Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: gdUUsqB/BHt0D/ztJHTPahNpI908uHjClmPoqcME18k=
Subject key identifier: 68:BE:CD:E3:8E:6D:8C:E4:66:AC:2C:A7:1A:AD:30:DE:93:D8:7D:B7
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 019F9392261EDD425A2B9AAB294401F31343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 151F
Signing time: Fri 24 Jul 2026 10:00:56 +0000
Manifest this update: Fri 24 Jul 2026 10:00:56 +0000
Manifest next update: Sat 25 Jul 2026 10:00:56 +0000
Files and hashes: 1: 6Zx9YtDEJ49JC-4b71_fvWtzw8s.roa (hash: o/A6dnRcU90/Ns+dOzz+UmVUTf5+OMsC+rgsisi5p8Q=)
2: NIU7fZeJ73Kx7vUBqR7rizpf67w.roa (hash: 2ugysi5XrPkBHFUed+88NeImX7rSdwmGmQYl2PxW7sE=)
3: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: x2VVfsLyXnEaiaR01JU9+w7TcObnehE1plfQ0FHoAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:26:1e:dd:42:5a:2b:9a:ab:29:44:01:f3:13:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: Jul 24 10:00:56 2026 GMT
Not After : Jul 25 10:00:56 2026 GMT
Subject: CN=68becde38e6d8ce466ac2ca71aad30de93d87db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:67:5b:9b:3f:ad:36:8a:e4:b4:b1:ec:70:
8e:43:cf:e3:ab:71:fe:e8:f5:79:ac:4e:0a:fd:92:
05:fc:1f:67:d1:81:66:90:2a:3d:e4:f7:10:73:aa:
eb:27:b3:20:63:49:29:b7:0b:98:b3:e2:43:c8:6e:
63:db:19:99:87:47:2f:5b:cd:79:4d:1f:2b:83:79:
2e:df:6a:e7:c9:27:ed:d2:45:80:e1:e8:0c:5b:e4:
36:64:5f:1d:93:71:a4:8a:7e:97:82:6e:28:ee:87:
3d:89:3b:65:2e:d3:19:a6:b0:1f:97:85:c8:01:45:
a9:33:3e:4e:5b:67:1b:8d:65:68:02:11:b0:cf:73:
54:5b:a5:7e:9d:ce:de:72:39:fd:b7:03:ae:7d:19:
d0:f4:53:76:7f:c7:b9:f8:1a:e2:e4:20:d0:36:78:
8e:3b:0a:78:29:66:5c:bd:d7:20:67:fa:a6:95:d3:
2e:1f:3e:f5:ba:c9:27:a6:01:98:57:3f:6c:ba:f8:
55:a9:64:7c:fd:20:d7:ee:f2:16:ee:08:86:b5:1a:
60:a6:73:e8:73:07:0c:73:e9:b0:e1:1b:75:e9:d5:
c5:59:3a:d6:52:dd:9e:39:83:a8:c6:6c:db:10:87:
8c:0c:a1:9a:d4:ba:3c:7d:2f:19:bc:ec:57:5b:37:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BE:CD:E3:8E:6D:8C:E4:66:AC:2C:A7:1A:AD:30:DE:93:D8:7D:B7
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:75:f0:37:0e:96:c0:67:99:59:64:0f:67:ae:24:a2:f3:
c6:b1:40:c9:0d:07:f1:66:c2:03:3d:7e:d5:0d:7d:ce:9f:c9:
7c:4b:a9:25:84:36:97:b7:c6:99:cf:f5:2b:a9:b3:42:17:43:
0a:8c:4e:d6:a5:e4:76:3a:da:f6:14:ed:6a:eb:c4:eb:48:c3:
60:f8:5a:fa:39:de:d3:f6:f4:0f:25:62:a6:e8:2f:fa:17:cc:
4d:e7:3c:47:70:f4:f7:08:e0:00:ea:cd:7e:a9:4f:f9:e0:46:
3e:01:e5:46:ad:d4:9a:70:12:a6:8c:00:c3:69:07:5e:b6:b7:
b3:c5:6d:28:2a:b9:65:16:89:73:dd:fe:67:85:36:8f:25:1d:
9a:0c:25:c0:60:84:bd:df:05:19:0d:e2:cf:a6:0f:4c:b4:f6:
02:f9:cb:71:7b:f4:b2:3c:5a:4e:2c:06:e9:68:a5:49:64:a6:
dc:32:39:dc:60:64:59:07:ae:c7:2c:38:1a:a0:c5:3c:63:ec:
14:26:cb:97:7d:73:bd:70:84:b6:b9:59:51:92:dc:68:88:bc:
5e:6a:a3:07:4b:1c:74:6f:4e:df:c9:83:d3:f3:fa:92:33:9d:
85:90:2a:a5:c5:04:36:81:a2:ee:0e:ec:8b:0e:5c:72:5e:0e:
7e:d8:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:55 2026 by rpki-client