Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: Lu5hj9LU/R/sa4txjd3UHJvYjMdwoXu3LdVfvF+DKW8=
Subject key identifier: 41:3A:33:60:A9:60:C5:F1:8F:36:4F:98:5D:C8:02:46:91:67:23:A9
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 019F95499CFE573BA8FA8A131DD3B60EF253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:57 +0000
Manifest this update: Fri 24 Jul 2026 18:00:57 +0000
Manifest next update: Sat 25 Jul 2026 18:00:57 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: prxf/sXk5adDIODlDrii2x4gRls1VWoNAkt7RvplsAE=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:9c:fe:57:3b:a8:fa:8a:13:1d:d3:b6:0e:f2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Jul 24 18:00:57 2026 GMT
Not After : Jul 25 18:00:57 2026 GMT
Subject: CN=413a3360a960c5f18f364f985dc80246916723a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:03:30:aa:a4:19:64:ae:b5:32:1c:fe:fe:
b8:6e:45:7a:ba:b3:de:0a:bb:c8:2c:04:d6:ec:7f:
ee:79:40:f5:db:e5:2b:de:57:5e:f9:af:a4:d9:c7:
ff:e4:c8:ea:c9:e8:34:37:0b:8e:e7:32:8e:53:54:
e9:fa:db:82:83:d2:fd:82:4f:20:34:67:0c:df:ac:
db:08:73:05:f2:b6:1f:14:9a:68:3e:63:b7:62:df:
ca:ab:14:07:07:95:28:00:98:bf:0b:ed:b6:fa:84:
4d:28:29:ea:1d:a8:51:54:1a:56:9e:8a:38:b4:46:
b1:c2:5c:bf:9b:1d:ce:ac:e5:bd:36:2e:38:92:6a:
eb:0e:78:93:88:33:41:25:ce:a6:76:35:13:0a:30:
82:f0:6b:fe:01:99:19:3f:b2:da:31:fb:ba:88:e8:
67:87:a8:ba:2d:cd:bc:3c:96:e2:39:e7:64:38:e5:
69:44:2c:4d:c2:69:bd:16:9e:31:03:4b:33:67:9d:
a0:4e:f1:0b:38:29:ce:4d:e3:4e:e7:28:4d:a1:37:
71:a6:e7:fd:16:32:63:74:09:05:b7:0a:25:34:c1:
5f:28:72:3b:3d:a9:2f:ad:fb:f8:86:bc:67:2f:b3:
2f:bb:ec:4c:7a:f8:b3:05:e9:f7:23:a9:07:2a:9d:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3A:33:60:A9:60:C5:F1:8F:36:4F:98:5D:C8:02:46:91:67:23:A9
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:cd:b0:e5:4e:e6:79:96:ba:68:ed:65:cd:74:31:5d:b6:
c8:c8:f9:f7:32:95:6f:c4:28:7b:de:c5:1d:ca:52:4b:e6:c5:
9f:a7:b0:b6:3a:63:35:0d:a1:1b:7d:22:b6:df:b4:db:83:ca:
25:97:50:60:2a:6f:1f:7e:20:f7:d8:40:2a:53:79:0f:7f:82:
06:ea:c0:8e:90:b2:08:96:39:d8:5a:04:ea:8e:3c:3a:3c:5a:
cd:e5:37:b0:c2:f9:9d:f4:65:51:35:01:6b:2b:8b:05:15:4b:
5a:f8:d0:21:5d:33:ec:c1:83:14:24:1d:b2:26:b4:58:15:42:
ca:8f:88:3b:61:0d:43:4b:0b:2b:69:6a:6b:49:f8:7b:5d:83:
75:3f:4c:80:33:f4:c8:be:8f:c9:e8:d2:a6:65:bd:92:9f:51:
be:de:81:64:94:82:5d:45:62:b2:4d:c4:63:03:6d:b7:04:a1:
b7:a1:95:fe:02:14:64:f3:27:16:91:64:12:79:c1:0f:03:ac:
c4:c9:a4:19:cf:5f:20:94:7f:9a:ae:f9:d2:f3:ab:11:b7:fe:
8a:7f:09:2f:e1:c1:9d:82:ae:3b:81:8b:ab:f9:2a:cb:38:1c:
60:9e:d3:3c:f2:fa:5a:5c:92:3a:a1:9a:3b:39:ee:17:8f:d0:
97:ff:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:18 2026 by rpki-client