Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: RboMi/31pLQQDB9YZOIiD/p4lrKiWsNcOTgVoEUfaM4=
Subject key identifier: 34:2C:E8:87:96:57:FC:0D:F2:D0:2F:8B:38:32:75:65:F9:99:CF:0A
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019F9437008071570E715BE1021BE5F7EE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0A1D
Signing time: Fri 24 Jul 2026 13:01:00 +0000
Manifest this update: Fri 24 Jul 2026 13:01:00 +0000
Manifest next update: Sat 25 Jul 2026 13:01:00 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: TRldIUbyEdwatmcCG6gThcwOEuOZCS6eIBBuu2GFezw=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:00:80:71:57:0e:71:5b:e1:02:1b:e5:f7:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jul 24 13:01:00 2026 GMT
Not After : Jul 25 13:01:00 2026 GMT
Subject: CN=342ce8879657fc0df2d02f8b38327565f999cf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:39:3d:80:18:ec:86:3a:e1:62:dc:80:1f:
f6:84:1d:42:38:ee:f5:01:ec:86:97:78:e8:b5:62:
9b:23:e2:4a:19:14:8e:a5:29:5c:be:75:0f:01:1a:
0e:77:6f:84:6f:e1:bc:64:78:3b:0f:5c:da:d0:c7:
39:24:19:32:37:bc:1d:0e:91:20:7f:df:94:10:99:
14:1d:ef:c8:b0:4f:28:e9:2e:cb:e4:dd:c2:d6:e3:
e2:22:e9:e5:5f:a0:c3:7a:a8:ce:61:87:c7:de:55:
9f:f1:cf:a3:65:2d:44:35:35:f0:23:be:60:ba:f9:
86:b5:bd:48:1b:dc:36:43:2f:b2:ec:ae:50:0b:db:
a5:85:25:ae:74:89:31:a9:54:aa:60:24:93:51:10:
5b:52:4b:7c:b6:6d:51:3a:83:d1:85:4b:68:e0:f1:
d1:b4:1e:f1:6b:9d:0d:32:01:62:d2:bf:32:db:ee:
91:f0:22:9e:4a:0d:5b:da:9c:4b:28:23:2c:ea:dc:
c4:de:c2:28:14:68:c2:56:3d:06:24:13:51:c7:63:
bc:4b:32:27:c0:32:f6:f4:51:d7:1d:02:02:1c:b2:
85:65:5c:c4:a8:b6:82:f6:f8:07:5f:34:9a:ec:ba:
64:95:8a:f0:39:00:30:d8:91:76:29:6d:8c:03:c4:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:E8:87:96:57:FC:0D:F2:D0:2F:8B:38:32:75:65:F9:99:CF:0A
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:bd:5f:c5:bc:6a:c3:39:c7:6b:8d:5f:62:bf:df:11:e5:
57:ce:cd:11:94:62:24:20:7d:d4:00:ec:c5:e3:65:f9:e0:d0:
88:44:30:20:1f:22:18:90:76:1f:7e:0c:ff:38:72:b1:8b:ab:
6a:ad:83:6a:42:4c:9c:be:e4:9a:e4:0c:b4:8f:ca:23:14:97:
32:f2:b6:ec:74:d3:97:8f:3c:dd:7f:bb:63:8a:a1:af:d4:65:
f3:9e:32:12:b8:0f:ad:64:5f:d3:2a:a1:61:e6:ab:fa:d4:9a:
69:bd:cb:96:09:74:c2:5d:74:f8:d1:67:c4:2e:05:dd:67:d4:
2f:2f:50:70:62:91:72:49:17:ae:48:81:ac:30:88:c5:1d:52:
3c:1e:48:e0:c4:ad:77:0d:fe:a2:eb:0e:68:97:bf:65:cf:6f:
38:b6:1d:15:10:7f:98:c5:39:2e:f9:fc:49:13:8b:f0:0e:ef:
15:25:5b:94:fc:f7:78:c6:46:2c:18:18:72:32:4b:b2:3a:4e:
85:16:43:2c:1f:dc:15:24:c6:43:b8:13:11:c8:16:28:64:06:
79:44:49:c9:05:02:53:b2:84:ed:50:e2:da:c3:fe:e0:39:57:
56:61:1c:6b:cd:71:84:fa:b8:f5:a5:f5:82:94:28:d4:7d:60:
33:3f:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:26 2026 by rpki-client