Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: pnxnSoLgEUqk+wT//QQynWlr/5+wDR9RNPnGO/ve594=
Subject key identifier: B5:9A:AC:CF:D9:3A:AD:45:E3:F3:0F:FF:75:06:6A:22:3F:68:1B:19
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019F9248DFCE4E6FF227D5EF80CD2ED581EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 04:01:17 +0000
Manifest this update: Fri 24 Jul 2026 04:01:17 +0000
Manifest next update: Sat 25 Jul 2026 04:01:17 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: ZFB9AlNodnd7MlKRJzIwhGDToDX/noQHX705MEu/gak=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:df:ce:4e:6f:f2:27:d5:ef:80:cd:2e:d5:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jul 24 04:01:17 2026 GMT
Not After : Jul 25 04:01:17 2026 GMT
Subject: CN=b59aaccfd93aad45e3f30fff75066a223f681b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:0e:19:37:bb:d1:de:0a:f3:e3:f7:71:80:
67:39:c1:c4:66:95:25:f0:c6:b8:6a:b0:56:15:4f:
e0:31:bf:42:b8:23:d8:eb:85:b8:df:b4:41:d2:1a:
59:a8:63:cc:bf:fb:6c:0a:8a:3e:73:8d:fd:73:93:
b7:f1:f3:fa:59:36:ea:9a:e8:75:2c:3f:89:67:db:
fe:9b:17:e0:09:b3:9a:b9:0a:47:f6:b6:dc:13:01:
e5:24:ff:53:2c:4d:01:86:98:7f:5b:75:26:63:17:
51:69:6a:a4:63:03:a9:a5:72:90:48:17:b3:4a:6a:
1f:5c:1e:dc:83:e2:58:93:7d:00:d0:80:e2:2f:cc:
ce:9c:fc:14:29:ac:02:19:f0:34:92:cf:9e:a7:73:
4f:80:3f:18:fb:72:27:3c:06:bc:6b:07:22:ff:ed:
f0:7e:e4:cc:4c:82:c5:6b:5b:83:99:47:dd:5f:fe:
18:20:88:a1:b8:56:f1:01:10:ed:60:78:74:2c:cb:
66:49:7a:c3:10:8e:84:5e:f6:ae:bb:a1:45:d8:69:
65:59:4b:92:46:f2:6f:d6:48:b7:eb:96:28:09:72:
ec:4b:82:f1:2b:b5:79:3b:dd:68:b6:d3:38:8e:24:
fe:f0:bf:11:41:1c:39:92:98:d0:76:5b:c8:a6:82:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:AC:CF:D9:3A:AD:45:E3:F3:0F:FF:75:06:6A:22:3F:68:1B:19
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d0:10:59:5a:ec:fa:7d:6a:59:73:52:16:b2:94:1b:7c:64:
ac:00:cf:36:d0:db:fe:a9:bb:04:69:1d:66:c4:13:48:1b:42:
c2:85:13:4f:eb:bc:3b:19:66:fd:4c:ab:bb:8b:ae:94:71:df:
2f:f2:e1:49:4c:27:26:b7:59:1f:02:2c:03:fc:dd:bc:83:51:
d6:cb:a5:be:f5:0e:82:0b:28:c0:17:41:e5:00:5b:ba:59:c1:
8b:7d:f9:a9:a2:50:33:4e:f6:63:ab:aa:4f:2e:69:86:c3:7e:
5e:5c:dc:52:1a:4a:dd:7f:45:0e:73:4e:e5:da:87:8d:4c:4d:
49:21:5e:21:05:4f:c5:8b:2a:a1:49:bd:b0:33:c8:27:6b:97:
37:5b:39:ef:c0:bf:23:8c:08:4c:9e:60:9f:e6:59:c2:57:ca:
3f:06:50:a8:e4:4c:55:02:ab:e0:79:77:47:5f:b8:c4:ab:a7:
16:f5:d8:85:62:38:c9:be:66:e2:2d:b1:bd:97:93:5c:c3:59:
dd:ac:8e:c9:c5:4f:59:6f:55:c7:62:20:f5:dd:34:df:85:fc:
0b:58:89:93:e3:c3:55:0b:cc:b9:67:ed:82:19:3d:70:c9:70:
e0:f5:d4:69:66:6a:bd:11:e0:e5:4c:d1:64:b3:64:c0:d1:24:
bf:28:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:54 2026 by rpki-client