Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
File: tGZGB9tMTT48FWLyjSDPuSMkGBA.mft (raw, json)
Hash identifier: +cU2GL9rO32ck5mB80j7gAqaPkzz2xlNwt9Cmc8hOGg=
Subject key identifier: 1F:1F:9D:08:9F:9D:6D:AB:89:72:00:33:DE:88:8F:EE:06:D2:1E:A1
Authority key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Certificate issuer: /CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Certificate serial: 019F95EE45DF7298ED3F1B078BEFA7A17E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
Manifest number: 69
Signing time: Fri 24 Jul 2026 21:00:48 +0000
Manifest this update: Fri 24 Jul 2026 21:00:48 +0000
Manifest next update: Sat 25 Jul 2026 21:00:48 +0000
Files and hashes: 1: tGZGB9tMTT48FWLyjSDPuSMkGBA.crl (hash: DlPWtCIMql1ml3EdBbv2hVTEdleVRQmWmLYJdLTAxnI=)
2: ziWW6n1B_UZcXiD6pfKzphrsK3A.roa (hash: hLVr8gy4usgiH3/VrSF1XURRYPhpaPisnOC7F4Eq2L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:45:df:72:98:ed:3f:1b:07:8b:ef:a7:a1:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Validity
Not Before: Jul 24 21:00:48 2026 GMT
Not After : Jul 25 21:00:48 2026 GMT
Subject: CN=1f1f9d089f9d6dab89720033de888fee06d21ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:a8:4a:00:c4:38:4e:8b:4e:13:15:94:75:
ba:a9:c4:0f:0e:2f:c5:d5:0d:c4:c3:76:e3:c3:49:
5b:e0:66:bc:83:ad:66:cc:ca:63:f3:50:97:1e:73:
52:db:a2:6b:3f:12:3f:ed:74:ad:5e:b2:0f:88:6e:
6f:d9:e4:9f:0a:3a:0b:2f:c2:47:78:3f:cf:5e:f6:
2c:cf:15:e0:76:0c:58:a6:38:b3:98:87:87:2c:97:
e8:c7:71:53:02:80:0a:b1:03:29:55:b0:1c:96:13:
12:4d:f1:8b:2b:ae:92:a7:56:0f:8a:f9:63:0e:e4:
80:45:3e:78:4a:e5:89:38:8a:97:5c:e4:8c:68:75:
cf:a5:f8:19:0e:9b:16:c4:f4:77:57:5b:89:4a:c6:
7b:2c:2f:8e:e1:86:4c:1d:8e:5d:d4:67:a5:c7:c1:
7c:a9:26:d4:55:14:2a:1a:b7:9c:7a:2c:b7:b5:37:
07:e0:58:c8:e7:52:bd:01:d1:b3:aa:a7:d1:b8:26:
a5:b2:1f:b0:ef:61:e6:a4:b9:a5:48:34:6a:e0:85:
6d:66:db:d7:b2:14:3a:70:f9:cf:9e:4d:ae:e0:e9:
83:7b:71:11:d5:53:fe:c8:0e:15:d6:d5:85:fb:96:
83:0f:2d:bf:2d:58:b5:f8:36:f9:03:f0:59:88:70:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:9D:08:9F:9D:6D:AB:89:72:00:33:DE:88:8F:EE:06:D2:1E:A1
X509v3 Authority Key Identifier:
keyid:B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3f:31:63:b3:6b:99:68:70:52:24:dd:28:86:ca:cc:8e:3c:
ec:01:6f:6f:49:e0:d2:47:6d:bd:3b:50:80:b2:07:ed:18:54:
74:28:e6:fa:f9:08:c7:52:c5:5d:9c:e4:ae:69:5a:b0:29:8c:
67:7f:f8:46:3b:85:ea:0e:d1:b9:d1:de:c2:76:d9:30:71:52:
d3:52:61:78:3e:61:d8:76:c8:6c:df:23:65:8d:e9:34:49:09:
c2:7f:5e:ab:2b:ab:34:1d:a7:13:3a:33:b5:57:a6:4d:6f:56:
d4:ba:41:40:cb:6d:93:8f:78:98:30:24:a8:56:a1:8d:16:88:
6b:95:1e:65:c0:5e:51:7d:6c:2f:1c:25:d2:47:9b:a9:02:04:
15:05:d1:59:c6:88:fd:8a:f7:d6:df:f1:2b:a5:9d:91:9f:fc:
e8:15:e1:97:f4:66:8e:0b:0b:14:e8:a4:29:f9:73:13:81:ba:
04:81:60:e9:12:5f:32:c9:f3:21:7c:03:8c:a5:24:d4:30:75:
77:ca:d1:e6:18:3a:5b:96:3a:10:31:aa:c4:1d:de:52:5d:df:
81:1c:d2:9d:03:af:e2:02:7d:ad:23:90:df:23:1e:d5:26:0f:
47:79:ee:9e:dc:41:dc:e9:4b:5d:42:01:7c:d6:ac:49:8c:70:
5c:20:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:22 2026 by rpki-client