Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: Nqo3sltonERqoxVzxD1sgH966EvH5s5INOjT7+jyAPY=
Subject key identifier: B0:27:04:F9:FB:4C:25:9E:74:37:A2:91:41:D1:06:D0:9B:75:75:AC
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 019F94366739C09FDD8B74F2FA91EBEE2BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:20 +0000
Manifest this update: Fri 24 Jul 2026 13:00:20 +0000
Manifest next update: Sat 25 Jul 2026 13:00:20 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: GbYR74HELbA3Pq0MbgaRaFmO8D32UA8MCaMcnvaBklk=)
2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:67:39:c0:9f:dd:8b:74:f2:fa:91:eb:ee:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jul 24 13:00:20 2026 GMT
Not After : Jul 25 13:00:20 2026 GMT
Subject: CN=b02704f9fb4c259e7437a29141d106d09b7575ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:10:38:03:e8:83:8e:ab:75:d0:94:bd:36:
aa:0f:54:01:cd:06:cf:4f:bc:b9:de:77:af:3b:8e:
a3:f5:8b:96:5d:14:af:e6:1c:50:a2:03:f0:2f:59:
a5:12:53:c1:2b:30:1b:96:6a:63:b6:3d:3b:5f:9e:
1f:38:98:69:90:8c:f2:3a:ef:28:a8:a2:3a:a1:db:
4b:46:28:06:18:85:04:f3:79:3d:78:42:1f:16:fc:
f2:c3:d6:5e:f7:ff:3c:2f:ff:af:94:35:9d:62:e3:
08:10:a1:52:40:8d:ce:84:3c:73:29:e4:8d:33:35:
45:43:7b:cf:cd:f5:a8:03:9c:96:bc:c4:67:45:52:
0a:08:11:11:00:a9:12:44:1d:29:fd:c8:2a:ba:99:
6e:3b:ec:56:55:5e:b4:a9:e1:c0:43:de:cd:ab:8f:
a3:36:5d:c8:50:49:16:cc:11:63:07:c2:bf:65:e8:
89:d3:4a:d3:89:15:f3:5d:54:96:6f:75:9c:10:e1:
3a:16:cf:bc:33:cf:c1:64:20:ad:17:bc:a6:be:3d:
a0:58:09:ee:f3:d6:0a:a0:fb:5a:7c:5f:e6:af:76:
83:92:ad:71:35:6c:b6:4c:5a:f8:41:71:57:4e:0a:
90:04:cd:79:6e:f9:4c:13:8d:ae:4d:df:5f:3b:1f:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:04:F9:FB:4C:25:9E:74:37:A2:91:41:D1:06:D0:9B:75:75:AC
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cd:0c:28:3f:66:b5:93:00:90:e3:d1:64:e9:9d:b2:9c:62:
37:b7:c8:34:40:26:f9:60:79:7f:71:b3:75:26:1e:ac:cf:08:
c5:a7:54:95:9e:e8:0e:e4:89:45:a7:7c:66:fb:bc:9b:dc:ff:
46:c7:ba:f8:ac:ae:89:81:88:89:d1:06:b5:f7:98:7f:90:9f:
e2:52:09:4d:8d:65:8d:aa:54:46:53:46:53:46:ed:2f:b4:9f:
78:b1:e1:1b:5b:52:64:ee:1e:46:16:d7:83:bd:08:f0:19:98:
b1:a4:df:4f:83:a1:28:a9:3f:4a:1a:7b:25:a1:d9:0f:0f:61:
0d:9c:42:27:d5:ac:3f:39:f0:0e:51:7f:05:0f:34:d9:fb:0e:
93:11:4d:c0:4c:6c:ca:d6:a2:18:3f:3b:c0:42:f6:ad:9c:d0:
4b:48:17:51:6d:91:63:32:3c:3e:09:32:1f:4f:5d:e0:c4:03:
0f:ce:25:6f:18:e6:64:43:d7:57:c4:04:94:e0:02:7d:5f:78:
ae:e0:24:5a:9f:9c:ed:da:d3:18:bf:17:5e:26:9f:e4:8f:5f:
c8:3a:8b:5a:8f:dd:4f:24:fe:b6:a6:7c:71:26:9b:96:a4:73:
ac:71:4d:17:36:bd:d2:0b:7e:44:49:14:fc:f2:96:e9:52:57:
93:74:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:33 2026 by rpki-client