Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier: +Pp0nTt3lyf299SeOvG/rkYXk/h7mBIFHHwmER8OaGA=
Subject key identifier: 89:13:CF:0D:26:26:1A:66:06:A2:C5:1D:41:75:A5:3D:DC:E6:B7:EE
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer: /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial: 019F9248582ADD7AF34B784E7DF93A08E54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number: 0169
Signing time: Fri 24 Jul 2026 04:00:42 +0000
Manifest this update: Fri 24 Jul 2026 04:00:42 +0000
Manifest next update: Sat 25 Jul 2026 04:00:42 +0000
Files and hashes: 1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: jxq2YY9GffnBPdYeDeEZmhn5dR0MnyIxK0e5Q4Ntduo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:58:2a:dd:7a:f3:4b:78:4e:7d:f9:3a:08:e5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
Validity
Not Before: Jul 24 04:00:42 2026 GMT
Not After : Jul 25 04:00:42 2026 GMT
Subject: CN=8913cf0d26261a6606a2c51d4175a53ddce6b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:1d:10:66:b0:81:3d:b3:de:e9:1d:63:ce:
91:ea:67:e3:5a:93:18:0e:27:01:c1:56:dc:bf:7e:
e6:6a:86:25:7b:df:9f:6b:b7:79:a9:6e:2f:69:35:
f4:a9:e9:7d:45:fb:33:f2:34:7a:4f:45:a2:54:fc:
08:13:3d:2c:07:a7:17:0b:a6:19:73:5b:5e:24:17:
9f:2f:d5:1b:60:14:a8:b2:f5:b9:ae:3f:b1:b6:6e:
ac:3f:7c:11:ef:a3:29:f8:86:16:61:7e:c2:1f:60:
96:f0:86:fb:06:32:41:14:69:f0:45:f9:32:e3:30:
ba:a5:c2:13:25:8a:3e:93:f1:35:69:2a:56:38:2e:
f9:36:56:34:ec:d8:e1:bb:f9:ee:d1:13:3a:6c:50:
83:ec:4c:cf:29:54:da:6c:1b:27:00:f7:9e:33:2b:
40:86:b8:c3:bf:1d:ef:2a:2f:d4:bf:c0:24:9e:ed:
5d:0c:38:f0:31:d6:8a:bb:ea:c3:97:45:69:47:6b:
60:22:1c:76:88:29:75:d8:18:42:c3:65:0a:56:87:
6a:88:34:e7:14:98:e8:7d:30:4a:61:42:4b:e1:29:
d2:b7:dd:98:68:b7:d7:dc:bd:7d:3c:fc:59:cd:d4:
70:c5:3b:c9:c0:e5:71:bf:9c:60:09:e5:21:03:05:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:CF:0D:26:26:1A:66:06:A2:C5:1D:41:75:A5:3D:DC:E6:B7:EE
X509v3 Authority Key Identifier:
keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:79:c6:ca:38:c1:57:c1:59:7b:cf:86:6b:2b:89:cc:34:
d5:f8:32:1b:6b:cb:d9:5c:2c:68:83:cb:3e:55:6f:24:ec:1b:
b0:98:ab:87:bd:93:16:67:a5:f9:cf:a3:34:1b:c6:d4:b2:28:
5f:88:26:a2:0f:bb:f8:7a:dd:c6:0e:a7:3c:f4:04:4c:4e:a2:
c4:9a:24:fb:c6:9c:a4:c1:79:ad:5a:e9:a2:dc:c9:03:8a:19:
1e:ec:23:8d:06:9b:cb:f4:49:76:51:4d:5b:80:54:25:07:90:
6d:02:e0:27:72:1c:05:b5:c1:1a:d1:9d:79:81:70:ea:b1:df:
91:b7:b8:1a:a4:66:91:23:6e:c4:09:7d:d3:cd:f6:78:58:53:
7f:b3:59:63:ba:bd:62:39:39:58:7a:2a:ca:8e:82:38:ab:d0:
3d:65:e9:6c:46:b8:6c:3d:5e:bf:e9:e1:22:7a:c1:3e:05:c4:
c2:8a:14:8f:5e:fc:e9:33:6f:db:c1:cc:19:05:15:a6:c2:4d:
07:47:12:40:30:93:1e:11:78:24:e0:17:1d:28:0b:54:b5:d9:
62:75:26:7a:c3:21:78:c2:5f:e1:26:e7:1a:c4:9a:c6:a1:4f:
f3:ce:2b:b0:32:2a:b7:cb:92:d0:c0:5f:fe:eb:25:79:5c:f6:
02:22:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:34 2026 by rpki-client