Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: X8qvVmgZBLjG6+cqPneaS3+nKkYzj6/saV/pYFkio80=
Subject key identifier: 23:1D:A7:E8:0A:4F:D0:43:88:60:C9:A9:9F:B7:DF:99:41:AA:F8:E3
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 019F9436A59CD8B01BD6A3AADF53B3C7157C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 1956
Signing time: Fri 24 Jul 2026 13:00:36 +0000
Manifest this update: Fri 24 Jul 2026 13:00:36 +0000
Manifest next update: Sat 25 Jul 2026 13:00:36 +0000
Files and hashes: 1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: 9qnbdzuZm6j5Nw6aDGqQRcey66vywqZc66wkBQlmsWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:a5:9c:d8:b0:1b:d6:a3:aa:df:53:b3:c7:15:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Jul 24 13:00:36 2026 GMT
Not After : Jul 25 13:00:36 2026 GMT
Subject: CN=231da7e80a4fd0438860c9a99fb7df9941aaf8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:6e:22:41:b1:08:1a:a7:7d:4a:11:e7:64:
eb:5d:b4:04:78:cf:bd:91:29:43:d2:f4:a0:34:ac:
64:ea:d4:6d:85:c8:ab:af:e6:af:7f:f7:65:0b:68:
eb:89:07:4d:56:19:4b:94:75:02:23:30:b4:be:8f:
e2:a0:4f:4d:85:7f:2c:73:81:e6:af:40:20:bf:68:
3c:06:24:43:24:42:24:52:65:0d:3d:2e:22:bd:6d:
b0:6d:96:f4:d8:3e:5c:a7:b7:6a:e6:8a:4c:6d:d8:
f6:ea:41:25:fb:07:91:9c:77:f2:0c:a1:2c:1f:b9:
20:23:31:b6:c5:cb:5c:5e:de:ce:6d:01:c5:66:63:
7e:3c:0b:0c:d8:f4:29:a6:75:c3:66:0d:55:ce:78:
cd:da:06:3e:ba:3a:c6:72:5f:2b:8f:d7:3f:c5:ab:
9c:39:31:8e:fa:c6:3a:17:52:21:92:cf:b6:c2:fc:
f8:b1:e9:2a:fc:84:77:8e:cf:8c:e6:f8:a4:48:c0:
d9:d1:23:72:74:32:64:bf:ad:ec:2a:e9:15:1e:ca:
7e:9b:5f:e6:4f:73:f5:bb:6f:c5:5d:7e:a4:b1:09:
79:10:e3:1b:0d:89:2e:4c:a7:f8:c3:8f:df:ee:b1:
27:e0:fd:c9:8c:5c:5b:ce:d2:75:c4:e9:da:73:8f:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:A7:E8:0A:4F:D0:43:88:60:C9:A9:9F:B7:DF:99:41:AA:F8:E3
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:50:f6:ff:cc:7b:a9:46:c0:0c:22:07:57:ab:3a:8b:c9:
63:f0:2d:92:8e:26:e6:ca:76:e0:c5:4a:6e:38:65:0e:c2:6f:
86:78:21:88:08:77:e7:16:97:11:f6:05:b9:40:0a:d8:ac:65:
ad:2f:b9:b0:a2:9d:41:09:4b:5f:9c:97:64:71:3f:7e:27:8b:
1d:da:c0:31:2c:32:0b:fc:01:aa:5d:36:38:5a:27:6e:a9:c3:
4a:a2:d6:90:f0:8b:31:6d:14:a6:9e:bc:76:af:82:a2:27:d1:
84:07:07:fa:30:aa:45:2d:32:6e:42:15:28:e4:1f:2f:7a:2b:
c6:00:31:a1:91:26:8a:4c:9a:b8:1e:87:45:b9:04:f5:20:49:
39:ea:b6:ff:8f:56:ea:40:dd:f1:8f:9a:b0:50:3d:76:9d:20:
43:2e:ff:28:3c:5e:26:4d:13:e8:ae:f5:9f:a9:70:f3:3d:93:
c8:78:64:b2:5a:36:50:c2:43:7d:1f:35:4e:f7:a6:c8:4e:9b:
f1:c9:a2:16:cd:9b:fd:05:36:cd:d7:b2:df:df:3d:0b:31:33:
31:a7:54:9f:76:b2:fe:7a:bd:0b:1b:0b:cd:a1:64:7a:0c:c5:
be:d3:5d:99:58:11:4b:87:42:80:82:c1:18:5c:f2:a1:d8:da:
3e:ac:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:51 2026 by rpki-client