Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 1+UznUcbvi443OlGDNvFxZlCX5Jwi06rznm4nbxdkHs=
Subject key identifier: B8:2A:F3:D4:D2:C3:FE:2E:5C:90:CA:97:8C:AB:54:7D:0B:C5:A6:89
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019F93242744E5E3CAA4217FF0970B94F830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:47 +0000
Manifest this update: Fri 24 Jul 2026 08:00:47 +0000
Manifest next update: Sat 25 Jul 2026 08:00:47 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: QyNMiKwdSn/6avGtsnFA/G5HgOY2Tz58t9OQHGhcoB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:27:44:e5:e3:ca:a4:21:7f:f0:97:0b:94:f8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jul 24 08:00:47 2026 GMT
Not After : Jul 25 08:00:47 2026 GMT
Subject: CN=b82af3d4d2c3fe2e5c90ca978cab547d0bc5a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:a1:95:76:bf:2b:3e:d5:17:0a:bb:4d:2a:
b0:12:df:fb:2f:e5:04:cf:31:80:33:dc:be:c9:de:
c0:eb:5b:6b:46:68:9a:2d:bf:4b:52:03:ac:35:3e:
9a:c5:9e:40:d9:a7:0d:d3:13:b9:e0:a4:48:b0:5b:
72:cc:e8:99:00:a6:50:c2:ef:48:f8:6e:3f:36:45:
0c:e0:e7:0e:f1:b4:b1:cd:ef:bd:c6:19:c6:b1:80:
2b:e8:21:fb:a0:ba:00:b5:de:6c:96:ff:c6:61:db:
31:05:bb:6b:3c:fa:65:93:f5:ef:45:78:7d:4f:ef:
51:54:b5:f9:f8:0d:1e:09:0e:8c:87:87:e0:f5:4b:
a1:d7:b8:46:a7:02:8a:23:be:62:d8:62:32:db:2b:
40:46:84:73:e3:f8:d0:a2:c9:9c:63:2f:a7:60:20:
28:a3:2f:b6:9d:16:d9:a5:e7:41:ad:40:63:8d:61:
ed:93:4e:4e:82:7c:38:e6:28:1d:c7:f6:23:f5:5f:
ec:f1:83:33:b4:4a:d9:c3:48:7e:fc:5d:02:b4:e6:
d1:98:8f:2c:99:84:ed:17:bf:d1:9b:f4:d4:69:6c:
47:68:34:e2:b9:dc:c5:16:a6:31:86:41:0e:0b:89:
2a:27:68:29:b5:12:40:5a:f7:71:5d:d5:d2:c8:8a:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:F3:D4:D2:C3:FE:2E:5C:90:CA:97:8C:AB:54:7D:0B:C5:A6:89
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a3:79:91:63:75:5d:d7:5a:9d:a3:37:e6:4f:91:03:bd:40:
71:99:1f:29:26:1b:f2:0a:5c:d2:3d:21:dd:89:d7:8d:73:67:
09:e0:eb:11:7c:fe:bc:03:0a:e2:ae:f2:29:8b:8c:dd:7d:54:
1a:db:fd:c3:cf:63:dd:64:21:f6:5d:32:80:0c:0c:6c:ed:8d:
67:6b:a5:6e:ac:0e:b5:e3:91:05:c5:49:a2:cb:d3:e5:00:70:
93:f8:3d:93:10:e8:05:ca:21:56:8c:8d:32:36:98:51:68:ca:
82:e5:77:de:a7:82:1a:d9:aa:12:e1:c3:8e:60:b1:24:05:6b:
00:70:d5:da:af:d6:50:18:1d:48:5a:5e:46:8d:6b:e2:48:bc:
7f:3a:30:b1:2e:43:53:57:d5:94:53:be:09:3f:84:a2:d1:cf:
82:46:5e:11:ae:50:83:45:e7:39:cc:49:85:57:c3:3e:4c:08:
59:a5:8f:83:24:d1:6d:37:7e:b8:ce:2c:ac:93:69:ca:ac:04:
3c:a1:b6:ce:64:2a:c5:7c:00:6d:78:1a:47:bf:19:b6:bb:be:
85:93:da:c2:f4:5b:c9:5e:2b:6e:ea:9c:a2:73:47:ee:73:04:
20:21:43:52:a9:65:53:60:3e:2e:cc:59:0f:7e:e8:15:be:3c:
f4:8e:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:32 2026 by rpki-client