Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: U7usxq1RyoUrGHlRRPlpzFOt2JhEOF36EADPe1W5F7Q=
Subject key identifier: 11:D3:DF:31:6B:A0:41:6D:24:0D:26:40:75:61:DA:5A:9E:90:2E:DA
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019F935BA0B06C1C2C75D1C7EDE3081D411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 15D4
Signing time: Fri 24 Jul 2026 09:01:23 +0000
Manifest this update: Fri 24 Jul 2026 09:01:23 +0000
Manifest next update: Sat 25 Jul 2026 09:01:23 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: FX4SeiAfVk1oJ3ZX0t___kVvznw.roa (hash: sXBIiV4q77E68XFfHYdEfXRYe3LlOJvfM3L5/gohbgE=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: g4L+x8o5fndQ6buYE/V4Da/SMmoj6FxwBLEq2WH8qrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a0:b0:6c:1c:2c:75:d1:c7:ed:e3:08:1d:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jul 24 09:01:23 2026 GMT
Not After : Jul 25 09:01:23 2026 GMT
Subject: CN=11d3df316ba0416d240d26407561da5a9e902eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:b6:a9:72:65:2d:6d:18:5b:d3:a1:32:65:
26:f8:b0:b8:90:46:e2:1f:63:15:67:9a:a1:70:c5:
9c:cd:81:85:ef:b4:62:51:91:6f:4d:84:59:89:7f:
fe:61:78:72:13:d1:cf:ee:be:69:b9:2b:e6:91:28:
c4:43:96:f5:54:5c:38:9a:62:b0:d6:bf:fc:e6:04:
c3:c6:48:74:21:29:84:b0:32:2c:d8:8c:7e:da:5b:
3e:1c:3d:d9:b7:a1:e8:9a:96:92:be:dd:44:38:00:
15:6c:16:ef:0c:cd:9c:92:2b:22:9a:5c:07:e3:c6:
ca:87:e5:ec:bb:26:17:ed:b6:6c:cb:cd:04:1f:81:
dc:53:8a:10:a3:aa:51:1f:63:3d:9e:9c:49:24:95:
45:37:d8:62:9f:f1:55:63:a7:93:c4:27:06:e4:58:
16:22:a9:0e:a1:b0:77:5e:e7:d5:be:f3:e1:02:80:
b9:ce:c7:9d:99:6d:38:70:f1:78:4f:4d:b1:dc:c3:
bd:29:9d:3e:64:b8:2c:57:15:58:6e:86:25:a8:92:
13:df:3a:3c:fb:3f:45:0f:87:57:38:23:af:92:f7:
a8:ba:53:06:5b:80:b2:80:37:39:17:9d:79:ad:d9:
ca:b0:59:80:2b:25:dd:96:82:6a:3c:b6:23:27:e2:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:DF:31:6B:A0:41:6D:24:0D:26:40:75:61:DA:5A:9E:90:2E:DA
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:32:a6:41:83:14:99:bb:94:0b:84:b0:f5:6b:3c:32:e1:
1c:a1:c6:d3:5b:30:6d:a0:92:08:63:ba:3c:4a:eb:e3:52:6f:
c3:5f:d4:a9:d3:40:c1:d2:d3:c3:38:64:7b:59:f1:03:a2:04:
b2:65:f5:cd:ee:5d:ff:c0:6b:9a:95:be:44:e0:ff:e9:61:95:
f0:b0:51:82:2a:c6:d2:47:ff:84:e7:20:88:e5:e5:b1:4a:75:
c9:17:39:28:70:2d:0e:6f:cb:45:fb:d2:18:58:e4:11:1a:64:
01:9d:67:21:e9:a3:f6:be:d2:49:c5:ab:04:23:75:12:06:5a:
1a:82:71:c0:9e:83:31:ae:98:67:e5:89:a7:96:db:ef:47:08:
eb:7c:10:68:66:ac:0e:73:f8:ae:b3:41:3d:e9:af:98:ce:63:
f8:ad:c8:6d:f2:7c:65:e7:a3:f3:7a:e1:ac:42:03:34:d8:cd:
52:32:29:a9:42:1d:2b:b7:8d:5c:d1:3e:4b:11:29:ab:5b:f0:
07:1b:3e:b6:73:05:0e:ba:04:a6:bb:5d:fc:59:e4:9f:7e:30:
32:a7:fa:bc:e9:9d:35:a3:25:34:e7:0f:8b:97:ab:46:04:b1:
ca:43:ae:e3:70:6f:e5:a5:18:ba:14:d4:61:70:38:3a:4a:c0:
3b:be:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:05 2026 by rpki-client