Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: o6sLHKSkRsuEOf+PywGUukBaj06A3WG5AJNkI4I1nR0=
Subject key identifier: B1:B4:22:C2:F4:30:DF:97:60:17:D5:FA:90:EC:D5:F5:B8:5A:F0:3D
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 019F916D16163B2BCD5D01F07BD7F49DA4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:13 +0000
Manifest this update: Fri 24 Jul 2026 00:01:13 +0000
Manifest next update: Sat 25 Jul 2026 00:01:13 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: b6Wqg6iItZKRzsTX1Y0Gpwdss5U5yyDnYfG1aosNufQ=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:16:16:3b:2b:cd:5d:01:f0:7b:d7:f4:9d:a4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Jul 24 00:01:13 2026 GMT
Not After : Jul 25 00:01:13 2026 GMT
Subject: CN=b1b422c2f430df976017d5fa90ecd5f5b85af03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:b8:f6:4b:4c:43:fe:5f:e2:cb:e4:0a:3d:
b9:23:e1:ff:c4:8f:74:57:bf:27:64:f3:d0:62:0b:
90:26:86:c3:19:2f:3f:87:fa:95:a3:62:cb:53:59:
09:8c:b5:bb:d0:3a:01:ce:0c:7f:37:9a:3b:53:3e:
00:ac:ff:27:eb:e8:3b:5a:51:da:15:9c:cb:f1:73:
55:df:1f:a8:c4:62:5f:52:2e:0c:68:88:b0:e4:9e:
a8:ed:ca:b1:cc:24:f7:ba:cc:85:84:1f:9b:2b:5b:
58:dc:b0:2e:ef:f6:bc:ed:16:fa:dc:2a:d2:54:ed:
34:49:2a:01:3e:e2:7b:ca:8b:1a:01:52:ea:e5:32:
f0:24:6a:62:4a:fe:b7:f6:46:d8:78:bb:d7:73:6b:
33:55:28:dc:3f:5e:36:53:e3:da:79:5c:a3:5f:99:
bf:d6:d7:51:57:61:41:e2:e6:9c:06:43:4c:84:42:
6b:88:f7:07:4a:49:ab:a0:e4:1a:2c:3c:ed:72:b4:
e0:45:5f:ba:7a:18:a0:98:a9:c6:b2:a1:a4:33:07:
8c:a0:6b:2f:91:09:1e:91:dd:1a:a5:7d:cb:d1:ae:
b6:96:38:83:d0:57:49:22:5b:29:51:be:5e:f5:8f:
ad:54:f8:22:e7:6a:0a:10:b7:ef:69:b5:5f:fc:21:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:22:C2:F4:30:DF:97:60:17:D5:FA:90:EC:D5:F5:B8:5A:F0:3D
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:92:ce:8e:1e:9c:f1:17:8a:62:a9:1d:07:43:30:5b:a1:
b8:a4:ce:90:c0:44:85:1c:73:fd:08:97:60:d0:0c:e7:b0:fa:
bd:e0:8a:24:b3:d0:9a:12:a9:00:a3:2b:10:50:82:c1:41:70:
09:c5:13:87:cb:d4:92:d0:e4:a2:cc:d3:46:5c:c1:1e:68:83:
03:2f:b1:33:31:a7:12:b5:e4:a5:a5:b3:e1:3f:2d:00:d3:1a:
6d:6d:12:ca:78:1c:4f:4c:ea:7f:7c:f0:28:5c:47:6c:ee:bf:
61:95:a2:15:66:6f:e1:56:e8:83:a9:87:ae:be:33:ea:08:21:
d0:ca:57:c1:e0:b5:d7:40:3d:2b:fd:54:d1:b7:6e:7b:4e:34:
66:64:71:78:c5:6d:50:c8:0b:e6:d5:ac:86:05:38:0f:5c:57:
48:90:83:37:7a:2b:9d:3c:83:10:e3:58:e7:04:01:a6:cd:ed:
8a:f9:53:cb:6b:dd:c9:3a:bb:c5:35:53:34:dc:79:e6:8b:a2:
07:ab:42:03:1d:a3:e6:11:0a:71:0b:84:fc:2a:81:d9:5a:9a:
3c:f4:71:35:c7:d1:ec:1f:d4:62:74:4d:04:50:c1:15:bf:f1:
db:e3:be:a8:14:58:5f:c1:cb:da:f8:2b:04:11:32:43:70:07:
b2:99:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:57 2026 by rpki-client