Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: ndBE0YUtc1zCp7ieCouHQvdLAyxawVfJ/F0bulmJ1QQ=
Subject key identifier: 22:E1:78:23:A8:B4:C2:21:5B:E0:C9:E1:85:4A:A7:02:0E:65:4F:57
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 019F93243446CDE9F4B65CA56846620AE080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 014A
Signing time: Fri 24 Jul 2026 08:00:51 +0000
Manifest this update: Fri 24 Jul 2026 08:00:51 +0000
Manifest next update: Sat 25 Jul 2026 08:00:51 +0000
Files and hashes: 1: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (hash: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=)
2: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: nnA7eN/KVow3uN+XOdFcPJiRjk57CDptp7yVVogb/qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:34:46:cd:e9:f4:b6:5c:a5:68:46:62:0a:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Jul 24 08:00:51 2026 GMT
Not After : Jul 25 08:00:51 2026 GMT
Subject: CN=22e17823a8b4c2215be0c9e1854aa7020e654f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:30:19:fc:58:34:47:59:7f:a9:c5:3c:8e:
8b:48:dd:c6:b3:cb:15:74:dc:0c:3d:89:95:1b:ca:
0d:6d:76:3e:ee:f2:f5:69:99:15:c7:ba:91:09:a2:
88:01:f2:17:26:64:69:9b:ef:2e:11:1c:0c:c7:45:
1c:8a:9f:ee:c3:83:38:54:7e:da:84:2b:60:3e:b4:
cf:fc:49:31:63:51:fa:b5:78:73:e5:c6:1b:88:ad:
09:b0:93:f4:6e:0e:0a:84:e9:e7:40:68:55:77:75:
b1:8b:cb:57:5c:d6:ec:db:7e:7e:bd:10:ec:fc:d3:
7d:4f:03:4b:7e:59:56:de:2b:63:80:e0:4a:44:1e:
ad:13:6d:d8:48:8d:31:af:4a:4b:59:42:5d:e8:02:
12:21:d2:c6:41:2b:b7:47:67:d7:a5:d7:5f:9c:ee:
a5:95:09:a8:b5:a3:61:98:93:46:d9:97:b3:9a:4c:
54:4e:a3:de:af:16:cf:45:c3:66:e8:ab:60:cc:2b:
b3:3a:eb:f6:9c:31:cc:d6:f0:5c:9f:5a:ff:9b:ba:
04:41:3d:25:d0:0b:7b:27:69:ed:b8:58:21:be:65:
f7:66:70:17:9a:2c:44:64:e3:71:90:18:57:c4:0f:
e5:0d:48:10:27:6d:55:43:24:87:29:8d:ff:ab:8f:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:78:23:A8:B4:C2:21:5B:E0:C9:E1:85:4A:A7:02:0E:65:4F:57
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:2c:53:ce:8c:ab:35:b1:12:3e:1b:77:4c:b4:9d:97:3b:
b4:04:71:83:d6:04:43:9b:0f:da:1b:75:d0:11:fd:49:f5:eb:
92:5e:b9:82:a8:7c:16:85:71:5c:24:b3:b5:45:23:3e:d5:ca:
95:37:a6:99:2a:31:1d:fd:8f:25:09:60:96:ac:fa:36:71:84:
06:15:78:2c:65:e1:be:5e:31:70:be:e6:90:df:f9:e4:be:65:
b2:71:a0:40:3b:8b:cf:9e:43:9c:c9:2f:1f:17:62:fd:34:51:
86:a5:ba:3c:65:af:2f:54:69:5c:bf:cc:b9:f0:44:27:09:2a:
c1:cf:f4:0b:98:20:95:14:f5:3e:53:54:4e:33:4b:1b:19:55:
d0:8e:f2:97:9e:12:e4:47:f0:4d:f1:ef:fe:14:51:08:59:27:
e3:68:5d:74:1f:e4:61:d2:14:f6:9d:aa:f8:98:2f:81:7c:de:
8b:98:9f:30:e6:13:0f:55:ac:fd:07:cb:45:36:d1:58:12:a8:
10:a1:99:00:c3:0a:c2:1d:3b:08:13:3a:17:45:e9:e4:b0:23:
f0:64:99:bc:3a:e6:21:42:02:8e:fd:e5:1d:c7:ab:04:f3:0a:
0c:95:82:f9:80:cc:33:e1:9b:97:cd:6b:75:29:67:3f:60:c8:
36:12:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:29 2026 by rpki-client