Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: of670sbmFbmmNZgiagpqoFj+V296PnBlIqARZF050ks=
Subject key identifier: 76:E0:C1:25:26:C2:57:90:61:42:BF:1C:68:6C:37:64:79:FD:3B:BC
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 019F921112C3F2A558A1275176B3FFE46E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:20 +0000
Manifest this update: Fri 24 Jul 2026 03:00:20 +0000
Manifest next update: Sat 25 Jul 2026 03:00:20 +0000
Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: wyFJfUaWHiF14Rz6aaMGBbHhZNI2BeQKYViW9NmgE2o=)
3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:12:c3:f2:a5:58:a1:27:51:76:b3:ff:e4:6e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jul 24 03:00:20 2026 GMT
Not After : Jul 25 03:00:20 2026 GMT
Subject: CN=76e0c12526c257906142bf1c686c376479fd3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:3b:f0:56:a3:8c:79:d1:e6:f6:2d:37:13:
9c:2a:60:a1:cb:eb:93:47:fa:4a:a6:a6:4e:ea:74:
3a:ca:98:df:f1:b7:81:19:6e:0e:98:ed:f3:8c:e0:
34:ba:97:78:ad:47:cd:6a:04:2f:d2:bc:8e:17:32:
48:5c:65:f0:99:52:de:ac:6c:29:06:d7:44:ea:d6:
b9:fe:af:d3:0b:e8:63:c1:71:bf:f9:09:aa:96:f4:
4b:1e:5a:30:d9:44:ce:e1:67:ef:8e:23:3d:e8:45:
d6:69:1f:72:e6:78:20:bd:a6:60:20:14:ec:e9:9e:
fa:ea:98:05:e0:be:ce:bd:9c:35:cb:1c:51:7b:63:
f3:07:82:42:1c:2c:81:d6:1e:3f:2f:c9:b4:a4:79:
25:18:8b:24:41:5a:54:32:40:1f:57:32:ce:48:7a:
b4:e1:9d:4d:e3:ce:91:75:a6:7f:74:54:4c:75:6b:
fa:28:85:7b:da:e5:fd:73:66:2b:e3:21:32:2f:47:
bf:b6:39:6f:fb:ce:9f:be:92:4a:69:14:49:58:52:
12:a3:cb:6b:ce:8a:01:2b:55:b6:36:b8:d0:56:aa:
b9:8c:bb:e9:51:cb:18:da:cd:d9:7b:13:bc:cc:29:
08:a6:3d:ef:4f:9f:5b:10:b9:0f:62:9c:f4:12:64:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:C1:25:26:C2:57:90:61:42:BF:1C:68:6C:37:64:79:FD:3B:BC
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:29:8f:ad:d1:06:a0:2b:32:a8:7d:5c:a1:46:89:b5:92:bf:
9c:e8:9e:a8:c1:fe:5b:35:de:38:65:b6:e5:7a:a4:0f:9d:a8:
dc:6c:7c:17:f0:07:73:cb:61:22:3c:3a:b0:71:10:df:9c:7c:
77:d2:0f:39:93:17:06:db:f5:9b:c8:2f:81:19:14:25:c1:4c:
67:a9:2b:f4:3c:14:00:10:32:15:39:05:e2:a9:35:b0:13:68:
ae:d4:bb:82:bd:e6:f3:bf:2b:5b:f1:23:6d:2b:a7:4b:4a:db:
01:01:5d:ec:7a:59:8a:ae:ef:fc:ce:d9:c4:c0:7b:1b:af:d2:
12:ef:6d:4d:97:fd:4b:a2:14:96:fd:1e:4c:5d:ff:bb:c8:9e:
4b:9d:fa:e3:27:7b:43:7e:0d:74:9a:bb:4b:5a:4d:59:3f:0f:
d5:dd:8e:cf:92:40:a3:57:ef:ef:9e:93:48:5f:da:cd:92:6c:
8f:e3:3d:d8:09:31:d5:59:4d:9e:ca:67:2d:92:66:d1:19:fa:
01:eb:82:2f:93:43:f0:85:3f:4e:2e:18:f3:a3:6d:80:cf:a2:
52:fb:42:8c:d7:93:b2:a8:c5:e8:35:e5:ec:60:d1:20:4b:71:
12:a4:e0:53:20:dd:d3:5a:15:8a:80:11:16:aa:e4:fe:0b:a2:
68:69:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:11 2026 by rpki-client