Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: f4OzbTFKZeF7f08LBCoots8EIbhZQ+VNg50wDR/5CmY=
Subject key identifier: 6D:AD:16:4C:0A:91:58:F7:E5:BC:09:BD:0D:DB:E6:18:6D:9E:6D:7F
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019F9247F9CDC8AAC17316858A3D26B3CB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 125D
Signing time: Fri 24 Jul 2026 04:00:18 +0000
Manifest this update: Fri 24 Jul 2026 04:00:18 +0000
Manifest next update: Sat 25 Jul 2026 04:00:18 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: dMJWz7PEREVbgNOZ/d0vHM0yMJY+VXM2+0V5/fayb/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f9:cd:c8:aa:c1:73:16:85:8a:3d:26:b3:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Jul 24 04:00:18 2026 GMT
Not After : Jul 25 04:00:18 2026 GMT
Subject: CN=6dad164c0a9158f7e5bc09bd0ddbe6186d9e6d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:cc:17:5d:ac:9f:4e:68:22:b1:c2:5a:eb:
8d:bd:aa:90:e6:75:e2:90:a2:87:77:35:08:77:0d:
05:ff:db:ac:d5:35:90:20:b9:30:7b:5d:bb:05:80:
b9:38:4a:01:59:76:9c:92:e0:27:2b:85:ea:63:15:
23:3a:99:05:49:40:44:55:26:ae:49:f7:0d:66:06:
89:21:15:4f:5f:60:9b:ca:c4:b8:2a:cf:fa:b3:d8:
67:9f:0a:9c:b8:7d:1a:fd:40:0b:8d:87:3a:d0:a7:
75:6d:f9:b3:1a:40:81:8f:a0:80:3b:16:d7:16:dc:
53:33:0b:66:21:1a:d0:cb:70:2e:cf:5f:f4:dc:c7:
65:25:92:9c:90:56:d8:b3:39:be:25:d3:86:d8:70:
eb:0c:80:28:34:36:bf:b9:50:30:c7:91:e7:01:a8:
c3:32:8a:83:be:42:c1:e0:c8:d3:3a:f6:28:76:04:
c3:f9:64:aa:f6:ce:73:c3:ac:20:f4:2f:d7:3b:67:
69:19:af:c5:57:f8:f5:b0:32:fd:53:e7:22:23:a5:
ed:48:9a:92:18:ad:3d:c0:26:75:af:0b:b3:c5:63:
3e:f5:50:39:ea:43:b8:51:26:f7:0e:d6:6c:e3:82:
9a:fd:10:a8:cc:a3:65:18:1d:58:e1:a0:4e:e6:d0:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:16:4C:0A:91:58:F7:E5:BC:09:BD:0D:DB:E6:18:6D:9E:6D:7F
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:99:09:a1:40:be:dc:b1:1c:43:72:10:ff:7e:09:f3:d7:
74:3c:0e:b9:1c:95:f1:f5:fd:19:ea:6b:27:9f:0c:a0:4a:a4:
35:d7:47:99:94:5d:82:a2:82:28:b1:fc:02:e8:6d:dc:53:f5:
f4:68:91:4f:cf:4a:d8:ff:df:c1:96:f4:10:ba:b6:ac:8d:a5:
0c:33:ae:17:e4:e7:ad:2a:a0:09:87:c3:c6:5e:f4:9d:01:57:
65:54:dc:79:d5:cf:7e:51:d4:4c:a5:7d:74:4a:6f:99:24:65:
a9:dd:5e:74:a3:37:71:b7:27:86:81:01:04:a8:1d:a1:5d:77:
70:22:ae:ca:64:28:16:aa:f1:7d:a1:2a:6c:10:63:f9:25:b6:
08:a7:c2:8f:79:33:a4:b3:13:f4:58:ac:60:ee:ee:80:ca:79:
f4:68:63:20:8b:1a:3e:08:39:b0:b7:43:c9:00:61:30:c9:14:
87:86:e3:66:1f:6d:4d:a9:5b:f1:2f:b7:ce:6e:85:0f:90:00:
f8:3e:18:dd:a5:e0:1e:39:54:02:de:2d:a9:24:cc:fb:08:e5:
5a:8a:b6:fd:39:73:25:bc:8e:84:27:41:50:c2:1e:f2:46:a1:
11:74:ef:e9:b2:2a:9c:b1:2c:a5:3c:1b:2e:29:0c:2b:6e:9b:
1e:e3:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:09 2026 by rpki-client