Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: 2PNM5T+UMSIhEUgPp9QKE7T56yAanI3ofPojRW06+v8=
Subject key identifier: 5E:78:DF:39:C4:3D:7F:25:38:F0:86:59:58:4B:DE:47:27:38:5B:82
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019F8F46FD5E13A6512871EC29AD88E27746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 0190
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: Fz2OBHBvZIXa3Yf4U9RQLhhizsfaH9eytk+2v427eL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fd:5e:13:a6:51:28:71:ec:29:ad:88:e2:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=5e78df39c43d7f2538f08659584bde4727385b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:40:df:76:98:ff:10:c7:26:3c:26:58:d4:
06:72:77:b1:1d:45:80:ba:61:38:c3:47:b4:1c:3b:
38:8b:a9:88:51:2a:c9:a5:57:26:1c:72:0f:60:2c:
f9:ba:cc:36:49:85:c0:f7:31:79:3c:39:74:f3:fa:
b3:16:8a:99:56:7a:0c:e6:87:33:40:f0:3e:7a:9b:
ed:e4:a4:00:ec:58:a0:74:67:8a:ad:5e:01:a7:72:
4d:e7:b4:01:e8:df:6b:25:3b:e8:71:bb:81:f8:35:
c9:5a:7f:c9:59:d6:03:d6:e4:ab:53:74:80:be:ec:
0e:14:7d:bf:c4:b5:7b:1c:dc:e8:01:46:89:75:f2:
4d:df:a3:6b:02:25:26:c7:23:52:96:0d:74:99:29:
de:0a:42:4a:41:c5:2a:34:2a:df:03:98:d9:2b:91:
f3:10:4d:dc:c1:eb:26:b2:52:a8:12:f3:3b:93:97:
c1:99:20:89:b8:54:9e:a3:3c:d9:53:7f:ad:52:05:
85:2f:c4:f7:6f:4e:95:7a:60:40:fb:2b:70:75:16:
95:ee:05:ac:ee:6c:0f:1a:66:39:46:8b:fe:95:1b:
8a:83:50:1c:6d:e2:25:09:3c:87:71:cc:9a:08:80:
2c:29:cd:9b:b8:9a:63:48:1c:8c:3a:c5:c0:7b:57:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:DF:39:C4:3D:7F:25:38:F0:86:59:58:4B:DE:47:27:38:5B:82
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0d:f6:3c:a6:a8:54:65:7c:8c:aa:d8:97:ba:39:5b:05:dd:
d0:dd:6f:01:92:16:0f:46:4b:d9:15:74:7d:6d:4a:29:12:b4:
6d:fc:e4:27:3b:a7:9d:52:d7:13:bf:3c:41:00:db:c3:b2:e8:
18:53:28:ce:7a:df:13:3f:cc:0c:ab:36:9e:8b:21:80:53:ba:
74:74:66:3f:bd:da:83:72:47:c4:1f:c9:46:f6:6d:bd:06:d8:
49:d4:01:1e:9c:92:64:01:6e:34:c1:84:1a:93:ab:ea:a8:5e:
f2:f8:d3:67:a6:20:7a:bb:e2:35:05:50:a2:a2:ad:7f:d9:5e:
52:b2:72:ae:b7:1a:c4:7e:87:26:d6:40:bd:91:76:fe:8a:75:
a1:8b:3d:97:b2:da:99:88:53:51:32:30:e6:cb:53:49:25:f9:
90:05:8f:90:a7:d5:f0:48:1c:e6:98:bf:ba:5f:18:ae:53:3b:
da:c5:15:db:fa:de:b7:9a:5c:fe:7f:54:37:eb:55:a3:e3:4a:
c2:33:82:10:41:7b:00:9b:70:17:70:1b:ef:3c:57:55:cd:d9:
76:d0:c0:05:1c:44:80:4b:9c:05:3f:40:f6:0c:8a:e6:0c:eb:
8e:45:4f:bd:8c:c9:28:61:a8:f3:68:84:a3:a0:d6:e6:a2:96:
50:0f:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:39 2026 by rpki-client