Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: ozzIYK8Nit3uQ0SRDLMXL4s0GP9HeYr96Ku15eXq3Ig=
Subject key identifier: 88:F3:A7:07:51:9D:15:4B:2B:B3:B9:64:E0:FC:D1:4C:A0:D6:13:CC
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019F92EDE5519885E07BC55871C91C75CF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 181E
Signing time: Fri 24 Jul 2026 07:01:31 +0000
Manifest this update: Fri 24 Jul 2026 07:01:31 +0000
Manifest next update: Sat 25 Jul 2026 07:01:31 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: QVa2dYCsuBJOLBTiA9zgcm5Kny1MbZr3XeLRqe2MkX4=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e5:51:98:85:e0:7b:c5:58:71:c9:1c:75:cf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jul 24 07:01:31 2026 GMT
Not After : Jul 25 07:01:31 2026 GMT
Subject: CN=88f3a707519d154b2bb3b964e0fcd14ca0d613cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:79:42:84:17:00:9f:85:cf:74:67:68:b9:ba:
9f:4c:27:fd:e4:ab:9e:96:99:b9:66:d9:1c:ec:73:
03:6b:a9:40:67:54:1d:01:ba:6d:e5:f2:58:f9:38:
18:3a:b5:56:a3:49:0b:cc:ec:9f:59:91:5f:96:fb:
cb:ee:11:54:8a:76:4f:73:ef:fe:df:0b:af:2b:a7:
0e:1d:a3:a7:e2:b1:3b:f7:9b:0f:ae:eb:91:c8:fd:
7e:a1:6b:61:11:ef:a4:f0:cc:11:fa:b2:10:9e:8c:
39:1e:63:7e:5c:dc:7e:6c:8b:a5:d6:8c:49:ca:ab:
d2:6f:e0:31:5d:23:b6:20:df:a5:66:af:60:f9:19:
43:49:41:ec:89:56:f9:95:fc:b3:06:03:f1:01:38:
77:d5:2a:ab:43:c0:ea:0b:78:96:9f:02:17:4a:ec:
24:56:af:f2:aa:fe:7d:03:4e:df:cb:94:45:d1:16:
00:dc:f4:08:2b:53:04:87:bf:64:b1:a8:00:85:3e:
c1:2f:e3:8c:e9:fc:1d:55:b3:f5:53:c1:ab:93:65:
db:b6:fe:c6:39:66:8f:9c:af:19:ec:19:af:23:bd:
b6:fd:da:e0:27:76:7a:62:6a:69:86:88:0c:79:e3:
e8:6e:8f:8d:93:ea:4a:0c:cf:cf:77:2b:98:17:24:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:A7:07:51:9D:15:4B:2B:B3:B9:64:E0:FC:D1:4C:A0:D6:13:CC
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:86:a4:3f:50:80:cf:20:69:5e:78:e1:39:77:a2:23:a5:b9:
d3:a3:9d:3d:78:38:48:45:cd:c7:4b:cf:db:ef:5c:4f:c0:ed:
8f:96:d5:06:6d:a2:e0:00:75:d6:7c:b3:8d:72:46:3a:29:98:
ec:ef:c2:2f:25:5d:dc:47:0c:b8:8d:11:fe:f7:72:d9:f7:6d:
a4:4c:13:3e:89:9c:a0:83:e0:66:e9:7b:b6:ee:8b:3c:02:89:
6d:4d:ea:78:eb:2a:04:b2:9b:d9:2d:ff:7e:b7:2f:35:03:66:
f6:d4:c7:95:b2:1d:7a:83:4e:d9:d0:3d:b0:44:ef:d4:8d:22:
68:91:5e:97:01:1f:24:94:54:9e:95:59:11:0e:cf:4a:70:82:
ad:06:d1:ff:a8:07:96:57:ff:02:aa:7c:70:73:18:ef:4a:8e:
65:39:71:21:82:a7:d1:5c:52:62:76:41:c5:b5:cc:b4:1d:9f:
67:7e:ce:25:43:a5:ed:c8:23:93:6d:a4:4d:5a:a5:8f:fe:66:
e0:fd:b3:76:76:80:77:d9:f8:43:01:23:f1:8f:f2:26:4a:43:
7e:e9:2f:b2:d8:4e:ed:4b:fc:a3:bc:5b:8a:30:4e:00:99:4a:
dd:36:5c:0a:58:cc:46:d7:b6:fa:ee:aa:95:61:df:57:1e:6f:
7c:0c:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:10 2026 by rpki-client