Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier: gBZc3Z2U+jO1fC8kW4RFpelG0PlSv7KJmL6x55ZgE2Q=
Subject key identifier: 40:A4:86:21:E4:94:59:A7:85:62:79:BA:F2:AC:B6:5A:1D:B6:9E:D9
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer: /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial: 019F93921130952064E39639FAEEDEAD79E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number: FD
Signing time: Fri 24 Jul 2026 10:00:51 +0000
Manifest this update: Fri 24 Jul 2026 10:00:51 +0000
Manifest next update: Sat 25 Jul 2026 10:00:51 +0000
Files and hashes: 1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: sQ4YmCscZlK47DFgdSHWPb8+2lrs/5zNY1AbQMGIUzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:11:30:95:20:64:e3:96:39:fa:ee:de:ad:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Validity
Not Before: Jul 24 10:00:51 2026 GMT
Not After : Jul 25 10:00:51 2026 GMT
Subject: CN=40a48621e49459a7856279baf2acb65a1db69ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:24:41:6c:fa:68:33:87:73:30:eb:3f:a0:
ca:83:ac:a9:e4:2d:08:86:28:41:99:90:2b:f4:39:
c2:89:62:ef:df:52:35:19:03:64:2d:3b:cd:d1:fe:
42:91:cf:25:8c:59:38:f8:0f:82:be:45:ec:ef:24:
64:0c:f5:c7:ba:85:82:9c:b3:44:55:ed:85:20:6f:
b8:18:be:97:af:b1:2e:f2:d3:ca:38:70:d2:64:7a:
d5:af:98:1a:97:80:6c:be:a5:ca:a9:10:aa:fa:20:
e1:12:c3:0c:4c:2c:ca:81:9a:59:ba:0e:d3:ce:bb:
cc:52:77:eb:9e:7d:fa:c7:96:f9:25:1b:0f:40:b0:
06:12:2d:f3:13:6a:e5:57:07:69:6f:c1:91:e0:97:
24:0b:c0:3e:29:9f:3d:0f:e9:c8:b9:b1:b3:2d:b6:
39:ed:1b:86:3c:cf:45:92:ac:2b:e3:95:8e:98:3f:
3d:d7:35:85:28:95:1c:42:eb:3b:1e:c2:46:57:d0:
5b:3b:7a:c6:28:99:31:12:38:b0:e9:de:3d:19:44:
5d:b1:92:05:4a:6d:e1:e3:29:af:2c:c1:41:d0:ae:
6a:12:ca:60:f7:69:1c:94:ae:56:ab:05:35:91:54:
75:2b:2b:3f:97:ed:c5:9c:c8:46:74:4c:c3:78:7d:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:86:21:E4:94:59:A7:85:62:79:BA:F2:AC:B6:5A:1D:B6:9E:D9
X509v3 Authority Key Identifier:
keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:49:34:33:fa:7a:03:e9:77:07:28:dc:bb:62:be:2f:a3:
b3:30:80:4d:c0:6a:68:55:69:14:c9:fe:34:d9:db:47:da:05:
4c:85:a2:0e:d5:01:13:ef:ae:6d:1f:72:c9:ac:2c:59:37:ef:
30:8c:2d:ce:4b:90:39:3d:1d:32:d3:7e:e8:0f:36:b3:70:7e:
b3:dd:9a:fd:4c:50:36:03:ed:53:e1:f2:80:3f:b0:95:a6:ed:
ae:82:93:ee:5b:37:3e:32:99:85:b8:e1:f3:62:f9:48:41:13:
7f:6b:36:6d:91:86:11:49:df:57:b9:8d:20:7c:5d:20:cb:64:
5d:f6:03:27:89:57:c8:d1:56:d3:2b:f5:f5:6a:eb:39:5f:02:
0a:6f:e9:a5:7a:3b:fd:45:e4:85:c3:eb:8f:fa:f6:04:a2:6d:
67:d7:82:e9:d0:57:8d:90:ae:43:cb:da:8b:10:f1:87:4f:7b:
a8:ee:02:34:f5:57:f2:35:15:af:cd:f2:d8:f6:cc:81:a4:92:
27:a1:0e:d0:21:e3:94:e1:da:f8:24:58:ee:b3:75:50:04:75:
11:6e:fc:ad:8d:7a:66:24:cc:62:64:29:4d:62:f3:4a:b9:fa:
df:6f:03:f6:3d:06:1d:90:38:8a:c0:33:a1:9c:39:b2:23:d7:
62:4d:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:38 2026 by rpki-client