Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: AttcRL9njpGtD++Uj96Og4IQM4+AJOCGFF2nBuxFzLA=
Subject key identifier: 1D:12:F2:47:CE:81:8F:E4:55:A6:69:77:86:34:10:8B:71:93:B3:62
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019F9248AD1AA6BEF2678C799F6256FB59FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 19DB
Signing time: Fri 24 Jul 2026 04:01:04 +0000
Manifest this update: Fri 24 Jul 2026 04:01:04 +0000
Manifest next update: Sat 25 Jul 2026 04:01:04 +0000
Files and hashes: 1: b8J8cLT6b0T-B8fcEbW1GzzqnT8.roa (hash: daIMw1YQHYuGbVnCwHmeVVuuxGmFwXQcpFT4nghMIks=)
2: dfSHgrd5C6hUKxMq0PSCmRKJm9I.roa (hash: W8W0n8nFNFor8/swBReYXbRZIyqMzRCTk+zhUXiNuJc=)
3: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: u3+rvC4SRwDjFh9OuZDwQ5IMQc4MlI07GoMaOSBvtY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ad:1a:a6:be:f2:67:8c:79:9f:62:56:fb:59:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jul 24 04:01:04 2026 GMT
Not After : Jul 25 04:01:04 2026 GMT
Subject: CN=1d12f247ce818fe455a669778634108b7193b362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:28:eb:a6:1c:f6:c1:9d:d0:1a:a9:13:57:
ab:47:94:53:f7:23:f6:57:49:6c:2b:4b:35:3e:14:
c7:16:5b:3d:ee:1c:65:6b:08:c9:4b:e9:54:9d:7e:
98:7a:31:d5:47:e6:30:06:fb:c9:12:b7:81:ea:ee:
d3:11:6a:58:5c:9c:ab:cd:bc:48:99:82:fe:44:a7:
d2:34:77:e2:65:9b:10:7d:93:81:fa:d1:b3:c6:1f:
01:33:08:aa:2d:ac:c4:3c:cb:dd:88:4e:32:82:57:
30:50:38:30:42:f5:64:50:07:80:9a:6f:4c:f3:7e:
87:1c:f7:33:c5:20:91:47:9f:81:99:7d:ed:a9:60:
a3:0c:3e:0b:2a:5b:73:90:65:52:f3:cc:1f:53:15:
6a:99:ef:95:a0:13:c4:7f:a8:11:83:d5:09:fb:ee:
8b:dd:a4:a2:aa:48:07:4c:63:ee:70:a7:39:81:c2:
58:3a:8b:26:e6:12:d7:3e:72:49:58:51:bb:98:ea:
e4:a6:6f:05:5e:93:a5:45:0b:07:e0:3f:8d:f5:80:
17:a9:17:e3:5d:ad:ea:8d:e6:5b:dd:1c:af:f5:b2:
aa:e7:63:d7:be:31:51:11:e0:47:82:da:14:fd:3c:
ff:62:53:65:9f:52:a7:90:1d:95:40:e9:c1:41:0d:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:F2:47:CE:81:8F:E4:55:A6:69:77:86:34:10:8B:71:93:B3:62
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:72:41:a9:2f:b7:bf:a7:d3:32:3d:f9:56:6d:e6:de:56:
a1:fb:a8:53:2e:08:da:76:54:db:d6:7d:70:68:87:b6:83:4e:
5e:6b:cf:c7:db:49:35:00:b1:82:e0:24:c3:ac:a7:48:cc:d3:
b7:0c:99:21:36:62:65:c6:7a:0a:39:17:22:40:42:3d:9c:d0:
b2:e1:15:f4:e3:86:06:5c:52:7a:ec:15:43:90:fa:08:e3:cc:
31:6a:1c:ea:0f:c3:fc:3a:12:70:ca:f6:d4:34:4f:52:70:a6:
20:04:05:0e:16:cd:d6:5c:f8:ea:3e:06:c2:e8:09:04:1f:75:
a8:31:84:87:fd:89:49:a7:cb:90:68:86:e1:38:a3:ad:82:d0:
c5:ab:aa:2d:5b:ac:3b:95:a8:8c:df:6e:6f:31:fa:04:38:df:
7e:8c:a7:74:be:63:2f:88:53:fd:26:8b:cd:7a:25:f2:5c:ea:
6c:cd:fe:46:20:66:a9:5e:d2:5f:64:c9:05:b2:96:f6:93:67:
85:7e:a0:80:e4:b3:4c:5f:be:49:53:61:cf:d0:2c:55:95:5c:
4b:ca:e3:2f:0c:22:f9:84:8a:14:d4:14:66:f2:3b:38:4a:68:
d6:da:dc:1d:22:84:41:39:e2:a4:00:dd:8e:a4:71:02:d8:08:
08:63:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:21 2026 by rpki-client