Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: ofmEO3EaZnKJI/PZmtQca0XMFAPwCHKWN3A7xp+20bc=
Subject key identifier: 57:DC:AE:BE:C2:83:09:02:4D:E0:1D:0A:D0:C1:10:05:49:5B:65:68
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019F93FFBAF09BA94B944A33D9C5928D4211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 0B8C
Signing time: Fri 24 Jul 2026 12:00:37 +0000
Manifest this update: Fri 24 Jul 2026 12:00:37 +0000
Manifest next update: Sat 25 Jul 2026 12:00:37 +0000
Files and hashes: 1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: 1Qdeg2V+O0AckZn3pPOZptODeXOq28//owQItFBbmmk=)
4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ba:f0:9b:a9:4b:94:4a:33:d9:c5:92:8d:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jul 24 12:00:37 2026 GMT
Not After : Jul 25 12:00:37 2026 GMT
Subject: CN=57dcaebec28309024de01d0ad0c11005495b6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:a8:96:53:42:3b:ee:c0:42:fb:83:ae:05:
3a:9e:72:bf:fd:fd:10:b0:1a:23:1a:e8:8c:aa:3a:
87:bd:56:dd:c9:d7:39:f5:c4:e4:e2:81:14:af:be:
04:5b:b0:e4:ba:27:b4:13:95:50:02:20:de:86:11:
c4:03:b5:f3:c0:28:83:10:75:e6:c6:79:3d:1a:fe:
a9:71:44:c7:c1:95:87:01:c9:c0:09:a2:22:e8:e5:
4f:5f:8e:fc:76:11:54:af:c9:c4:11:10:13:0a:e6:
ef:00:94:89:fa:bf:dc:bf:52:bb:d2:b4:1f:f3:34:
95:9e:67:62:c8:57:58:7f:79:93:37:44:a1:5f:22:
98:15:5c:0c:4d:4e:cc:6a:10:5d:9b:0d:a9:6c:48:
4f:a9:39:10:df:cb:58:f6:8e:21:4b:11:67:c9:85:
51:c6:49:7d:c7:e7:88:1e:b4:e2:56:c4:a9:d5:8f:
71:b8:d9:20:59:ea:1d:a9:60:87:76:df:03:3d:b9:
8f:a5:bb:ac:34:76:f5:4a:17:e9:7c:f0:e5:72:37:
35:1d:f8:f9:bb:ba:3b:c3:36:09:79:fc:08:32:69:
cf:c7:a6:56:55:db:ee:17:f0:b3:83:6d:33:b5:f8:
83:e9:b5:83:2f:2b:26:5b:c9:a9:ee:ff:f4:00:0c:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:AE:BE:C2:83:09:02:4D:E0:1D:0A:D0:C1:10:05:49:5B:65:68
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:49:56:cf:ab:20:b7:5c:fc:28:de:a5:42:4c:0a:70:8f:
cf:1c:b8:40:27:ab:67:75:7b:d8:cb:58:a2:2e:b7:6c:cf:bf:
82:f8:5e:7a:1e:ac:d7:3a:51:94:be:60:54:1f:01:65:ee:76:
c4:60:b4:43:55:1c:e0:8b:a1:b0:aa:77:8b:8f:c1:b8:39:8c:
91:ef:3e:54:be:a9:59:b5:e4:7d:38:1d:72:8b:a8:c4:6b:0b:
42:1c:d1:ef:f4:d3:a0:54:0e:c5:91:b6:d1:c3:ff:63:84:c7:
cf:57:ee:bb:ee:c1:9b:48:10:00:4e:9a:06:cc:0e:1d:ea:11:
2f:ee:e0:73:02:37:d2:b5:d9:f0:14:87:90:14:90:0e:f8:e0:
8d:37:1c:20:b1:9c:26:23:66:43:73:1f:5c:98:07:69:c9:d8:
e6:82:da:5b:04:42:8d:55:5a:81:c1:4d:84:c7:39:5e:91:6e:
e9:45:71:ee:d6:32:ea:ec:1b:43:b0:32:1f:c9:3c:cc:f7:0e:
d0:b5:fc:5a:a6:5c:b0:3a:3d:33:21:51:f6:ea:9b:a7:3c:23:
45:92:6b:da:6d:9d:63:00:2c:ec:57:98:62:14:11:7c:f5:7f:
7b:6a:6e:63:18:24:c3:36:29:5a:43:6e:6d:7b:1e:24:1d:08:
3f:1c:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:19 2026 by rpki-client