Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: k97FE+lfq+5v9Fxaxeap/KsTGiF3fE/ItVZqlNqvNwY=
Subject key identifier: DF:27:07:88:FA:8D:28:E1:D7:24:46:60:69:F3:F4:1D:13:DA:2C:F8
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 019F92EDB79C8FD6D92CB8DF480B1508B08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 07:01:20 +0000
Manifest this update: Fri 24 Jul 2026 07:01:20 +0000
Manifest next update: Sat 25 Jul 2026 07:01:20 +0000
Files and hashes: 1: LDYOOwc3ElUwgsoAhX1VAVoDz7A.roa (hash: LnEQSIV2ZJKxc3kP1NpzkPN+GxvmT9Fs9kvIu+YHy1w=)
2: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
3: _Kvo8y_R7krVK88kzx8nMzPfxVY.roa (hash: hJFEckwW05pWdYupq2RWtNuX2TmzieG8g1SpfTLtVnQ=)
4: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
5: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: VL+YbUxUJ7pWxRQuwMwN1i5fPeBwDXOp4DSE8nWVBIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b7:9c:8f:d6:d9:2c:b8:df:48:0b:15:08:b0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Jul 24 07:01:20 2026 GMT
Not After : Jul 25 07:01:20 2026 GMT
Subject: CN=df270788fa8d28e1d724466069f3f41d13da2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:e8:66:96:96:60:5d:27:ad:d7:6e:fc:03:
38:26:27:d0:15:60:76:1c:50:db:96:0a:42:c1:ae:
c8:5d:9e:36:a5:f9:76:4a:b2:8f:2c:86:52:25:a4:
28:70:04:d4:98:82:6d:b8:8b:10:fc:80:3f:75:83:
ae:a0:8b:d9:e1:8d:57:5a:92:45:a6:8c:b9:7a:b7:
91:59:bf:f8:52:03:5d:26:78:e2:2b:18:6c:74:be:
7a:f0:18:46:fb:e8:fa:83:50:58:bf:cc:44:77:4d:
6f:c1:68:b6:f7:b2:79:ba:e9:8c:a4:18:9b:31:27:
f2:98:7b:90:27:c7:41:f2:79:43:65:30:a1:fd:9f:
16:92:7d:c2:c2:7f:78:d0:22:7f:1e:43:18:f4:ce:
17:c8:43:a4:92:44:b5:c0:f1:4e:2f:f3:db:9b:16:
67:e5:4b:b6:0a:f5:e0:b2:f0:0d:96:4a:b2:29:cd:
be:d5:0f:e5:02:70:80:f0:9c:b8:20:19:06:4f:2c:
99:e1:cb:bc:e7:09:b3:ae:19:a6:01:cb:69:7c:58:
bd:c3:2b:d0:fc:99:88:3f:96:78:19:0f:e2:59:3d:
d3:bc:35:3d:eb:fb:83:9d:42:a2:d4:52:e7:10:20:
e0:5d:78:e8:f7:3d:c3:76:17:d8:bc:22:fa:07:dd:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:07:88:FA:8D:28:E1:D7:24:46:60:69:F3:F4:1D:13:DA:2C:F8
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d8:f6:17:67:57:36:b8:f4:9f:a5:fb:81:15:9f:53:87:87:
cc:ef:1f:78:1d:60:a8:d7:25:fd:44:e1:4f:a7:41:bb:5d:ba:
df:0d:e2:b7:2c:c5:a9:7d:91:3f:85:0c:f2:e3:c6:ae:5f:69:
90:69:84:8c:f6:0e:fd:2c:d0:1f:42:a5:12:77:fc:bf:8a:bb:
28:3c:bc:40:f2:dd:72:59:ba:07:8b:e9:14:3e:94:b2:83:17:
25:e4:b0:d5:58:75:c9:e9:97:46:86:63:a8:e7:ee:33:09:3d:
22:38:6e:20:04:7f:21:e3:5b:8f:c6:57:f5:f3:98:70:df:80:
66:5f:38:44:0a:94:c8:22:e8:2d:86:41:fd:0b:8c:5b:73:1f:
8d:72:79:54:3d:c5:47:12:84:8b:02:31:38:67:53:3d:d1:50:
ad:e0:20:e6:c5:1d:1a:8a:b0:c6:98:29:96:83:89:89:d7:12:
0a:c3:82:f5:1d:1c:67:0c:db:39:b5:49:d0:b5:c1:15:5a:db:
4a:d7:0f:3c:59:ae:1c:ad:02:e0:8c:67:e1:db:5f:c0:05:af:
73:6d:6e:5f:83:e7:4a:17:71:cb:b6:82:7d:87:39:1d:6f:5e:
d7:3d:24:69:1b:11:b1:99:59:c2:1d:e9:c0:34:1f:2a:5c:e5:
d7:be:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:19 2026 by rpki-client