15:01:04 2026 GMT
Subject: CN=4f0377eb4618e07ecd8304c74c95962318fc748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:d3:3c:78:5e:2a:b3:6f:9c:62:16:e3:94:
27:a8:09:1d:28:24:90:c2:51:dc:df:54:36:da:59:
5d:99:8d:c2:9d:36:75:53:11:64:62:02:5f:38:29:
47:b6:15:3b:6a:52:0e:6a:65:be:9b:86:44:a7:21:
60:d0:4c:5c:0e:fb:ab:74:5e:bd:37:ee:4f:f4:37:
98:6b:8f:20:8a:ad:21:ad:16:33:76:6a:19:c4:19:
1c:32:cf:55:5e:ab:58:76:7c:17:c8:e6:3a:23:d3:
42:57:b6:d0:c3:a3:6e:49:2f:ab:59:6f:b0:48:b5:
68:5c:93:8f:5c:c6:81:1f:5f:f0:de:59:1c:a4:8b:
61:01:6b:ed:16:35:cb:1b:ca:12:97:f4:66:4d:60:
90:cd:22:e7:ee:10:04:8d:53:d3:dc:fb:b7:38:0f:
72:fd:d0:da:31:ca:80:6c:e5:d7:5f:79:56:97:a5:
92:02:ed:69:27:9c:4f:25:bd:c1:0c:a2:2e:53:46:
ed:75:15:6e:9f:1a:a4:ef:2c:4a:69:0a:f2:76:2a:
23:6c:34:84:f2:62:c3:f2:f2:c6:91:61:a9:0a:bb:
2d:1a:1c:2a:25:69:1a:c3:11:e8:52:a5:e6:a0:23:
6b:cb:85:41:10:38:d6:ff:9a:9c:b3:46:47:6d:21:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:77:EB:46:18:E0:7E:CD:83:04:C7:4C:95:96:23:18:FC:74:8D
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:7d:25:57:71:26:37:fc:84:9e:6f:bd:75:f3:3d:bf:fc:
bb:3d:44:8f:27:e2:4b:92:43:b3:b2:dd:61:67:cf:f7:b4:4a:
e0:f3:61:cc:a8:44:aa:be:0d:a0:3e:50:74:a6:25:59:23:ae:
04:d7:4f:a0:38:03:d3:ec:59:75:9c:67:cc:76:ed:24:43:95:
45:83:87:74:49:4f:61:24:f3:b8:19:48:a5:cc:55:41:e5:dd:
6d:e9:be:bf:11:a3:25:16:15:bd:1a:dc:7b:1f:4a:91:fb:ab:
62:26:ea:df:3a:07:66:53:7d:71:d7:fb:23:e8:95:5c:ef:33:
d3:33:a3:6c:fc:ec:17:0a:28:90:43:72:78:00:e9:73:cb:e5:
55:ce:9c:c6:3e:fa:b7:58:2d:32:a5:fe:2e:be:41:08:f3:e2:
14:c7:71:26:a8:e2:5e:2b:2a:b3:9c:ca:6a:d7:38:0b:e1:72:
ed:b9:30:54:1c:85:5f:31:8c:ac:1f:3a:72:f2:c2:e0:b2:0c:
d4:ff:c1:70:8d:d1:78:b7:e8:5b:69:3c:8e:8f:37:fb:98:23:
19:79:79:c7:49:3c:d8:74:66:6d:5e:72:ce:2b:5e:4f:14:51:
ce:f7:cc:d7:03:15:53:9e:16:39:be:7f:ef:bb:1d:9a:a6:e1:
99:74:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:44 2026 by rpki-client