Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: 2rEa+lIDBT3iqWPyET1GcZp5HfuHA8zfHIGEAfLItBk=
Subject key identifier: C8:0A:9F:0D:8F:B3:BC:B8:EF:A4:50:8B:B3:79:9E:61:67:14:FE:4E
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019F927FC3DFE78BEA91608A5BEF0AA8D35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 025E
Signing time: Fri 24 Jul 2026 05:01:14 +0000
Manifest this update: Fri 24 Jul 2026 05:01:14 +0000
Manifest next update: Sat 25 Jul 2026 05:01:14 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: 0/ZeLw37tEJUxXIjVDSjauckITxL5O8tM/talZw8e/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c3:df:e7:8b:ea:91:60:8a:5b:ef:0a:a8:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Jul 24 05:01:14 2026 GMT
Not After : Jul 25 05:01:14 2026 GMT
Subject: CN=c80a9f0d8fb3bcb8efa4508bb3799e616714fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:3a:73:f3:78:54:f8:ec:3b:08:b5:1b:28:
bf:8a:59:14:a9:63:9c:0d:7d:01:dc:06:ca:7f:5e:
f4:15:4c:a0:40:14:cd:d2:47:9f:74:75:e7:0c:db:
e6:b1:7f:cc:b6:a2:4f:2f:d7:75:46:ec:0c:d4:64:
ae:67:33:60:a1:aa:c4:58:96:cf:42:e2:46:fd:a3:
c9:6d:5e:2b:6d:6a:16:09:a2:cc:50:4c:c6:3d:f3:
cb:97:d1:50:65:b8:69:ba:36:61:50:5f:37:4b:fb:
41:86:47:a7:7c:0a:95:e9:1e:28:17:08:b8:ee:18:
ac:c7:31:63:f2:a4:89:10:ea:8e:d8:be:88:c9:45:
9c:f5:fa:05:18:c6:ae:1c:88:f9:00:1f:f4:3d:ac:
42:09:61:6d:80:df:a5:06:23:0c:62:66:a0:f8:6a:
2e:96:ab:7a:6c:f0:18:c3:6c:22:57:04:0c:c5:b6:
03:28:f2:bf:ca:0e:21:25:9b:56:61:09:95:a5:3b:
fe:c0:af:97:04:a4:8e:74:77:cd:a6:54:4d:e8:bf:
df:44:4a:04:ad:47:74:40:6d:a6:54:cc:70:7e:38:
68:e0:65:08:c6:ac:88:4b:f1:4d:c3:42:34:c5:03:
6d:9a:61:64:a3:07:74:ba:d3:55:7b:87:4e:41:f0:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:9F:0D:8F:B3:BC:B8:EF:A4:50:8B:B3:79:9E:61:67:14:FE:4E
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2a:95:3f:c2:4c:8a:d1:10:1e:d2:d9:3f:24:81:05:93:6a:
d0:ab:3b:b7:eb:32:da:54:6e:e7:10:ac:f7:28:d4:a7:fa:80:
94:db:fe:c5:33:6d:5f:97:59:6d:63:29:43:1d:5f:44:81:9f:
e4:f7:d3:d3:cb:47:aa:ce:3f:84:ae:f3:b9:15:ed:9d:1b:79:
b0:ab:8f:45:13:a3:ea:cb:c2:d9:cd:25:74:9a:aa:c2:42:c2:
99:3b:78:50:57:79:37:bc:a7:7d:7f:71:82:44:2e:94:24:a1:
5f:80:24:a1:38:fd:2c:1b:7a:50:66:b1:0b:c5:33:cd:95:44:
59:a1:48:cd:c4:19:79:aa:c5:78:89:11:c6:84:9a:3d:5f:92:
43:e0:83:fe:31:e5:6e:40:e8:2f:00:ab:b0:38:53:cb:6f:57:
6f:4a:45:5f:e1:02:fa:34:ff:d5:42:68:8d:7a:16:b9:87:80:
50:87:6a:87:3d:02:0a:59:5a:30:ae:06:8f:10:20:1d:ac:9c:
33:8d:cd:f5:69:4b:63:dc:0a:15:84:fb:97:5c:d9:44:81:fe:
f1:f7:7f:1d:79:15:45:6d:a9:71:9e:5b:60:74:b4:11:6b:34:
10:ae:53:47:b0:f0:94:27:4c:fa:0f:4b:a4:b4:79:e7:11:73:
36:a1:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:42 2026 by rpki-client