Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: 2NlAeZvRIS9T/JLnCtMlvp+AKFAtuSd9btk6XRTWAzg=
Subject key identifier: F6:EF:3B:50:38:0F:5E:93:E0:08:F3:9B:6C:49:24:35:E7:FA:C9:48
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019F9323BED3FBD95E909754D67F269EB060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 01DF
Signing time: Fri 24 Jul 2026 08:00:21 +0000
Manifest this update: Fri 24 Jul 2026 08:00:21 +0000
Manifest next update: Sat 25 Jul 2026 08:00:21 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: muaW+Fi8in8gohTucnYfXfKk1yhCzhA86HLvGCbCiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:be:d3:fb:d9:5e:90:97:54:d6:7f:26:9e:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Jul 24 08:00:21 2026 GMT
Not After : Jul 25 08:00:21 2026 GMT
Subject: CN=f6ef3b50380f5e93e008f39b6c492435e7fac948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:fc:83:52:f1:93:45:1c:79:ff:b9:8d:de:
37:5a:1f:bf:94:a0:01:d9:d7:98:2e:74:e8:41:b7:
8d:10:46:16:3e:41:91:e7:65:b1:3c:81:c5:c1:4d:
44:b8:25:61:3d:9e:cc:1b:37:2a:60:a7:1a:4b:88:
3a:31:8c:bf:88:4d:5e:a2:06:77:ef:86:52:73:2a:
1f:6a:65:1e:b1:93:f8:3c:4e:87:0f:9d:96:a9:a1:
e7:0b:e3:92:62:f4:da:78:c6:f1:ce:fa:5c:94:95:
68:bc:7f:02:ad:7c:39:db:34:bd:b6:4a:52:c6:74:
f1:9b:e7:0d:22:d3:a6:be:b1:35:0d:e3:85:79:36:
d3:8b:11:17:7b:32:d7:5b:45:85:f1:8d:2c:37:c7:
24:30:76:71:56:97:29:00:62:0b:5d:7d:0f:c1:2c:
29:a0:c3:59:75:70:a3:b8:ad:6f:6b:42:98:76:b6:
6d:79:66:6a:f1:ad:93:8d:6d:0f:63:f3:48:19:54:
6a:e5:c6:86:ef:fc:35:84:af:e8:d3:d4:88:f4:d7:
37:c5:cd:b1:e9:f9:8a:77:26:28:29:78:71:94:8e:
5b:9e:2f:99:a7:17:96:ba:a7:c5:70:7a:e5:f4:da:
89:ee:82:3c:bd:3a:a1:82:a8:f5:48:db:66:95:23:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:3B:50:38:0F:5E:93:E0:08:F3:9B:6C:49:24:35:E7:FA:C9:48
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:52:d7:d0:a8:fa:55:0d:b9:6f:1f:fe:c6:be:6a:cc:d3:
95:02:ae:b9:df:d4:97:b0:88:f8:24:2e:6d:44:fa:f2:19:28:
78:02:46:ac:d5:fa:97:ee:cb:7d:e6:5e:5e:1b:0d:ad:0f:c6:
71:cb:87:85:0f:48:76:1c:17:cc:33:a1:fe:f1:39:a6:18:9e:
28:6e:08:f8:8c:73:9f:b4:c1:87:bf:04:19:75:b4:48:a0:90:
c1:69:f0:55:10:01:71:b7:f8:01:0d:fb:94:12:03:05:28:2e:
67:2d:b3:b3:95:b6:8b:73:3e:af:e4:82:3f:8b:bc:ee:3e:ce:
ce:a1:54:a5:2a:a0:94:ba:cf:af:43:37:e4:1f:a1:d7:da:bf:
d6:dd:49:2a:0c:74:e7:52:d6:74:cf:f9:95:45:7b:51:46:5d:
e1:82:8f:c3:32:b5:3f:df:9d:8c:4a:9d:bd:47:29:78:a6:c1:
91:b4:a4:08:04:ac:54:4a:11:6e:74:47:f3:43:ef:e1:de:68:
b9:7d:a3:c0:1b:75:49:07:d3:7c:06:99:13:c4:c6:a3:7c:6a:
b8:f3:9a:d0:46:44:d7:45:2a:55:42:d0:b8:e1:3f:0c:07:98:
ab:94:41:94:9d:04:10:0a:87:38:0b:a3:eb:f3:95:1e:fc:3b:
9d:60:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:24 2026 by rpki-client