Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: tS96SZhcz4AjUMNbL83GzyDn7DLOkbyYZ6gIjeztDcA=
Subject key identifier: 2E:DC:2E:D7:AB:04:1D:2D:1B:4D:44:93:23:DE:4B:CF:4D:4C:C9:12
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019F91DA50D2B7469AD8B6F3FB8DBA77D0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0A9E
Signing time: Fri 24 Jul 2026 02:00:31 +0000
Manifest this update: Fri 24 Jul 2026 02:00:31 +0000
Manifest next update: Sat 25 Jul 2026 02:00:31 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 3Ge6ka6w0zPg+ok3njSe622jLoqaPRPc3bGI6EvnokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:50:d2:b7:46:9a:d8:b6:f3:fb:8d:ba:77:d0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jul 24 02:00:31 2026 GMT
Not After : Jul 25 02:00:31 2026 GMT
Subject: CN=2edc2ed7ab041d2d1b4d449323de4bcf4d4cc912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:3b:a7:6d:19:64:f1:c8:95:92:89:7b:4b:
40:26:df:d8:5a:eb:e0:36:e4:cc:1f:87:ae:df:80:
b8:9b:6b:7b:ee:34:95:f9:3c:26:cd:17:50:cb:5c:
3e:48:b5:86:28:92:db:66:23:12:73:77:35:01:9f:
26:d2:ec:32:31:48:02:5f:f9:e1:d1:25:8b:f9:6a:
eb:05:6e:00:3f:fe:64:ee:24:bb:0a:de:d0:40:29:
f3:b5:5e:53:e0:1f:f2:90:38:54:f9:15:b3:a3:28:
f6:b4:f8:11:cd:e1:23:fc:11:35:2f:af:cb:04:c3:
f2:f8:27:74:19:56:3d:da:cf:55:27:f1:6c:b6:bd:
02:11:a9:61:67:43:01:2a:04:08:e5:a2:43:0b:d5:
6a:15:dc:f2:51:d6:59:22:78:f4:bb:5b:4b:30:71:
1d:83:25:81:74:e1:b8:16:a5:21:b3:c6:9b:ee:70:
b4:c7:71:2d:fc:4d:aa:3b:da:36:69:07:76:93:95:
d7:1b:9e:67:8f:51:5d:c1:71:39:6b:8a:6d:18:33:
ac:5e:19:31:23:6d:39:f0:58:c9:8e:11:4c:7b:dd:
38:20:f2:12:d2:0e:92:4c:4a:1e:b5:6e:86:ba:ec:
25:37:a2:99:46:f6:3f:c0:76:ce:2c:6e:a3:50:a2:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:2E:D7:AB:04:1D:2D:1B:4D:44:93:23:DE:4B:CF:4D:4C:C9:12
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:d7:dc:f0:ea:c3:a7:6e:56:b5:03:6e:fc:39:c5:b4:99:
4f:e9:fa:2a:f4:ec:7a:0d:0e:7c:a8:5d:29:64:67:a2:42:b8:
f5:e1:c3:2f:92:57:c9:a8:e2:25:f8:0b:21:09:9d:7d:e3:af:
f3:54:05:b5:20:c9:51:7f:a5:d1:05:01:66:9b:f9:14:fe:7d:
84:61:74:41:b8:2f:1d:af:f6:3f:96:e9:14:60:2a:90:0f:7f:
d5:cb:59:8f:23:c0:15:6a:6f:5f:db:ac:7d:a9:5c:67:88:9f:
33:7a:b8:83:ba:f9:92:b9:0a:b4:1a:81:ed:f1:f7:9d:16:81:
f3:39:8a:64:7a:e7:e0:a0:15:e7:64:84:01:db:c6:8f:f8:d1:
ae:86:7b:ce:b5:1c:5f:dd:f3:7d:4e:ef:e6:1e:36:31:3f:0c:
83:96:1a:7b:77:22:d9:5f:cc:8c:94:63:ab:07:18:1e:97:60:
db:57:f4:0c:df:21:6a:00:ee:f7:a6:b1:97:b2:33:8b:ce:89:
37:73:af:fc:63:42:13:ff:26:a6:2d:24:94:c3:6f:e4:b8:44:
b0:ce:bd:5d:05:d4:45:a4:1f:42:63:52:a9:69:3b:df:cc:91:
74:75:15:cb:3f:9a:8c:d4:75:ab:8c:44:86:33:5f:af:bf:41:
a4:d7:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:38 2026 by rpki-client