Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: RFQW0D2yra6f5WnVkG7yQxHRtMpeE3YSZMxOXA/2Vcc=
Subject key identifier: 31:B5:F0:9B:56:7B:FD:6A:E5:91:80:A6:15:78:73:66:C6:91:A1:2D
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019F9549885D9FE4ADDBD677B4FC73CA7E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 0667
Signing time: Fri 24 Jul 2026 18:00:51 +0000
Manifest this update: Fri 24 Jul 2026 18:00:51 +0000
Manifest next update: Sat 25 Jul 2026 18:00:51 +0000
Files and hashes: 1: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (hash: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: b3IDh4E18/iThp4pOlUA/FOHerymY/IZJOvpbHAUgks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:88:5d:9f:e4:ad:db:d6:77:b4:fc:73:ca:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Jul 24 18:00:51 2026 GMT
Not After : Jul 25 18:00:51 2026 GMT
Subject: CN=31b5f09b567bfd6ae59180a615787366c691a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:70:88:52:58:92:fc:9e:05:03:3c:ca:ac:
70:86:2f:4a:d1:01:33:5a:35:f4:fe:cf:d0:22:87:
c6:9e:ba:a1:d7:ca:f2:b6:3c:9f:88:d4:b7:83:7b:
8c:41:5f:48:55:33:57:45:8d:31:ed:ce:68:8b:25:
d4:b4:31:89:a3:97:a7:ff:df:93:39:23:3d:97:f8:
c7:1b:44:0e:e2:bb:c3:e5:ca:2d:88:f7:58:11:f6:
3c:a6:59:1f:ea:87:ba:9a:57:7b:16:46:1d:20:81:
12:09:f6:48:88:05:d0:da:a3:62:47:f9:f7:3d:f2:
95:2f:52:2b:12:4f:5f:7a:61:cd:b7:39:0d:d3:e9:
6b:86:94:1d:09:8d:60:40:71:0e:34:03:d0:18:35:
1c:ad:7f:61:1c:08:37:88:fe:83:98:88:1b:61:78:
48:70:ae:1a:ee:99:09:65:31:7f:bd:2f:d5:fe:45:
ea:ff:61:08:9e:67:88:8f:07:80:0b:9d:a6:d9:7a:
8c:ab:f3:63:e6:9f:0f:a1:65:1e:ef:ed:a7:bf:c3:
22:c4:ad:5b:e3:b6:85:ca:fa:e9:3c:11:c4:35:b4:
3b:a7:e3:d6:83:ed:cd:0d:8e:57:7b:6b:4c:8c:1f:
bb:14:6d:6b:ea:e5:4a:67:a7:72:8f:35:a0:9e:3f:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:F0:9B:56:7B:FD:6A:E5:91:80:A6:15:78:73:66:C6:91:A1:2D
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8c:d3:67:4b:94:80:cc:e6:ba:f4:65:71:c1:8b:a9:88:17:
fa:1d:41:e5:8b:c7:fb:f5:a7:d1:14:28:83:53:af:6b:d8:22:
13:46:94:25:b4:34:a2:29:e1:94:f4:fc:a2:d3:03:bb:d8:9c:
42:df:6a:68:cf:80:a2:d6:7d:e8:ea:2a:bb:d1:a1:4c:ee:73:
72:e8:0a:38:f1:66:17:dc:35:b0:99:c6:62:aa:11:df:b9:61:
e8:16:9e:a8:cc:02:62:47:85:1f:23:15:76:bf:75:14:ee:f3:
b6:c5:d2:32:64:1f:83:7c:74:ad:30:d4:54:06:15:cd:b7:0a:
66:be:01:68:9a:5b:9b:c1:ea:29:cd:73:89:80:0c:2f:1c:84:
9d:7b:d4:6c:b5:f9:fe:61:13:f9:42:17:16:a7:81:6f:22:b9:
88:39:16:93:8a:6f:57:dd:34:23:ac:4c:b0:24:03:70:27:23:
64:1d:33:ef:08:5c:2b:57:77:00:ef:76:21:96:c0:36:c6:49:
84:98:2e:43:48:d4:1e:2a:f6:97:ac:cd:f2:86:c5:76:a1:b8:
8e:c9:44:46:57:0f:0d:ea:d1:71:72:c5:35:65:ee:00:e4:d3:
ff:52:09:33:3c:67:dc:1f:9a:70:86:41:d4:aa:ad:5d:4f:bb:
d5:cb:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:15:57 2026 by rpki-client