Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: 2dJCUOHWmhBmiADj6Z6YwNgGD+Wi+GQ47Qpsgl5ZoNI=
Subject key identifier: B4:B7:76:01:38:3A:54:3D:CF:48:EE:40:D7:D4:2E:BE:A7:24:E5:30
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 019F913571630E2C5B206DC1640BF82EA9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 23:00:26 +0000
Manifest this update: Thu 23 Jul 2026 23:00:26 +0000
Manifest next update: Fri 24 Jul 2026 23:00:26 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: 7jq0y3E/TrCZyOv1SrA+knwmW3DQeiHVBL6LR0ehZOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:71:63:0e:2c:5b:20:6d:c1:64:0b:f8:2e:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Jul 23 23:00:26 2026 GMT
Not After : Jul 24 23:00:26 2026 GMT
Subject: CN=b4b77601383a543dcf48ee40d7d42ebea724e530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:4b:fe:65:a6:bd:0c:ae:9b:95:53:dc:ac:
54:19:8d:dd:45:20:ee:07:02:f5:05:8c:dc:3c:2f:
83:87:bd:62:cc:eb:82:e0:d2:f3:d4:eb:dc:19:1f:
e8:59:e5:ae:1d:13:67:a9:2b:24:40:98:f2:76:45:
c0:14:90:d4:34:ca:a6:fe:d9:dd:b8:0a:9e:01:ec:
a8:0d:3f:d7:c3:d7:73:e8:0e:66:a9:20:d2:4b:07:
4a:1a:c7:c5:16:c0:11:f3:06:32:25:59:c8:e2:97:
09:f7:65:14:b4:b1:c7:ee:70:0f:1d:ec:4c:e6:f0:
65:05:1b:d5:49:4e:d0:38:de:52:57:6c:cb:bd:e0:
a9:aa:9b:86:65:5f:48:7f:e5:23:e5:14:70:0e:53:
6a:53:5f:a0:92:3f:fe:a0:b1:ec:fd:ef:af:ab:9e:
a8:f2:8d:fc:3d:aa:1a:ac:fd:81:50:9f:ac:e0:92:
f6:43:ab:7c:2a:a4:f6:dd:21:a3:29:8b:c2:ad:07:
ff:f6:6a:6f:7f:15:a6:3b:18:3c:60:fb:64:de:98:
14:4f:15:f4:cb:f0:b7:76:1e:98:87:dd:8a:bd:00:
9e:9a:f2:80:3c:46:0f:cf:fc:ea:b2:74:47:44:2d:
05:37:65:c6:78:1b:39:c7:67:9e:fa:02:86:08:ad:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:76:01:38:3A:54:3D:CF:48:EE:40:D7:D4:2E:BE:A7:24:E5:30
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:61:bc:20:ef:42:fa:de:d3:08:15:00:5e:9d:ea:63:6c:a9:
3c:4d:b0:73:1b:52:ee:fc:34:eb:d0:b0:4d:1d:c4:3c:78:db:
6f:c7:a8:fd:75:54:90:f1:6c:00:73:25:d5:e3:52:de:fb:26:
2f:ff:94:33:45:ff:5e:04:89:f7:fc:38:aa:55:b0:e5:35:46:
63:0f:05:0d:88:a0:43:87:94:19:07:49:cd:cb:ff:d5:2c:50:
79:14:d9:5f:02:a0:84:1e:9c:47:9e:5d:54:3d:1b:fc:2f:d6:
14:74:d1:d5:69:a9:05:78:fa:9d:67:15:17:17:fa:b6:49:7e:
c1:bf:7b:0e:10:e8:60:28:cd:20:10:c8:0b:f7:08:dd:84:2b:
94:0f:38:2f:5c:0f:a5:b6:8a:ba:4c:9f:1a:6c:71:01:26:4e:
36:3b:52:2c:7f:c8:58:77:ad:d3:3c:bf:ed:91:fd:d5:cc:d2:
c8:ee:76:3a:39:d8:e8:d8:18:11:97:95:73:41:48:c2:fe:25:
b5:4d:de:e9:eb:df:13:27:4f:5b:98:8e:26:67:56:4d:a8:d3:
51:7c:69:fb:4d:6d:af:55:cd:64:69:e3:38:84:ab:7c:c1:f9:
65:30:62:2b:c2:a4:31:d3:cc:44:6a:56:0b:83:8f:7a:fb:21:
d1:ff:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:56 2026 by rpki-client