Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: pobl4b6QhqeMdNdARhnASKBAXgs6vx3HojAgeXUjmBs=
Subject key identifier: 9D:48:B8:91:C5:36:46:67:F9:20:9D:3B:C0:05:BA:51:88:59:F1:3D
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019F8FB5E44DA02CDAB5086AF4028DDA8E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 16:01:30 +0000
Manifest this update: Thu 23 Jul 2026 16:01:30 +0000
Manifest next update: Fri 24 Jul 2026 16:01:30 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: DYcr1GE0hRwP6MVwTSQN0tMy2N0WDgy3IvircyAbdmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:e4:4d:a0:2c:da:b5:08:6a:f4:02:8d:da:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Jul 23 16:01:30 2026 GMT
Not After : Jul 24 16:01:30 2026 GMT
Subject: CN=9d48b891c5364667f9209d3bc005ba518859f13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:31:95:bf:89:9b:d2:64:66:a2:b8:cd:94:
7b:86:d3:5a:9a:80:85:0f:7e:b7:1a:72:60:ba:67:
26:61:94:66:6b:2a:4a:fb:44:86:7b:49:54:65:6c:
24:b8:35:cc:74:b0:de:d1:5e:4e:35:c8:5d:59:09:
4d:05:4f:21:bf:b6:36:ee:f2:8a:b7:32:f4:72:ed:
19:a4:49:65:65:2b:17:23:44:da:b2:3a:a5:fd:ce:
1b:00:11:28:d6:14:a2:f4:f9:de:d3:97:9d:0c:cf:
00:fb:e9:64:ff:32:8f:af:65:7b:db:f4:f9:e4:fa:
55:c9:d7:4a:39:16:62:6a:ab:e9:01:7d:ec:8a:c3:
14:0e:8a:f0:48:f1:f3:19:dc:39:2f:5e:b1:1b:2b:
d1:da:bd:52:08:49:25:f9:fb:7d:12:7d:17:48:7b:
7f:80:df:ca:93:27:00:da:56:17:2c:e6:61:05:3c:
a6:8a:3e:89:bb:34:26:da:33:22:dc:8b:77:8a:3f:
ff:96:74:b7:7f:0e:a0:d2:19:6e:df:fe:b8:ca:5b:
00:89:32:f9:18:cd:80:5b:a3:d5:33:85:ca:0a:b0:
b2:82:8c:f1:8d:7f:8c:43:6c:48:7a:c9:66:a8:68:
82:21:a6:b5:7a:87:01:0c:20:4e:b9:41:a5:d4:2d:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:B8:91:C5:36:46:67:F9:20:9D:3B:C0:05:BA:51:88:59:F1:3D
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:f7:fb:23:76:4a:b7:e2:a2:ba:ae:f0:ea:2d:6f:79:34:
e0:0a:c9:38:cc:7e:48:07:98:3a:92:5a:19:d5:8c:23:3a:5f:
ad:49:b8:67:59:71:3d:a2:20:5c:d7:ab:9a:21:b2:b8:cd:9a:
21:9e:8a:7b:ac:d5:da:3c:6b:c0:72:40:5f:81:60:b5:dc:2e:
b5:17:b9:ba:66:00:c1:8d:45:84:cc:fd:92:99:cf:7f:8f:37:
35:5d:99:9b:b2:98:61:66:07:89:b3:b1:54:24:e6:ed:3e:64:
9e:e3:b2:00:ac:73:5b:9e:9b:20:1b:92:57:91:db:c2:db:3d:
e8:c8:5b:b7:2f:3a:08:00:72:02:91:e9:11:1c:5e:05:92:e8:
f4:c0:6a:16:1b:52:f1:ff:b4:88:21:8f:a0:49:35:c0:dc:1f:
dd:1a:4a:83:54:04:4b:03:d9:cc:2a:26:79:27:d5:3f:4b:59:
a5:24:2a:e4:18:6f:cd:bd:ef:39:fd:bb:e9:a1:d5:c4:6b:aa:
3c:cd:2e:3e:1f:49:86:06:8d:1a:8b:02:ee:96:83:2a:e9:d2:
33:20:8f:f2:c2:c4:0d:1e:8b:c5:b4:7e:eb:77:ea:b5:ef:40:
55:7b:0e:d9:c2:c4:e2:5c:ea:a0:ba:7c:8e:9b:f3:4f:c4:fe:
1c:34:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:17 2026 by rpki-client