Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: 96wHlZCWklqX5MhkU3dMs1Y/1jyO2rDGur4bGYxXKCk=
Subject key identifier: A2:AF:8D:C5:7F:B6:9E:72:22:18:F4:31:D3:3A:D9:2B:B2:FA:FF:4B
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 019F90FEE0558254B89EDC93065237A00F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 22:00:50 +0000
Manifest this update: Thu 23 Jul 2026 22:00:50 +0000
Manifest next update: Fri 24 Jul 2026 22:00:50 +0000
Files and hashes: 1: N79dGcqXOAWTraGm-dUGr_n7g5o.roa (hash: izRmr4QFMP3HYYiVhDYKTcRuMtp1aQuZsgseKcKqny4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: t1FT8wWL+jQ1TbT1Kbiqz/CWqhbqGDmFTkIfKz3Cfxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:e0:55:82:54:b8:9e:dc:93:06:52:37:a0:0f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jul 23 22:00:50 2026 GMT
Not After : Jul 24 22:00:50 2026 GMT
Subject: CN=a2af8dc57fb69e722218f431d33ad92bb2faff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:82:35:8d:b9:50:27:a4:bc:fa:d7:98:c7:
41:38:2d:c6:09:d3:c5:f6:25:71:5c:23:10:bc:bc:
ee:f1:5c:b1:e5:46:c2:8e:db:d8:49:55:d0:9d:1f:
64:24:9f:ce:6e:18:3b:c9:78:7f:96:93:14:f9:9b:
99:d6:50:fc:4f:41:94:f5:d9:b4:bd:2e:67:6e:48:
86:31:16:f3:8d:7c:c3:07:06:91:d1:6a:bc:36:25:
af:e5:bd:57:2a:24:ea:89:ec:b6:c8:9b:0c:05:fb:
8d:ce:41:21:89:79:49:c5:bc:7e:4b:f8:a6:7b:a6:
19:34:87:da:70:d3:d2:78:eb:01:9d:cd:53:0d:99:
67:ee:40:7a:c9:0d:45:d7:3d:45:dd:5d:78:53:88:
2e:53:24:24:14:c5:ea:9d:2b:e7:e3:62:bc:0e:c3:
5a:ee:69:09:19:29:1f:89:62:fe:1e:5f:c7:e1:cb:
20:ee:5e:1b:e7:2f:a7:10:f4:5c:88:1a:ab:9f:ec:
d5:89:bf:6d:a8:b0:51:9f:0e:ea:ad:fa:99:65:7b:
50:cd:89:83:dc:b2:5b:e0:f9:29:02:98:f1:74:e6:
a0:4a:d2:b1:74:c6:84:6d:8e:41:92:ab:e2:aa:a1:
0c:a2:12:fe:4c:3b:00:23:33:82:f1:32:b7:18:86:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:8D:C5:7F:B6:9E:72:22:18:F4:31:D3:3A:D9:2B:B2:FA:FF:4B
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:c1:eb:6e:6c:5c:0f:c5:d3:e7:a4:d7:5a:a0:82:9b:a8:
c0:0c:5e:ac:d7:87:0f:20:6e:91:02:d2:24:1c:b4:c1:a2:23:
4f:c1:39:b7:db:57:a1:75:53:93:5f:53:7d:7b:10:0c:ef:8c:
49:37:09:ff:8e:c2:cf:db:3c:29:5a:d4:43:c6:a8:56:2a:39:
1c:0e:90:42:2c:35:5d:e8:f1:94:3f:9a:2a:af:39:38:f3:13:
0b:c6:9c:43:db:58:8b:24:94:91:bb:18:52:0a:18:4a:a9:3c:
23:df:17:a8:ee:96:29:1b:09:72:df:52:d6:1d:e7:96:41:ad:
a3:62:1c:12:5c:87:17:f9:be:11:dc:0d:db:d3:d1:6c:fa:0a:
8f:25:08:73:fb:c6:b8:62:e3:89:1a:70:bc:20:be:6e:d5:4d:
20:2a:ed:af:0e:7b:1e:86:a1:f6:3e:d6:bb:20:3a:b0:9a:94:
f0:09:8b:61:0a:60:41:89:4a:99:fa:83:39:01:a2:be:84:60:
30:c1:89:ac:1c:cc:28:3a:c5:10:74:79:fc:29:f9:46:69:9b:
c6:83:ad:ba:3f:94:03:86:b7:71:cc:e8:bd:2c:40:c4:ea:26:
75:a9:cb:01:be:9e:f7:64:7e:2a:b5:92:8a:93:7c:d5:94:b0:
37:70:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:11 2026 by rpki-client