Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: eqTl7oPhzJmLq1SKNcRq6driBUJ5M68btb9efl5FUa4=
Subject key identifier: 33:EE:F5:11:9B:41:A9:6B:A3:F1:97:97:EB:0C:F1:B5:55:97:A3:70
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019F954A43BF7B3411F7DF7A530F1D41C595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 18:01:39 +0000
Manifest this update: Fri 24 Jul 2026 18:01:39 +0000
Manifest next update: Sat 25 Jul 2026 18:01:39 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 3q5ZGPMT9Dx5GXk9ZMRwfOWFfkl7qZhZ4TJ6OjVSHvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:43:bf:7b:34:11:f7:df:7a:53:0f:1d:41:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jul 24 18:01:39 2026 GMT
Not After : Jul 25 18:01:39 2026 GMT
Subject: CN=33eef5119b41a96ba3f19797eb0cf1b55597a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:9e:6e:91:9a:34:68:11:e5:db:59:de:eb:
2c:24:d6:0d:e3:6d:f1:8d:70:01:38:bd:b3:be:38:
80:fd:55:22:1f:a1:3e:ae:c5:5c:65:d5:51:a7:66:
cd:e1:47:a4:ff:c1:1e:62:0a:77:78:a1:7c:04:f9:
be:48:61:7e:87:7f:eb:36:55:28:92:4a:57:16:b0:
b5:c7:45:e8:98:9a:a7:16:74:60:98:86:4b:63:90:
4e:ff:60:97:c3:81:47:a1:37:f8:48:b5:cb:a3:40:
7c:78:f2:8e:e0:b9:b3:d8:a2:b5:87:4b:82:e3:dc:
64:94:61:4e:a2:8b:09:85:57:51:98:b1:7d:f0:79:
32:18:17:ba:6d:56:00:d7:29:e7:15:b6:c2:1c:7e:
40:4f:51:67:ee:35:29:fa:9b:d4:ca:17:b7:c1:a3:
a7:c9:e9:41:83:d3:3b:66:56:1e:45:e9:6e:ce:53:
76:fa:0b:c3:e9:a5:25:4f:d4:bd:6c:f4:56:9f:2c:
ba:38:85:2b:24:ce:b8:46:7c:0c:7e:94:0a:1a:f4:
c2:a1:f8:e1:04:b6:24:5a:78:4a:57:e0:1e:e3:80:
89:41:08:43:47:34:86:b3:72:78:21:8a:d2:58:7f:
61:3b:73:c4:34:bc:22:b2:69:4b:6a:21:72:f6:9f:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:F5:11:9B:41:A9:6B:A3:F1:97:97:EB:0C:F1:B5:55:97:A3:70
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:bb:b0:b5:c8:02:be:a9:68:05:89:40:5e:95:79:40:9a:
fb:18:56:f3:35:83:70:77:91:36:98:a4:27:ea:5d:6a:f3:1f:
9f:c9:b8:5a:11:f7:45:ec:2c:22:de:dc:62:5a:8c:85:6a:4f:
7d:46:ce:ad:da:c2:f3:ad:e7:9b:ce:74:91:dd:df:78:06:90:
5c:33:1b:77:83:71:7c:49:ab:1d:ca:b7:c7:ca:f5:35:3f:a4:
c3:c8:15:62:72:51:eb:50:10:13:a2:fa:bc:2b:2e:50:54:4d:
e3:5b:27:00:8e:39:d0:7a:1d:63:f3:7f:ff:9f:67:2a:90:29:
4a:42:0a:a1:9f:ff:97:2a:9d:91:4a:81:05:00:69:85:63:7e:
88:d8:96:a2:0f:99:d1:d2:71:85:90:b1:80:06:45:c3:58:2c:
5e:38:22:21:4f:fc:81:39:7c:19:b9:64:80:69:a0:ad:1a:c8:
0a:45:7e:9e:40:02:bb:28:78:42:2a:ad:13:a2:e3:da:70:9e:
05:3b:cf:e4:04:3b:28:65:b0:2a:93:8f:32:ab:73:ab:4d:fe:
2f:e5:fb:bb:28:35:03:90:35:9f:eb:e1:d6:7a:87:04:1f:81:
26:d8:4e:e2:72:c1:d4:77:c9:4a:3d:0b:19:ae:da:e6:47:2b:
f3:a0:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:44 2026 by rpki-client