Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: M/5Jnefdxe7gw9VPmMN2sZh/yWbZPKZb7q+lBSpIrRc=
Subject key identifier: E3:8C:EE:BA:51:A6:46:41:9A:28:29:69:0D:0D:B5:76:EB:62:E5:62
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 019F91359B0368DD17731B705FFBD31B255E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 016D
Signing time: Thu 23 Jul 2026 23:00:37 +0000
Manifest this update: Thu 23 Jul 2026 23:00:37 +0000
Manifest next update: Fri 24 Jul 2026 23:00:37 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: 6gY3iMGjrh8nBDD5ioxQhJhUQO5cIKxg2J0HFQE4GDs=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:9b:03:68:dd:17:73:1b:70:5f:fb:d3:1b:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Jul 23 23:00:37 2026 GMT
Not After : Jul 24 23:00:37 2026 GMT
Subject: CN=e38ceeba51a646419a2829690d0db576eb62e562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:84:16:e2:03:00:db:a6:c2:b1:fc:cc:5a:
6b:14:b0:4a:c0:32:8f:55:2f:57:80:41:21:04:78:
60:d4:ee:70:23:da:81:ee:03:8d:ab:fd:02:1c:d5:
50:b5:e1:52:a8:6e:cd:e7:45:cd:1e:4c:eb:b7:9f:
ce:06:dd:66:32:7a:09:f5:e3:66:5b:59:04:42:18:
eb:cc:f4:cb:9c:bf:93:6e:1d:2a:03:61:7f:54:3d:
9d:91:db:45:66:8a:26:53:c2:d7:a3:d1:2a:53:e1:
3a:9e:ae:5a:6d:57:1f:3f:8a:cb:6a:20:3b:38:a2:
d4:1e:2b:35:30:13:67:75:c4:8f:65:a6:e0:e6:78:
50:bc:ac:2b:f6:1c:53:b2:e4:4f:96:5b:38:38:10:
b1:12:06:15:37:6a:37:32:07:b7:12:28:87:d4:dd:
11:f8:30:64:1f:9d:5d:b6:0e:7e:51:a1:62:84:5f:
56:c9:b7:f1:9d:b6:f0:68:20:fa:b3:ac:40:80:3b:
a8:ce:8d:97:c0:ff:2c:5f:cb:b1:86:98:ad:e6:45:
49:ae:3c:45:6f:b6:92:64:bf:21:65:83:10:32:65:
eb:82:7b:54:11:db:65:63:3b:57:a1:b1:19:07:6e:
89:34:25:9f:b2:9b:86:9e:c8:c6:6b:61:0d:6a:ea:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:EE:BA:51:A6:46:41:9A:28:29:69:0D:0D:B5:76:EB:62:E5:62
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:53:09:8f:e8:bc:1b:c8:3e:aa:74:e8:63:86:2c:69:48:8e:
ef:53:3c:73:9e:a2:c6:1b:10:3a:b4:46:6f:0a:e4:2b:d4:62:
d6:90:3c:ca:a2:ae:0f:2d:25:bb:f7:ed:cf:ae:fa:5e:ea:95:
e7:5a:b9:e0:f1:b7:88:cc:53:ff:2f:29:e6:dd:f9:4a:6c:c6:
77:9d:1b:f0:86:59:8e:bc:10:9b:24:bf:51:a2:a4:71:12:8e:
30:fc:4a:f2:53:ee:96:2f:6e:b4:46:ff:16:86:3b:62:41:52:
20:f7:1b:58:a5:df:7e:67:65:77:fb:a2:44:09:ac:9b:08:2e:
03:ec:0f:dd:fd:02:3d:9c:25:5b:5e:50:55:cf:54:70:a1:b6:
b3:3d:96:35:f1:5d:07:2c:f2:bd:7a:73:e6:04:46:f1:aa:7d:
f1:e5:50:da:83:c8:16:04:6e:1b:c9:b2:77:e0:f1:f6:67:71:
27:54:3d:8b:96:c1:a0:c0:be:ab:51:4c:45:29:29:5c:72:40:
f5:5d:c4:1d:51:f3:58:03:f6:6b:19:4f:93:1c:70:65:47:95:
5f:37:56:11:97:f1:3a:64:1e:12:7b:28:7f:3a:fb:3d:0b:03:
c7:a7:93:d8:fa:7b:33:1c:78:96:9a:c6:bb:a8:2c:d8:f5:30:
df:8a:a2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:14 2026 by rpki-client