Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: OqF3xxAp94NBeFgKyiMgltT6ivPgJGHRe1TGPmq4reQ=
Subject key identifier: 35:7A:4E:AA:AB:3B:4F:75:F1:70:90:81:06:10:0D:B3:AC:26:66:28
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019F91DA53B0C55782A27EFD4DBE1807197F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 02:00:32 +0000
Manifest this update: Fri 24 Jul 2026 02:00:32 +0000
Manifest next update: Sat 25 Jul 2026 02:00:32 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: mzoLy7639Ko+NCkZb95OkBvm/PhFqhVfYgWgfdiD+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:53:b0:c5:57:82:a2:7e:fd:4d:be:18:07:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jul 24 02:00:32 2026 GMT
Not After : Jul 25 02:00:32 2026 GMT
Subject: CN=357a4eaaab3b4f75f170908106100db3ac266628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:43:80:9a:05:6a:fb:6f:44:c9:64:a4:1c:
58:ee:a4:1b:85:91:aa:41:b9:d2:a6:61:d3:6c:53:
0a:ee:db:dd:0e:df:e5:98:bc:c7:c1:79:2a:74:24:
bf:82:9c:22:1c:e4:a3:86:ce:30:e2:5c:5c:72:d8:
86:79:7d:88:70:24:b5:8c:55:07:97:44:43:1b:0e:
6b:0b:30:73:b0:96:9c:b0:85:d2:b5:eb:2c:a5:1f:
e1:27:a6:c7:fa:7d:43:5b:48:c9:97:ef:f0:2e:c8:
0b:3f:60:4d:03:93:db:93:17:a2:30:1b:78:51:64:
29:dc:32:1f:85:0c:11:93:dc:e2:7c:e1:7f:7d:ad:
f9:9d:35:68:31:ac:09:a5:72:31:16:19:e0:80:e0:
64:67:b7:52:58:7d:2a:b8:0c:8a:90:3d:06:2f:dc:
04:c2:3a:fa:26:88:8e:62:32:4e:87:bb:7e:1b:6f:
83:67:0b:47:30:ad:c1:38:12:c0:77:ab:11:71:79:
50:9e:3e:bb:90:0e:17:cc:c4:e1:97:89:f2:c7:80:
3b:15:ac:bd:03:7c:ce:e3:44:ab:a9:6f:71:48:99:
e4:49:c6:38:dd:c3:73:c7:50:95:8a:2f:f7:e3:6e:
00:dd:5d:c6:47:1a:28:25:0c:2a:51:ea:3a:3b:52:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:4E:AA:AB:3B:4F:75:F1:70:90:81:06:10:0D:B3:AC:26:66:28
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fb:ac:74:29:74:e4:f5:84:00:77:02:50:76:69:3d:40:84:
93:18:44:55:f9:9d:7d:94:e9:5b:93:bf:d2:b3:97:02:01:b2:
e9:a7:45:60:51:dc:7c:dd:7f:28:13:10:f7:59:df:9c:c0:e3:
62:18:9b:eb:bf:2d:1d:b2:e2:bf:49:a9:82:1b:19:6e:d7:52:
8e:1f:57:e6:e6:51:d0:e6:d4:35:e8:46:1a:f2:77:40:86:85:
93:d0:98:16:bd:1e:93:96:9c:e7:ab:6d:c9:75:12:35:ba:d0:
d9:28:34:05:ca:0a:31:c1:bf:d4:02:32:c8:dd:31:de:c0:fa:
c1:01:9b:e5:3a:bd:c7:60:ac:28:6f:ef:a5:25:8c:65:00:8b:
a5:14:c0:d7:a2:ce:1c:84:cd:80:cb:ab:ef:cd:93:32:d4:6b:
4b:1d:69:9f:f0:03:da:fc:31:fa:46:29:ca:da:27:1a:5c:c2:
53:e2:b0:d5:31:34:00:64:96:76:b1:85:0e:3c:e0:a6:d7:c5:
97:b0:e0:da:78:cc:49:7f:51:03:61:ea:49:62:e8:30:61:31:
df:d6:cd:6f:99:a5:db:c2:63:4c:d8:12:9e:55:82:c9:7f:bf:
5b:b0:91:32:52:4a:c8:28:31:91:90:57:29:2b:1e:c3:66:cd:
2e:d1:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:48 2026 by rpki-client