Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
File: tjrC5OTds-VAdW8XqpcNSoowqFw.mft (raw, json)
Hash identifier: TrqIqQLyWxcbA3XrWMjlcWhT5SOs0t3dHVv4grRKqCU=
Subject key identifier: 34:A8:BC:4C:79:F4:C2:EF:B7:15:30:88:1D:8F:14:AC:AC:7E:06:18
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 019F8FB5775A7BA91B72CCCFF5639992AAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
Manifest number: D2
Signing time: Thu 23 Jul 2026 16:01:02 +0000
Manifest this update: Thu 23 Jul 2026 16:01:02 +0000
Manifest next update: Fri 24 Jul 2026 16:01:02 +0000
Files and hashes: 1: FBZejzYZFR1PVgaLEKt13DxznCM.roa (hash: Qhv64sjMH4vJdplzt1e3yY22cI/kNgFsPwjRLCZJujw=)
2: pIrh8t_NNRD8MCPix_SqJSVgY7E.roa (hash: eE3cynxx6yPYag5fkQ+E+tY5KNgvElDMK0Zwn7c5OSI=)
3: tjrC5OTds-VAdW8XqpcNSoowqFw.crl (hash: lYKo+5k8f5m0dtYueU3Wtj2b2WlE3lIQqMGMHl1mUPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:77:5a:7b:a9:1b:72:cc:cf:f5:63:99:92:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Jul 23 16:01:02 2026 GMT
Not After : Jul 24 16:01:02 2026 GMT
Subject: CN=34a8bc4c79f4c2efb71530881d8f14acac7e0618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:b8:d9:77:b3:83:4f:c7:16:6c:9f:e3:c1:
a4:fc:94:c9:ae:1e:7a:7c:94:f6:4c:f2:05:35:08:
7d:2c:8d:da:84:ae:87:e5:41:61:66:5c:99:b0:63:
3e:41:dc:cf:01:f5:ce:d7:84:8a:95:e7:f2:3c:3b:
56:07:6a:68:57:74:0f:5a:a6:db:9f:9b:3f:00:76:
39:bc:5e:b9:5e:4e:ed:a8:2a:16:b7:21:b4:5f:8c:
f6:aa:43:f2:15:42:d0:dc:6a:35:d0:61:a5:42:e8:
91:2b:93:40:5b:44:f5:66:1e:59:29:3b:2f:41:94:
d5:89:25:96:69:e9:f2:39:d1:a5:74:38:52:77:f6:
0a:65:a9:cd:46:e9:7e:28:44:c0:9f:d9:fe:5d:5b:
1d:20:cd:5f:dd:85:ac:01:3a:10:9f:bf:65:f8:3d:
a1:41:a2:7d:0f:f7:19:67:01:75:e1:16:30:2d:b3:
9c:98:0c:d4:15:e6:fa:1b:be:74:21:5b:0a:11:4f:
c2:c5:7b:a0:5a:a4:3f:53:e2:24:12:78:05:5a:6a:
9a:5e:7d:03:a6:b9:eb:24:e6:99:bd:11:60:23:3f:
44:42:03:e0:b8:b4:e3:85:a2:25:d3:0c:88:1e:bb:
a4:79:3d:60:ba:1b:1a:59:19:0e:cb:47:3b:c3:8c:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A8:BC:4C:79:F4:C2:EF:B7:15:30:88:1D:8F:14:AC:AC:7E:06:18
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:8e:54:65:1a:9d:47:4a:cc:b5:17:d7:f7:64:be:ba:4c:
82:9a:b3:cd:d7:70:a6:14:13:2c:76:52:3e:24:36:53:a0:22:
a2:de:91:94:fe:99:18:59:47:d4:c9:4f:33:5d:ed:c0:bd:37:
6a:d3:8d:92:77:d0:ce:db:c8:35:e3:6d:a3:8c:dd:cc:96:0b:
47:7f:47:19:a3:43:bd:58:55:3b:7b:36:16:79:25:a0:12:97:
cb:19:07:28:d2:08:7a:08:86:ac:c5:56:d3:84:4e:b8:ee:f6:
79:c3:c8:e0:d0:d8:5e:78:84:36:a0:e2:82:2c:0b:cf:d4:c8:
75:ee:48:05:48:e1:30:fd:b3:b1:f8:bc:a8:2b:f8:0e:6c:65:
92:58:07:00:21:87:e0:8d:92:7c:a0:8b:96:e7:e2:bf:b2:fb:
95:53:25:5f:6d:cf:cd:1e:f0:8f:fb:75:6f:6c:b4:36:2f:3a:
1e:20:3e:a0:4d:fa:2a:a5:14:94:26:63:bf:37:ce:ea:c2:80:
29:51:c2:48:e9:0d:3e:b1:30:02:58:9f:1d:82:bc:9f:16:3f:
9a:28:41:ab:52:89:b8:3e:ac:d9:ea:97:e8:8f:19:8f:5a:a2:
80:3e:ad:82:0d:d0:61:cd:d5:45:2d:e4:ab:d2:ed:b8:6e:20:
7c:2d:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:34 2026 by rpki-client