Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: w6eUA38KbIUz5Mufp1Xc7sUacuK/YgxrvQyMKod/OYU=
Subject key identifier: 50:79:F7:92:F8:67:14:C3:14:D8:08:45:38:C0:2B:80:90:49:9B:89
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019F8E34727C9F0BFC255C1A446BB9932427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 09:00:29 +0000
Manifest this update: Thu 23 Jul 2026 09:00:29 +0000
Manifest next update: Fri 24 Jul 2026 09:00:29 +0000
Files and hashes: 1: UqqJVc2LmDSoG37tyF_Y4rZTJNo.roa (hash: 3t/K9ONoo6YmeusIuo36eGNhkP5aHMKXreL77QnBjxI=)
2: jZrCbTqva_be0rB3oAO4Wrl5ILU.asa (hash: BKm/bFSkAYx4jWBv2MfEwkAGa++5I1rT7LtmalyyzRA=)
3: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: w5YJfLAvxLpDxkD5tiBS8yfrEhQt8aTa6f5u06Upp40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:72:7c:9f:0b:fc:25:5c:1a:44:6b:b9:93:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jul 23 09:00:29 2026 GMT
Not After : Jul 24 09:00:29 2026 GMT
Subject: CN=5079f792f86714c314d8084538c02b8090499b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:7b:4f:6d:b3:74:7c:98:1f:20:b7:d9:65:
5c:f4:60:e8:05:79:5a:8f:64:d8:c3:7a:fb:1d:c3:
2c:3a:86:5b:0d:36:c7:3b:aa:c5:13:ec:ef:9d:16:
2c:5b:6b:59:b6:86:dc:36:14:de:7d:99:61:bf:be:
36:8b:32:cf:bf:b0:4b:5e:36:b4:24:88:30:33:89:
fa:cc:8f:ef:58:66:05:6f:91:74:27:3b:71:da:8c:
28:34:7b:68:b2:92:0d:ca:5e:b6:b5:b6:5b:37:60:
e0:3a:0b:bf:75:6e:af:2f:1b:46:8c:68:e8:a9:e5:
72:f5:a2:48:cb:4f:12:ff:54:f6:71:a8:85:91:ae:
50:4f:08:94:96:c0:1b:1c:d5:7e:4a:93:6c:cf:6e:
a6:ad:ad:94:5a:49:a3:11:ed:78:49:ef:77:14:87:
c0:a3:65:c2:2d:b2:b0:9e:05:55:77:54:94:64:95:
7d:fe:53:7c:2a:02:2b:69:b8:9e:df:4e:bf:09:6a:
42:53:04:a1:1f:63:93:a9:91:a9:88:7a:19:7e:23:
89:77:95:a3:9b:1c:4f:3f:5f:83:a9:78:38:fc:2e:
7c:fc:ed:40:25:f7:8d:12:8d:1f:f0:94:0b:57:f6:
c5:49:64:4d:1c:c8:35:0d:c0:28:2f:76:ff:27:85:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:F7:92:F8:67:14:C3:14:D8:08:45:38:C0:2B:80:90:49:9B:89
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:42:b6:3d:b5:92:d3:b5:bd:3c:89:b4:dd:e4:c4:87:28:23:
9c:42:33:37:39:8d:48:b8:b6:54:81:01:5e:99:89:2a:3d:7e:
df:2e:96:ec:0a:de:1d:1a:13:f1:a4:f4:69:a9:ff:3e:0e:8b:
b2:a6:db:73:aa:75:13:14:4d:b5:c8:c2:79:05:9a:db:17:e2:
ed:5e:e8:9a:89:c6:c4:49:e9:fb:ea:c7:92:b0:8c:f6:2a:d6:
33:1e:d6:05:fc:98:c6:80:21:ec:e1:0d:80:f3:98:1a:fa:f1:
3d:a1:0c:b5:e8:c7:47:4a:59:c8:68:ab:85:ea:94:3c:26:0b:
e3:28:b1:a5:6d:21:a0:32:dd:45:23:85:27:d0:ef:19:f2:d9:
3a:3c:2e:d1:90:09:7f:ee:31:22:88:1a:4f:68:bc:c1:8a:0b:
b5:f6:a5:42:74:a1:8c:5b:66:c2:79:26:2e:9e:28:d3:7c:99:
49:11:50:60:14:76:ab:a6:3f:51:9a:ff:43:49:ef:1c:d1:2b:
ef:c0:74:76:9b:55:a5:e6:d4:66:93:56:72:fe:dc:03:b1:8b:
79:9d:c3:8f:40:ae:43:ac:15:55:89:e0:5b:94:d4:24:0e:7d:
cb:0d:ab:36:e2:a1:c0:d9:e9:9e:e1:f4:90:6f:2a:6d:8b:8c:
2c:0e:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:25 2026 by rpki-client