Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier: xyYG9YqVhjzDJsR+cpU6Ig3a5p6s5zOJqxkvByG81GI=
Subject key identifier: A5:D3:49:1A:A7:9D:7C:32:F9:86:E2:EB:9E:3B:6D:BD:10:B9:A5:A6
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 019F940022C95EA96339B2BBC5CA9AC78853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number: 029B
Signing time: Fri 24 Jul 2026 12:01:04 +0000
Manifest this update: Fri 24 Jul 2026 12:01:04 +0000
Manifest next update: Sat 25 Jul 2026 12:01:04 +0000
Files and hashes: 1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: ifY89VIFjL2g22kXDNswAeMIlIqVS7xOFq/AmZQPVd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:22:c9:5e:a9:63:39:b2:bb:c5:ca:9a:c7:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Jul 24 12:01:04 2026 GMT
Not After : Jul 25 12:01:04 2026 GMT
Subject: CN=a5d3491aa79d7c32f986e2eb9e3b6dbd10b9a5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:0c:ac:f3:5e:69:f3:b7:07:0f:a3:4c:98:
ac:9a:1f:d1:76:1a:d4:3c:e0:76:cd:f5:e2:34:21:
6d:fd:e9:0c:7f:a5:ad:25:ed:14:29:e5:de:0e:ae:
68:7e:73:aa:0b:62:4d:30:ca:38:ac:7c:fc:ed:1b:
fb:de:9e:12:fd:ee:8f:61:49:d1:4b:44:4d:c7:24:
fb:89:6f:63:3e:10:5a:a9:13:79:65:9d:85:79:8c:
74:b1:f9:a5:4e:5c:73:63:0f:7c:07:b3:bc:72:08:
63:e2:dd:74:89:1d:1c:17:62:20:7a:23:5a:f7:53:
8b:51:95:e0:ff:10:36:59:ac:98:78:40:7c:f9:72:
e3:bd:3f:3a:72:ad:46:01:06:ad:f8:38:a6:0d:58:
9b:36:4f:8b:ea:8e:bf:1b:c0:b1:57:af:8e:17:a3:
4a:71:4e:14:c1:dc:3a:91:db:3e:1b:8a:1f:2f:26:
a1:83:a2:6e:85:3b:4c:21:c3:cd:7e:fb:6a:f7:0c:
14:04:54:bb:9a:b0:72:96:10:5a:2e:2d:40:d2:99:
9b:8a:5c:3a:59:24:ad:90:05:4a:2c:51:36:bd:fd:
10:be:4d:31:82:36:91:37:5c:26:74:59:cb:5f:aa:
0e:18:87:45:ec:e5:77:9a:4a:15:e0:62:c1:c0:7b:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:49:1A:A7:9D:7C:32:F9:86:E2:EB:9E:3B:6D:BD:10:B9:A5:A6
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6b:27:ab:d6:c4:d4:be:be:bf:41:99:3a:49:53:68:06:9e:
d8:68:4b:21:ee:62:76:28:04:9b:a9:c9:0a:fb:99:b7:22:ac:
da:80:9d:6c:20:5d:da:e4:dc:24:24:f6:ba:81:6c:69:f8:14:
17:a0:2e:03:45:b3:ec:de:75:3c:0e:d8:d5:33:68:34:1a:ea:
e2:b1:d6:32:54:dd:2f:59:d9:df:23:92:80:40:7f:ed:7c:e5:
34:9e:6f:b4:d1:b3:7c:af:8a:09:1e:89:cc:62:b3:53:17:de:
28:5d:d1:bb:a9:1a:e2:f9:37:a3:90:24:b6:d9:31:ed:36:e2:
4b:89:57:03:a1:22:03:8e:f8:57:06:6e:3d:53:7d:41:13:40:
1b:f1:88:aa:a2:a9:21:c5:60:04:24:56:5e:df:24:0c:47:52:
78:b9:98:af:94:c0:8f:59:f4:46:10:99:33:7a:2e:e6:c0:48:
c8:2a:3b:85:01:cf:b1:4c:19:da:74:af:be:2f:71:bb:15:cc:
d8:57:38:9c:5f:0a:93:72:38:92:43:a1:e4:7b:d0:49:b5:32:
4b:0b:ac:38:77:68:53:2d:04:db:f8:c1:af:78:e7:55:12:0e:
f6:61:75:f9:c5:36:40:ed:f2:de:3c:e4:4a:38:e7:73:e2:48:
47:f5:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:08 2026 by rpki-client