Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: SsoX3lSH8zsY9uMb+scJYY7WNyESX17sfxwTWl8/F0M=
Subject key identifier: 1B:DF:5F:DA:71:81:74:63:95:13:63:9C:F9:B9:82:6F:7A:DC:2D:AD
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 019F927FDB2786C1B13C224139AF320DFFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 06F8
Signing time: Fri 24 Jul 2026 05:01:20 +0000
Manifest this update: Fri 24 Jul 2026 05:01:20 +0000
Manifest next update: Sat 25 Jul 2026 05:01:20 +0000
Files and hashes: 1: lf0Q27_M7GFPEsgVcJVVxoAfXUM.roa (hash: sqE0Hw0Q3FI2WcAgCLh44TsVF/QN+tcFx9NnmWdf0g0=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: RVjXw+dVZYCPfvauvZia85cXVrWlSdtA21rm1CUt9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:db:27:86:c1:b1:3c:22:41:39:af:32:0d:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Jul 24 05:01:20 2026 GMT
Not After : Jul 25 05:01:20 2026 GMT
Subject: CN=1bdf5fda718174639513639cf9b9826f7adc2dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:27:ae:75:68:f8:69:ec:b3:f2:85:f3:15:
70:d2:0a:c8:91:d2:8f:72:20:3e:4a:15:1a:ea:06:
68:ae:e0:36:3a:32:7b:4c:ec:f0:1b:fc:de:3b:3d:
5e:37:46:24:7d:5a:53:5f:f1:30:3e:15:55:f0:84:
7f:cf:d6:2a:ba:f9:ee:76:f7:6c:04:8d:1f:f8:8c:
97:c2:e4:cb:17:ca:9f:f8:f3:d8:fb:3b:05:e1:11:
21:4a:d4:a8:69:d1:9d:3c:f4:ce:04:fd:f4:5f:3f:
ab:15:67:f9:30:b9:85:be:3e:c2:52:38:7f:e9:07:
18:1e:e0:69:a5:b0:d9:e7:92:a0:96:01:fb:3c:7f:
75:90:d1:3b:77:30:10:59:e0:76:2c:bd:7b:30:b2:
b4:8e:ac:66:4f:12:4d:cf:15:25:57:d3:b3:b4:00:
a7:69:2a:15:02:ff:f7:7a:e0:b5:3d:60:4d:ac:a3:
ba:8e:12:69:32:c0:0f:f5:a5:66:f7:82:1d:24:47:
07:8b:3d:fa:9f:c5:21:c1:8e:b6:cb:b8:9b:c3:d0:
58:a5:5e:72:76:f4:ca:ec:45:c7:66:c5:18:71:7d:
f7:e4:d5:d4:ac:5a:92:9b:27:6f:0b:c6:45:64:5e:
75:03:48:67:a6:a7:9a:35:67:a4:70:5d:33:b3:65:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:5F:DA:71:81:74:63:95:13:63:9C:F9:B9:82:6F:7A:DC:2D:AD
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:7a:0d:15:3b:1a:db:27:08:d5:f1:ff:c8:c0:4d:76:36:
2a:cf:09:5b:40:0e:0f:ea:d5:04:28:32:5e:37:e4:e8:f0:c3:
14:0f:b7:d8:4a:30:00:52:77:97:ff:36:61:16:15:19:4e:37:
c2:45:e6:90:82:ca:74:74:de:d7:94:9d:25:0d:10:52:b3:5f:
f6:59:15:b6:76:e3:67:16:be:06:0d:f5:a5:07:71:ad:1b:14:
d7:35:dc:27:9a:ff:78:d1:09:b9:62:2e:fa:8b:6a:6b:e0:2f:
58:92:a7:e5:5f:de:bf:d8:ce:8d:ee:c5:ff:87:f3:a0:26:ac:
56:54:6c:d5:12:4c:42:3a:e1:41:e5:6e:a2:b5:b7:89:26:a7:
e5:9f:83:72:ca:8f:40:10:a0:bf:86:be:9b:fe:8a:48:78:c6:
1e:f5:bc:11:d3:be:35:7c:0d:d3:82:4e:9c:38:46:e8:80:ee:
4c:67:55:a6:09:1d:41:3c:f3:a2:1a:e3:95:18:82:ea:90:db:
39:5c:6b:a1:82:dc:9a:ff:16:d1:4f:bd:fd:24:d2:97:2c:ed:
bd:3d:16:5a:35:a0:c4:34:46:96:a8:9d:e9:a8:29:a5:f2:9c:
2f:34:fd:94:d3:bc:7d:ec:c1:3c:1c:2e:c2:01:83:c7:da:6b:
44:84:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:20 2026 by rpki-client