Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: Bt33p+e759G98+eyqxc0jz3P5F5Hj028gskDoDOqKQc=
Subject key identifier: 82:4D:99:F0:5A:B7:BD:42:09:F1:02:98:2D:76:B9:F3:F7:EE:B0:F5
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019F957FE8B1A7776CD834DC88937CE0C6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 087C
Signing time: Fri 24 Jul 2026 19:00:15 +0000
Manifest this update: Fri 24 Jul 2026 19:00:15 +0000
Manifest next update: Sat 25 Jul 2026 19:00:15 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: nW1l672iFBx3cNzjDhJpiyQ4oFrvkOAg//xcozZ5fPA=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:e8:b1:a7:77:6c:d8:34:dc:88:93:7c:e0:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Jul 24 19:00:15 2026 GMT
Not After : Jul 25 19:00:15 2026 GMT
Subject: CN=824d99f05ab7bd4209f102982d76b9f3f7eeb0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:87:2e:91:35:c9:93:1b:5a:3c:6d:45:8d:
6b:2d:e2:ff:7c:6f:39:2d:4d:2b:e9:30:01:0c:96:
da:85:c8:b6:5b:3d:5f:9d:b3:0c:24:ff:4d:80:a4:
c8:0b:a9:07:00:94:a4:29:b0:fa:94:2b:9e:ba:36:
13:3d:48:5d:19:9b:cb:7e:a8:bc:60:02:04:b8:33:
f2:5d:3e:54:b3:d3:3d:07:9f:f2:1f:ce:41:9b:3f:
de:dd:39:c1:6a:d8:3e:1b:90:6a:d9:ed:94:7b:fc:
b6:2c:85:18:08:da:a7:d1:f2:dd:33:5e:94:82:28:
db:5a:8c:cf:ff:2e:df:65:38:c4:5f:13:2a:4b:fa:
85:c6:fa:94:82:c4:ce:f5:fb:90:87:11:f2:9e:01:
54:80:cb:f4:46:76:c4:b2:31:67:1f:52:15:81:2f:
a9:34:27:4b:56:c7:13:8f:22:26:23:ee:fe:8e:b8:
d9:13:e9:85:09:3c:6f:69:64:ee:0f:bb:ba:75:fc:
6c:c3:e4:84:b5:3b:85:0f:82:67:bc:c5:d5:57:84:
b3:48:e2:37:4b:e8:ae:3f:43:11:ad:fb:63:97:61:
f3:32:37:df:64:90:8d:3e:aa:73:59:23:e1:cc:02:
05:49:74:7f:53:80:88:e9:a8:41:03:32:6e:28:0b:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:99:F0:5A:B7:BD:42:09:F1:02:98:2D:76:B9:F3:F7:EE:B0:F5
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:12:74:e9:e1:e7:93:8c:6d:16:ef:24:d9:2b:78:9a:a0:
1d:83:70:92:69:21:a4:84:58:0a:15:78:07:a2:53:bf:8b:6c:
64:53:84:a5:12:51:04:5c:f7:f6:95:fa:eb:66:46:2d:f2:ec:
b4:74:39:e9:31:e1:c9:82:c6:60:2d:16:74:7a:63:78:95:81:
23:68:5a:08:cd:6e:1f:30:ce:df:41:0f:7d:5c:96:14:80:a6:
9b:d4:97:bd:ba:98:8c:98:cb:d6:89:cd:0a:6d:7f:7d:e1:db:
af:3b:b0:09:02:a4:ac:86:16:93:cd:7c:25:bf:e5:d8:83:dd:
08:c4:bb:2b:d9:c3:04:d8:34:45:20:2c:e8:f5:ac:72:ce:55:
bb:6c:d5:0e:2c:ad:99:f1:6d:7b:6b:97:2d:95:6e:95:55:d6:
21:d6:db:01:81:c0:a5:8d:d7:13:7e:e8:74:71:8a:63:11:de:
1f:13:f7:d1:ec:73:dd:be:c0:f9:ee:ed:79:4c:93:6d:07:5f:
f8:a9:f1:c7:3f:b4:83:d1:2a:bc:16:e6:87:fb:f6:35:f6:8c:
7b:56:b8:3f:fa:7c:a2:97:b5:c2:8b:61:21:94:a7:ab:4a:82:
bb:5e:61:55:11:28:b8:65:27:25:39:e0:85:ab:41:73:1f:ca:
03:7a:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:10 2026 by rpki-client