
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: Ds+aRCrn+6w1ycizFEVB/sNeZfUZ7rNVMtf0tv6jmbs=
Subject key identifier: C0:9E:A9:9F:0A:7B:E6:1C:58:F3:D7:7C:68:6C:68:FB:16:8D:CA:AF
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019F9090BCB3B86720CEBD052233AEDB8D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 1612
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: jxtKxj9BCnBHp8cW2FCpJAdEm7kZ7VOA0l1qCYQUiy8=)
2: fBLAHwUkRrn6HYBRnTV7FYQGNDQ.roa (hash: 2J5IIevOI4AOjVlKsCvjgqwg6VuZoErPwilBziOfEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bc:b3:b8:67:20:ce:bd:05:22:33:ae:db:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=c09ea99f0a7be61c58f3d77c686c68fb168dcaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:a4:14:a5:58:31:10:79:13:13:0b:f0:8b:
40:71:0c:ab:33:d5:bb:4f:3e:b9:3a:36:90:fa:b2:
07:3a:23:c8:af:ca:51:ad:3c:94:0b:b1:8b:3f:e5:
a0:c9:64:b6:b7:be:4f:af:9e:89:8e:95:98:5d:fc:
c1:2d:42:cc:85:ff:b3:88:53:fc:a6:b0:8c:47:d5:
3d:8d:5c:33:d3:11:7f:8e:71:f8:3c:2b:98:b2:41:
51:fe:ae:62:1a:ed:1c:1c:21:5a:4d:b2:2d:ba:0b:
60:83:ec:ec:22:9b:76:e5:d3:24:7d:7a:60:05:68:
f6:b5:61:91:b4:12:d7:de:ef:91:bd:e3:0a:a5:b9:
a4:8f:94:2a:f4:a0:b0:08:4f:13:a1:9f:9b:61:3f:
2c:9e:ba:4b:1f:00:1b:e1:19:1c:3d:e7:4d:c7:37:
fe:0a:42:e2:0b:c5:7c:36:78:36:ec:c7:fd:b8:26:
3c:b0:7a:2c:c3:f6:e5:ea:9d:a5:6c:70:f6:98:0d:
f4:ba:98:cd:b6:4c:3f:d5:2f:1a:05:64:bf:60:df:
c9:69:fe:1f:b9:db:0d:ca:32:30:81:0f:af:da:27:
96:a4:6c:9c:56:77:83:58:83:2e:ee:b8:a3:24:15:
d8:52:ce:86:4d:2e:c5:e9:3e:ff:6f:94:6c:69:50:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:A9:9F:0A:7B:E6:1C:58:F3:D7:7C:68:6C:68:FB:16:8D:CA:AF
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:c8:c6:42:61:37:d6:5a:8a:8a:64:ef:3f:75:1e:04:c2:
e0:56:2c:7b:d4:c9:98:94:1d:50:f3:4b:2f:0f:93:5e:a6:d8:
5c:87:c6:34:dc:99:8b:c2:3d:6d:ea:ea:86:e4:ce:87:f3:e8:
2c:92:10:ab:a6:63:c5:7c:64:be:19:8c:fb:12:dc:58:f1:ca:
28:4c:ab:23:96:35:36:cd:a6:4d:e1:fb:b9:f9:ab:c1:97:e0:
ef:2b:1f:f0:99:a4:97:fe:24:e5:27:0f:e9:e8:13:bf:3d:af:
0f:ac:0d:a9:ff:5a:c9:99:80:18:51:f7:92:c9:e4:bc:c3:a9:
6c:08:0d:0d:fc:9c:da:cb:ef:66:c3:bf:a7:5a:c3:da:6a:87:
a1:b3:6e:9b:e9:bc:15:aa:4a:e0:4e:8c:03:31:ed:a2:7c:e0:
d7:11:84:62:c3:ea:db:43:c2:1e:f1:12:38:1a:9e:b0:89:b0:
6e:74:b4:67:68:65:0e:71:db:37:92:2a:d1:1b:0c:f8:5b:f9:
b4:7f:fd:45:bc:a4:a6:e0:01:1b:df:2e:42:a8:90:c1:aa:1b:
ec:df:c5:0f:56:81:ba:ff:a3:a0:7c:d4:50:9c:29:16:d8:a7:
7d:94:90:a9:f5:9c:fb:8d:1e:8a:d6:e3:29:df:61:a7:bf:ac:
be:3c:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:55 2026 by rpki-client