Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: jDr1szfs8dIgPA8Cd07m1EMJ4erLKVtJPRr2eQIPpy8=
Subject key identifier: DF:6F:7A:2C:68:42:FF:ED:F9:59:D3:54:C3:CB:DF:DF:C6:9B:A1:36
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019F90C7FF0E0B77EA355221605B18269425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 0275
Signing time: Thu 23 Jul 2026 21:00:53 +0000
Manifest this update: Thu 23 Jul 2026 21:00:53 +0000
Manifest next update: Fri 24 Jul 2026 21:00:53 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: 2RTP+RoqejROtVfyn4XOSsjjF/cSnOmmJi5fR9PMfuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ff:0e:0b:77:ea:35:52:21:60:5b:18:26:94:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Jul 23 21:00:53 2026 GMT
Not After : Jul 24 21:00:53 2026 GMT
Subject: CN=df6f7a2c6842ffedf959d354c3cbdfdfc69ba136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:ea:72:bc:72:c4:9b:82:3c:60:45:b9:48:
d5:97:25:e8:5b:b5:07:e6:23:39:9d:1c:70:7f:a5:
60:6b:7d:6d:10:5c:d1:5f:93:18:75:bc:72:ff:3c:
18:28:e7:e4:31:11:5c:5e:38:81:68:92:c0:0a:5d:
1a:1f:4b:18:48:c6:86:aa:eb:5e:97:13:8f:db:49:
84:e9:11:62:af:7f:be:37:d7:ec:ce:dc:e6:87:1c:
bc:d4:c1:3a:2f:a0:1a:73:56:7d:5a:fd:9c:92:41:
e3:ac:6f:b7:8b:8c:86:56:c7:65:16:ef:fd:24:5d:
9c:7e:58:90:29:cf:bb:f7:52:1e:8a:c2:cf:8e:d6:
3c:7e:e2:7b:4f:07:dc:87:8c:53:cb:97:39:9d:3b:
68:3d:08:a9:ca:d5:52:3b:cb:b2:78:8e:73:83:8b:
52:bd:1c:4d:32:1c:94:21:14:88:69:15:4b:8e:df:
b8:10:b7:95:0f:02:80:92:a7:06:80:63:57:cf:63:
4f:48:10:bd:34:30:3e:61:8b:2b:08:71:5b:da:f8:
c1:a5:87:7f:ee:75:05:6b:ce:b6:5a:3e:90:19:84:
76:26:f7:21:ce:cd:c6:5a:92:66:dc:8a:29:0a:6e:
a1:7a:94:0a:1f:0f:1a:8a:81:02:67:ac:27:ec:b5:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:7A:2C:68:42:FF:ED:F9:59:D3:54:C3:CB:DF:DF:C6:9B:A1:36
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f3:61:18:d1:48:93:74:77:53:f7:74:0e:dd:d4:36:5b:d7:
f1:63:c3:27:dc:3e:45:f7:95:70:98:29:5f:65:4f:75:23:e0:
1c:10:a8:3b:29:e7:d6:f9:db:10:46:c4:ee:da:32:3f:84:3c:
73:00:cc:36:a3:66:ea:ee:dd:51:67:69:fb:81:fa:1f:aa:c1:
32:cc:fc:f0:1d:fc:1d:00:29:05:35:71:cc:75:2d:2a:b8:fa:
28:60:34:d0:98:ed:06:86:18:16:17:07:6a:83:5c:df:b0:9a:
43:04:d1:bd:bb:d4:38:e4:18:f5:6b:17:06:9a:40:bb:8b:8a:
4a:76:0b:04:bb:8a:22:49:90:68:e1:c3:c0:cc:71:27:2b:86:
db:ae:7f:8c:9d:8b:bd:66:78:40:0d:44:50:d8:45:1c:75:8d:
71:c4:61:c3:37:73:0c:54:58:e5:72:d4:10:ec:fc:c0:74:67:
e4:67:09:9e:d2:11:81:6a:fc:36:d7:c2:b9:94:2a:0d:e1:58:
af:f1:fc:c2:48:b9:1e:6d:44:e2:09:94:65:ee:fb:96:c8:58:
a0:bf:d6:20:46:fe:f8:a7:d6:29:88:2e:58:29:4e:57:04:c5:
04:3c:5f:90:32:fe:b6:ca:60:ee:f0:b8:b9:6a:7d:23:57:a0:
e7:85:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:21 2026 by rpki-client