Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: ZYP4NoYEe6VaV2D64ZdgkefVqXb3KFDciBBzzJHqlxY=
Subject key identifier: 06:D4:86:0E:C4:1D:4D:7E:57:24:AC:E6:EC:88:87:56:02:34:B8:DB
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019F92119035E5263620EDF6BE21D32EE2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 01A6
Signing time: Fri 24 Jul 2026 03:00:52 +0000
Manifest this update: Fri 24 Jul 2026 03:00:52 +0000
Manifest next update: Sat 25 Jul 2026 03:00:52 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: ns1DH7b9pwhFv5MbbmFCE3Hyfnf/LH6/uOhgLjUbNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:90:35:e5:26:36:20:ed:f6:be:21:d3:2e:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Jul 24 03:00:52 2026 GMT
Not After : Jul 25 03:00:52 2026 GMT
Subject: CN=06d4860ec41d4d7e5724ace6ec8887560234b8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:97:2e:96:c4:ff:5f:45:cb:be:aa:8e:f8:
a7:21:40:0e:75:ee:3d:b2:49:b0:f6:6c:7a:03:1c:
23:a9:16:37:18:c9:2a:84:47:5b:f0:35:eb:bf:78:
79:16:84:97:f2:9b:43:b5:56:20:0f:6f:06:03:d0:
ef:cb:1e:8c:bd:15:44:09:2b:e3:80:e6:7e:e5:66:
b4:42:68:02:71:99:10:4c:0e:35:42:25:ca:85:c7:
d4:08:43:3e:69:bf:51:ec:55:2c:e0:da:78:dd:dc:
db:f4:1b:0c:57:19:07:8e:02:de:5c:d4:eb:68:9a:
82:23:ef:66:02:43:97:34:35:74:04:67:fa:b6:fd:
25:54:48:14:f7:c6:54:2d:a3:ff:ff:12:3a:9c:8b:
75:55:7f:18:b8:e9:5c:d6:32:89:8b:d4:70:5e:9b:
79:45:31:9d:e3:a4:5d:8b:45:4a:a1:00:8d:82:84:
20:5d:85:78:a1:fa:8d:c8:db:08:c7:20:77:c1:59:
6b:53:d7:56:a8:9c:4c:a2:99:47:70:8c:65:33:dc:
35:f3:59:61:10:5d:11:1c:5e:81:e9:40:0d:7f:4a:
df:fa:39:11:09:e4:5b:8c:46:cf:bd:fb:c3:af:9b:
f1:d6:69:70:f5:7c:15:a6:2c:47:8b:d4:eb:94:cd:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:86:0E:C4:1D:4D:7E:57:24:AC:E6:EC:88:87:56:02:34:B8:DB
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bd:8c:ae:fc:08:54:c8:29:63:8d:8e:88:84:a0:2f:11:3e:
5b:6e:7a:91:6d:52:52:44:36:7e:b2:97:c1:f3:f3:dd:ca:fd:
c0:32:a0:45:68:13:13:5c:40:b5:92:57:b0:17:f6:17:4c:28:
d5:81:26:28:35:9f:a5:89:44:eb:0c:30:94:6e:e4:d5:52:a1:
65:c2:53:4d:b0:87:e7:5c:c0:61:d1:a9:fd:fc:06:4d:85:4c:
cf:2c:25:a8:4e:1c:7d:c4:55:bc:2d:fa:45:5e:43:ea:95:25:
ea:71:92:16:fa:d3:e7:a9:4f:a1:22:e6:cc:39:12:46:bd:6a:
02:9a:3e:52:9b:4a:fb:44:04:58:3f:94:28:8c:57:6c:26:ca:
7a:b2:ad:01:b8:75:a7:fa:bc:0f:f0:90:62:76:df:b2:58:18:
74:02:6f:c7:b5:ee:3f:bf:04:6c:da:1a:f6:6b:f6:fb:60:35:
2d:77:a0:ad:5b:d0:91:0b:70:9f:70:09:80:24:76:53:33:de:
1a:ac:9a:6b:98:a1:2c:68:ff:37:15:9a:82:87:31:e2:90:d8:
a3:d3:2a:b6:28:4e:2d:77:71:e0:ba:d6:4f:1d:f5:5f:2f:25:
c3:3b:95:85:71:54:27:cf:66:de:46:64:ab:78:ad:89:04:c1:
45:58:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:49 2026 by rpki-client