Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: OZRJX6yZyihe57buvnKJRAlsdmzsh0OQI3iePv7oGC8=
Subject key identifier: C7:5C:4F:94:5F:79:6E:96:82:88:72:52:F9:A6:77:D3:B8:EC:25:52
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 019F94A483D9C278E80F8EDEE3C96BDBD45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 195C
Signing time: Fri 24 Jul 2026 15:00:37 +0000
Manifest this update: Fri 24 Jul 2026 15:00:37 +0000
Manifest next update: Sat 25 Jul 2026 15:00:37 +0000
Files and hashes: 1: 1-yB-aN02FvvexRrc-rBff7cVXYQ.roa (hash: hfqxjUEwIBgbMLOiBaRuABJ5snVrD/mvftwY9OHnyNU=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: Ms9We1ez1y0PDEbQorB2g66XqyhkBC2jJ8tLodKo6Rw=)
3: uz3G_zDw5uNl_xC9huZfw-K_ce4.roa (hash: lgXmUNKY9C0bvQMUFuOJnJImq7SU/P/bySj8SdoyC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:83:d9:c2:78:e8:0f:8e:de:e3:c9:6b:db:d4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jul 24 15:00:37 2026 GMT
Not After : Jul 25 15:00:37 2026 GMT
Subject: CN=c75c4f945f796e9682887252f9a677d3b8ec2552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:e4:9b:7f:e6:db:8d:98:a1:83:69:d9:03:
93:af:18:4d:c9:f3:0f:25:dd:b0:db:e7:9c:d8:c5:
3f:3f:54:4c:d6:5b:bd:89:db:8b:e8:f5:86:5d:4d:
dd:e3:be:20:e0:f7:db:54:e6:59:10:9e:14:02:b6:
1f:eb:89:c7:c1:8e:fe:78:85:93:57:0a:6a:c7:7d:
1d:d4:b9:60:8b:a4:a6:51:06:e9:61:42:a3:38:2f:
07:4e:19:fd:bd:47:17:3a:3d:7a:c5:a0:24:23:b5:
10:4f:ac:3e:50:f7:8e:7c:f7:8c:5d:9c:36:29:31:
65:f0:e6:4a:1e:3c:c7:cd:34:fa:d4:4a:82:31:01:
55:95:2e:af:17:7d:0d:b4:be:85:6f:c6:22:32:c9:
98:5f:c7:18:4e:53:e3:e8:85:c6:53:ea:3f:36:a8:
30:1f:8c:95:d1:08:eb:2d:30:4a:75:2b:31:9f:d6:
ef:81:1e:01:b6:4b:4b:a6:cb:e5:0c:0e:93:5a:23:
41:b9:6a:df:fe:87:23:ec:ad:dc:2c:c8:33:52:f5:
58:97:ac:e4:08:77:8c:59:f4:1c:2d:30:9d:b0:bc:
72:1d:03:bb:53:65:bd:c4:70:24:0f:7e:be:9a:5a:
5b:5a:d1:dd:e9:f4:ca:d9:d3:c8:da:88:48:44:c1:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5C:4F:94:5F:79:6E:96:82:88:72:52:F9:A6:77:D3:B8:EC:25:52
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9b:69:ab:95:6d:4e:7a:a5:af:63:5d:4f:01:91:f4:92:b8:
34:0a:28:8c:fc:5c:5f:34:17:dd:8c:1d:dd:e8:85:48:49:ab:
18:dd:09:14:dd:72:b1:53:dc:08:d9:88:81:f4:a5:5f:ed:2b:
c4:42:03:a2:08:3a:0c:c3:b2:18:5d:2a:8c:e9:32:29:06:8e:
e8:fe:9e:4d:10:a4:d8:9b:ce:ba:09:3a:a0:6f:e6:e7:3a:0a:
0f:c5:87:df:6f:42:bc:23:41:8b:89:37:b6:7f:21:63:78:f1:
f2:30:bf:80:51:48:1b:31:81:96:7e:88:1e:8f:5b:77:4f:6e:
85:b7:c1:ca:fb:30:0d:8a:74:a8:7e:ca:22:84:17:dc:e8:89:
92:b6:71:2e:a5:c9:3b:34:06:24:12:67:a9:ef:17:ae:d2:3c:
5e:93:79:eb:28:ca:c9:f5:95:d1:df:52:8f:8f:8d:44:b9:15:
8d:09:09:b2:6a:1d:92:4e:74:0a:4b:3e:97:d7:4c:98:d1:43:
c5:32:0b:a7:dd:b5:35:5f:f0:6a:83:3e:bd:df:98:e1:3c:af:
02:d7:1e:b7:32:74:f5:22:58:ba:b6:bc:02:51:df:a3:5c:f0:
79:b3:13:b9:8c:2c:f6:1b:e2:d6:d8:0f:60:f4:8f:4e:bf:02:
37:27:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:56 2026 by rpki-client