Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: K+sYIQ8t0AsDtytlnwE8JMtwJTqpf1elgaCYQqreBmU=
Subject key identifier: C0:BC:7B:EF:25:8B:C9:38:06:C3:FE:38:9A:28:B3:B5:BF:8B:6E:FD
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019F935B0ADC69C2E53E0EFC761D94C2E384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:00:45 +0000
Manifest this update: Fri 24 Jul 2026 09:00:45 +0000
Manifest next update: Sat 25 Jul 2026 09:00:45 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: qWYj61Foty/6PVzhwwJcyyAW06A/skamOo0jPea74Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0a:dc:69:c2:e5:3e:0e:fc:76:1d:94:c2:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jul 24 09:00:45 2026 GMT
Not After : Jul 25 09:00:45 2026 GMT
Subject: CN=c0bc7bef258bc93806c3fe389a28b3b5bf8b6efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:88:38:4c:99:18:a6:3d:5e:85:9c:65:ec:
1a:f1:a9:e5:ac:67:97:7d:0b:a2:19:35:07:58:11:
98:e6:27:dd:3c:3d:db:e3:7f:15:dc:5a:b9:61:e9:
98:ba:6e:f8:5a:36:d7:03:94:25:46:7c:7d:a8:ba:
ca:be:4b:23:98:bc:1b:56:c5:93:a3:2c:6c:f6:34:
d8:9d:1b:a1:01:8d:d4:63:30:68:85:d4:52:5d:8b:
9a:d6:71:fd:f7:50:df:b5:07:3e:1b:52:39:33:8a:
9f:3c:39:8c:72:e8:01:74:e8:d2:63:25:5d:46:3e:
7e:e9:3b:25:81:a2:ab:b4:37:14:5a:47:7a:15:f7:
e7:01:6e:a2:8c:eb:03:b3:bb:45:cf:26:3b:27:bb:
90:fa:2a:ee:5b:31:40:73:33:ad:b9:c5:ee:c7:75:
5a:a7:e9:00:57:5d:7d:b6:58:cf:67:d8:c0:c4:aa:
86:5d:61:76:f3:ee:f7:27:69:5a:7a:4e:b7:10:40:
ee:a6:74:79:90:20:db:56:35:3f:a9:5a:0b:49:e9:
a0:7a:f2:a9:02:46:76:c8:50:a9:3e:d4:cb:e5:6b:
c7:cf:f1:52:39:7b:2f:3d:3c:62:30:f3:fa:44:14:
10:fe:28:81:3f:bb:09:fa:fd:fd:7f:28:68:89:f1:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:7B:EF:25:8B:C9:38:06:C3:FE:38:9A:28:B3:B5:BF:8B:6E:FD
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c7:f7:7b:95:da:63:a2:d2:a7:35:e2:a5:06:ea:7d:b5:37:
17:81:d7:3d:b9:79:49:d7:80:d6:e7:0b:ca:21:42:cd:d7:8b:
76:12:b5:d5:b7:91:08:e6:6c:d0:8d:ef:73:c8:ee:b1:ba:e6:
6b:66:5d:1d:fa:ef:af:81:98:03:69:bc:cf:a9:1a:9c:4d:08:
64:bf:50:d1:f7:d3:4c:02:e6:ed:4b:49:77:6c:7c:47:1d:47:
13:f8:37:31:f5:62:c0:31:0d:8e:10:01:c3:10:53:f0:ad:4b:
f0:d8:0b:41:80:ce:a0:76:ab:d3:fd:89:d1:4e:ec:c0:be:c3:
72:34:fe:0d:e5:72:90:e4:38:1a:a1:90:09:07:02:3e:f8:a7:
fc:60:3c:d3:38:25:8c:e6:a3:dc:94:4a:00:da:6b:ab:48:06:
28:ce:f7:6f:6d:e3:04:14:de:cb:0d:8b:6c:19:b7:00:64:28:
f4:6a:a5:c7:76:a1:8f:9a:d5:a7:d9:99:1a:b8:b2:e3:b5:4b:
48:b2:fc:4f:3a:33:d8:72:85:dd:a4:50:61:82:9d:35:18:af:
6d:8c:67:c9:f8:ab:31:c3:c7:b9:e5:b3:69:56:46:42:37:4c:
b3:a8:b1:89:03:dc:da:5a:7e:06:7f:33:17:24:d3:43:33:f2:
a5:eb:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:42 2026 by rpki-client