Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: g+ACQN138xj75++HDiR9DoH54Eb4CoCmbO39/ecsWow=
Subject key identifier: 4D:D0:97:81:F3:6E:5C:F2:E7:E5:1F:DD:C6:BA:6D:4F:3A:C1:69:46
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 019F91A37DB2216F3BEA34658E040F3F69A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:00:38 +0000
Manifest this update: Fri 24 Jul 2026 01:00:38 +0000
Manifest next update: Sat 25 Jul 2026 01:00:38 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: 4T0Tu1DMUOtFgCNVKFnq2c/gbSYxQbp7LLZeUnm/akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:7d:b2:21:6f:3b:ea:34:65:8e:04:0f:3f:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Jul 24 01:00:38 2026 GMT
Not After : Jul 25 01:00:38 2026 GMT
Subject: CN=4dd09781f36e5cf2e7e51fddc6ba6d4f3ac16946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:80:68:cc:30:7c:55:fe:18:1b:5d:59:1a:
1c:20:18:0f:d5:65:20:73:eb:16:fc:c9:01:be:ef:
17:7b:5a:ee:f9:6a:34:46:64:65:3b:7f:c5:d9:58:
50:ad:fd:e9:15:d7:a2:4d:43:2f:46:c3:ac:21:74:
f3:eb:7b:6f:59:6a:13:c6:c1:06:ef:23:f8:01:6b:
25:dd:a1:fa:62:15:70:29:de:f4:02:c4:ba:75:da:
48:4e:fc:1e:aa:78:dc:45:f1:91:6b:d2:24:a1:f5:
6a:87:9c:d4:e2:0d:35:f3:aa:4d:e0:84:77:b5:66:
d1:2c:ca:1e:e8:4d:28:81:43:5d:fa:c1:79:10:9e:
f4:88:de:d9:ff:a2:0b:3d:1d:50:10:97:f8:af:e6:
5f:17:2a:89:64:b8:19:e2:f0:a3:f2:15:f6:a0:ed:
0e:8e:13:72:c4:31:74:3b:72:c0:23:28:d6:ef:79:
bf:e5:01:bb:4b:4d:43:ea:fe:d8:f3:77:09:bf:2f:
13:49:9e:48:2e:2b:eb:86:61:e4:d6:04:fc:b4:a7:
43:66:8d:2c:a4:df:ea:7a:3b:b0:80:47:7b:00:52:
59:fd:c1:e7:31:a4:58:13:2d:e1:5c:51:12:87:53:
b6:6d:84:78:dc:49:be:47:99:29:af:b4:a0:5c:c7:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:97:81:F3:6E:5C:F2:E7:E5:1F:DD:C6:BA:6D:4F:3A:C1:69:46
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:e3:b6:97:69:b0:0d:da:d8:44:8a:dd:19:0d:58:c6:f4:
2f:a6:16:41:f8:77:4d:cd:be:73:86:d8:1f:40:10:c8:d5:3b:
73:b5:5c:c2:47:61:bd:19:dd:34:e3:d9:a0:cc:88:89:c3:85:
1c:54:d8:cb:eb:fa:cd:b9:63:cf:f8:a0:ff:cc:64:4e:85:1a:
f2:b6:3f:87:32:c7:93:ca:ee:be:dc:02:21:0c:1e:4c:57:81:
7d:9d:aa:9e:06:a9:8b:06:a7:70:be:ed:19:8d:99:b4:60:3c:
bc:40:02:09:96:35:4c:6c:63:08:99:6f:80:84:82:69:be:b3:
4d:c1:8c:db:57:95:e3:8a:3e:01:9b:39:b1:55:31:49:93:8a:
14:17:4b:37:81:cb:24:03:49:e0:51:24:d5:04:8d:4b:15:c4:
41:4e:5c:e0:48:a6:31:ab:b9:11:8d:4c:d9:8e:c8:8e:29:1d:
02:e2:e8:65:76:9d:aa:4a:82:c3:18:b4:c3:88:47:f6:04:7c:
a0:81:e4:6a:97:3c:44:30:b3:23:11:46:3b:35:ac:b7:5d:9b:
c1:fa:39:d6:aa:06:4f:56:ce:10:9b:a1:21:69:0e:75:a2:5f:
66:be:a1:1d:24:77:6b:64:bd:38:d1:e1:9d:44:8e:85:a9:24:
b3:48:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:43 2026 by rpki-client