Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: rkz5njpQeLDmHu9w6r7NxcmYxjx9ejEq8OYOAVoCdeI=
Subject key identifier: 27:8B:C5:1D:E6:D5:27:70:D0:12:C0:CE:05:49:66:11:92:0B:0A:77
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019F92488FADCB68195ECF6761BD633E63BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:56 +0000
Manifest this update: Fri 24 Jul 2026 04:00:56 +0000
Manifest next update: Sat 25 Jul 2026 04:00:56 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: XhlJ0xHqL9QpbNCrU18tX9dFEsASdpaGs3P+twgBYBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:8f:ad:cb:68:19:5e:cf:67:61:bd:63:3e:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jul 24 04:00:56 2026 GMT
Not After : Jul 25 04:00:56 2026 GMT
Subject: CN=278bc51de6d52770d012c0ce05496611920b0a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:d0:e2:40:c1:2a:53:48:a1:2e:3e:bb:91:
b4:8a:b7:33:d8:68:69:39:d4:d3:8e:79:c2:f7:ea:
f4:e0:07:b7:af:4f:92:ac:77:b2:a2:35:9e:00:8c:
5e:4c:06:03:85:7e:1f:7c:ac:0c:96:a3:58:db:b6:
cc:ef:14:97:ed:c5:51:9a:c7:09:a9:9c:6a:49:3c:
22:29:45:84:ca:f6:08:f9:2d:b1:82:6a:3a:53:eb:
f6:27:18:7f:92:28:78:f2:8e:87:ec:8e:6d:9c:e4:
ff:35:0c:df:39:65:fd:47:f2:a9:05:2d:71:cb:74:
58:07:a3:0c:35:0d:dc:0b:58:8b:3b:f1:e5:da:2d:
2e:57:0a:ec:68:a0:9e:9f:27:8e:c6:74:44:c8:24:
61:e4:b7:2e:38:d4:80:d9:fe:c5:02:f2:fd:59:c4:
92:cd:b5:90:6b:37:c4:7b:2a:38:2d:d8:b4:49:f3:
5d:19:0c:04:50:65:b4:08:15:78:a0:11:22:0a:95:
23:c0:82:35:0c:04:ce:cc:dc:ea:a3:7d:3b:2e:b9:
86:e7:1c:80:c3:93:9f:15:d5:2c:11:3d:ed:7f:7b:
51:bb:72:f3:bc:ff:6e:68:e4:fd:51:f9:56:bd:3f:
be:51:7e:92:6b:a3:b1:a3:a6:e9:4e:8c:78:54:37:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:C5:1D:E6:D5:27:70:D0:12:C0:CE:05:49:66:11:92:0B:0A:77
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:4c:a5:14:2d:44:6f:e0:dc:58:a1:4c:ad:2c:ff:bb:01:
a2:5c:09:2c:d2:75:c4:fb:97:c8:f2:34:b0:68:61:d0:af:91:
f4:8b:65:ec:c0:d2:6d:bf:3a:b9:1d:4e:2f:f7:69:75:78:d5:
6f:29:5f:8e:14:26:30:b1:0b:d4:7c:c3:fb:4c:44:29:93:3e:
7b:06:77:e6:c5:eb:b8:59:42:48:ec:3a:4d:5c:e0:68:b9:d8:
20:2b:94:e1:a4:b3:48:52:61:2c:b2:02:92:a1:a8:81:c8:4d:
ba:80:d5:1a:44:ac:44:e9:a5:37:70:1e:88:32:d8:c5:58:a7:
32:50:7e:8f:fd:c3:2e:38:48:23:04:9d:b1:a4:36:d1:91:b2:
8e:65:07:75:50:1e:ff:89:d3:fc:40:3b:a7:7b:98:13:ac:9d:
cb:84:ce:11:3f:51:49:57:82:37:3c:4e:c8:ed:fb:3b:7a:c1:
e9:99:7f:c9:64:ca:be:f2:6a:61:38:31:9f:12:45:d6:78:3f:
2f:48:2c:a9:8c:37:f5:4e:df:12:40:4d:83:5c:4b:6d:b5:0d:
f1:4e:28:76:e9:d6:d8:5f:d6:bb:b3:90:3e:bd:8b:b3:af:09:
4d:c9:f9:11:96:ab:e7:a9:fe:9e:aa:b5:49:47:20:8c:6b:4e:
d9:1b:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:04 2026 by rpki-client