Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File: tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier: v9gmPLrmcRXjHXnHvsz1+k1c+ZAr1jFhxMMhvLYgqZ8=
Subject key identifier: 77:E2:BB:3C:63:C7:D5:BE:5C:7C:27:E5:26:9C:4E:41:F8:B1:9A:35
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 019F95800C819881FF19DB6463F7A888B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number: 1572
Signing time: Fri 24 Jul 2026 19:00:24 +0000
Manifest this update: Fri 24 Jul 2026 19:00:24 +0000
Manifest next update: Sat 25 Jul 2026 19:00:24 +0000
Files and hashes: 1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: 44TjfK9pTzx7RnJn35yMIIt8cHXBwl1Vwc/4Coud2gg=)
7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:0c:81:98:81:ff:19:db:64:63:f7:a8:88:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jul 24 19:00:24 2026 GMT
Not After : Jul 25 19:00:24 2026 GMT
Subject: CN=77e2bb3c63c7d5be5c7c27e5269c4e41f8b19a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:75:b9:a6:41:9c:96:07:07:44:92:b3:95:
3c:74:1d:86:88:8a:56:13:f8:d5:70:55:19:55:4f:
b4:2e:f5:7c:87:bf:11:f9:e8:99:a7:43:e8:d5:11:
38:74:26:0a:23:d8:44:d5:00:7c:2d:c2:19:52:16:
ce:6c:c8:1f:73:ad:b4:b8:8a:3b:78:5a:24:48:da:
91:c4:d1:74:cd:8c:98:30:b0:8c:ba:c3:4a:bb:09:
b7:d2:b5:39:46:e2:50:a6:43:e3:64:7b:8c:92:8f:
15:b2:1b:97:65:bf:3e:cc:8d:f1:ff:b2:58:79:6f:
13:8d:7e:fe:3f:e3:48:63:55:62:df:68:71:bb:b2:
a3:32:5f:1d:79:ed:84:b6:1a:9f:d3:89:31:96:84:
38:32:d5:9e:00:9e:77:64:f3:14:d3:2b:22:b9:46:
3c:7a:02:b3:1d:28:0c:49:85:2e:15:8d:bc:1b:fd:
34:12:2f:d1:9f:dc:f3:de:4e:39:24:96:6e:a2:1b:
f7:45:c3:d8:52:e9:90:ee:f3:ac:5b:44:5d:98:0e:
2d:2b:02:48:76:b9:08:09:e6:ad:cb:8e:ff:88:db:
85:59:62:75:92:cf:aa:f7:92:83:d5:e8:4b:fa:17:
30:6e:48:7a:e6:ef:4f:a5:a4:6d:46:56:25:df:a8:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:BB:3C:63:C7:D5:BE:5C:7C:27:E5:26:9C:4E:41:F8:B1:9A:35
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4f:6f:06:7c:59:33:42:5a:06:44:c9:c3:1d:40:49:12:3a:
c9:52:81:ae:6c:a7:db:99:ed:ea:7c:72:e3:79:01:8d:c4:06:
c4:a0:a0:2d:4e:ac:78:a8:b7:25:70:9c:26:e4:96:a5:7e:34:
42:74:0a:e5:56:10:0c:f4:0e:80:88:bc:4b:28:5e:42:eb:62:
9e:76:2d:d7:a2:dd:8f:83:65:25:64:04:9e:9b:d8:f8:b4:c1:
54:77:72:6b:cc:13:c2:7a:4d:ab:57:46:07:49:f6:22:fd:65:
de:68:20:d4:a7:55:62:e4:24:9f:56:5d:ab:d9:ad:4c:ac:57:
2a:63:9a:35:ac:76:d6:1f:22:d0:9f:b8:66:b7:ea:60:7b:95:
73:d9:2c:69:60:26:b6:a8:ea:5c:db:71:32:55:dd:2f:bf:71:
fb:bd:49:18:b6:26:37:dc:b8:63:51:65:96:e9:fe:7f:c3:c8:
90:38:a9:d4:49:1f:1e:29:3d:b8:fe:73:57:44:b3:e2:6e:c6:
04:ce:2a:30:d5:54:e9:d6:d8:9b:8e:f2:93:cb:b4:06:9d:ae:
78:9a:b8:cc:6e:bf:d3:fc:8f:75:59:54:d9:fc:1a:a2:8e:53:
5f:0c:a1:89:29:da:5f:ef:cd:61:e5:ed:46:db:fe:b5:88:7d:
5e:61:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:10:02 2026 by rpki-client