
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: rUH3lW8NKHG73nEBW8cV9J+HTdvlhTeHZZhI4IHFi9c=
Subject key identifier: DC:5C:C3:A0:71:4E:8D:13:00:35:FB:BA:C8:62:86:E9:84:4E:12:8E
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 019F8F7F087E63C5C606D7F6AFA9190433C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0E14
Signing time: Thu 23 Jul 2026 15:01:34 +0000
Manifest this update: Thu 23 Jul 2026 15:01:34 +0000
Manifest next update: Fri 24 Jul 2026 15:01:34 +0000
Files and hashes: 1: MXpmWhbVyPq4rmweRCFwVrTv_-A.roa (hash: 7v8WygVCKT2B/KZ8B8RmDLY2b/Xhyo57To56E6VXxLc=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: /2yNS9CC0pTimZlKw2nV2UD54dbua55EqfpfIxK1+64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:08:7e:63:c5:c6:06:d7:f6:af:a9:19:04:33:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jul 23 15:01:34 2026 GMT
Not After : Jul 24 15:01:34 2026 GMT
Subject: CN=dc5cc3a0714e8d130035fbbac86286e9844e128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:1f:2a:45:06:36:c9:48:91:59:12:4f:13:
d6:e7:7e:89:a6:16:21:dc:5c:16:41:55:b9:37:66:
2b:e3:73:4d:dc:e5:73:08:da:c9:5c:83:08:20:c8:
9d:ee:00:00:56:98:bc:f6:ca:a8:58:18:7a:49:cb:
da:62:e8:45:ed:9b:ea:51:b6:0e:8b:b4:56:0f:16:
1d:c1:77:75:e7:43:f5:a9:55:c7:b6:bd:5b:eb:d0:
37:d1:88:63:a5:b6:2c:9d:93:19:16:3e:cb:bd:b3:
08:50:12:73:24:f3:41:a7:bf:fd:e1:5a:3a:58:b7:
b9:34:49:ce:b0:e0:4b:8c:de:62:3a:85:aa:0e:42:
a4:ec:3e:13:97:f4:57:8e:a2:67:d4:f1:22:94:f1:
9c:8d:bf:80:83:7d:cd:a1:3e:e4:2d:59:1e:ba:0b:
15:f5:8a:b8:67:b0:50:ed:62:b2:b3:f5:32:8f:f6:
68:b2:49:4a:46:65:16:64:ec:bd:d3:39:ce:1e:fd:
be:cc:f6:9b:1b:1e:75:af:79:98:93:b6:0f:2f:19:
7c:e9:ac:68:12:fa:c2:9e:36:5b:17:38:09:ce:ec:
2e:53:86:8d:cb:be:c8:f1:40:50:1c:fa:1d:69:f3:
bd:d6:0d:14:8e:8b:65:c2:bf:7c:f0:5a:a8:bf:04:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:C3:A0:71:4E:8D:13:00:35:FB:BA:C8:62:86:E9:84:4E:12:8E
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0c:07:10:ff:7b:90:4d:01:a1:80:25:8c:59:a6:1a:73:48:
b6:63:61:f2:7a:2c:dc:18:64:7e:56:67:9b:03:db:ce:34:37:
43:05:e1:c3:bb:f8:67:df:3e:bd:36:2b:3e:a1:18:00:c8:7d:
c6:16:8c:be:58:5e:9e:de:28:cd:a2:d3:30:64:2a:1b:70:18:
5a:86:a9:3b:00:ac:c3:b9:ce:81:cd:0b:2c:11:f1:78:46:fa:
c0:28:0c:f3:18:00:b7:43:aa:5e:61:0b:6e:5e:df:f1:40:90:
32:43:bb:c4:7b:e6:b1:80:71:35:37:bc:e0:0f:d3:d4:66:df:
d6:02:02:ef:e9:e1:1e:96:c5:0b:a6:5a:c3:51:22:9d:96:cc:
cc:d7:e7:b9:7e:22:a9:3f:23:ac:7a:65:5d:5c:d5:3f:5b:07:
7e:3a:6a:c8:e3:5e:03:22:d2:38:71:3f:2e:23:f3:4b:28:d3:
06:3e:9b:df:22:ae:a9:fe:e0:cc:76:3d:b6:a4:07:a4:71:2a:
87:6b:37:cc:2c:24:2d:cb:9a:a5:b9:b5:97:b6:74:63:39:19:
d7:88:1c:c3:82:4b:6a:1b:dc:bf:6a:9b:22:fd:47:c0:95:68:
1a:bb:3d:cd:25:f9:98:f6:13:d2:79:72:4a:b1:2e:39:3f:78:
49:82:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:08 2026 by rpki-client