Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: InS+Xz2P2LFrUKSSkBg2wj0kwc8W5Nad33aHSdMICfM=
Subject key identifier: BC:13:19:54:76:89:70:4F:48:98:EA:CC:A6:6F:22:11:E8:B6:CE:FA
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019F90FE83F2773C2BBDCA16B7F985172AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 172E
Signing time: Thu 23 Jul 2026 22:00:26 +0000
Manifest this update: Thu 23 Jul 2026 22:00:26 +0000
Manifest next update: Fri 24 Jul 2026 22:00:26 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: g4uYPakZV1kFMJHh2sIPLngjPF8bjyu/EOhDW7/cqwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:83:f2:77:3c:2b:bd:ca:16:b7:f9:85:17:2a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jul 23 22:00:26 2026 GMT
Not After : Jul 24 22:00:26 2026 GMT
Subject: CN=bc1319547689704f4898eacca66f2211e8b6cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:8e:01:31:c7:02:9f:ed:c2:82:7c:d3:17:
06:ec:d6:c5:8a:70:c6:a1:34:5a:c3:aa:7d:61:34:
f6:ee:bf:79:20:9b:5b:93:ef:d7:dd:b6:29:16:f4:
3e:84:76:4c:69:f1:67:2e:d8:46:85:8f:e5:9c:fa:
6b:b2:5c:aa:b1:04:eb:6d:5a:f7:1c:50:13:98:12:
b8:62:e5:3a:d8:00:dd:19:47:a2:64:f0:9c:f6:b2:
7e:e3:f0:5a:14:99:68:52:ee:88:e2:bb:98:07:36:
57:e7:8a:aa:95:da:ea:2e:2f:71:79:3f:15:34:38:
fd:8e:90:6c:4c:67:00:12:d4:bf:4e:a9:9a:7d:61:
5b:1b:0a:21:47:cf:bb:a6:1f:75:a2:2d:30:f7:ad:
b7:95:83:77:d0:fd:b0:8b:80:00:1c:c7:98:c4:38:
56:df:2d:7a:b8:c5:b7:44:8c:bd:1e:e5:81:0a:48:
8a:df:23:a4:88:d8:a0:a3:7f:80:d0:f6:9d:db:8f:
44:11:ab:2c:50:1e:4f:73:38:93:9b:c3:e6:55:58:
6e:7e:05:fd:94:cd:c2:8f:4f:d2:bc:8b:8e:3d:6c:
0a:bc:92:c8:9b:ab:29:3a:07:83:e5:7b:e6:40:7e:
bb:a9:51:8d:e2:50:37:b5:88:6f:e7:2a:0f:50:50:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:19:54:76:89:70:4F:48:98:EA:CC:A6:6F:22:11:E8:B6:CE:FA
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ae:eb:69:97:40:25:7d:a6:d9:21:79:76:b2:b0:0d:c6:f9:
b1:7b:f7:3b:4e:de:08:a3:6b:6d:c6:14:5a:bd:6b:62:4a:c0:
14:2a:ad:74:79:da:18:4d:cf:8c:a6:db:4d:27:2e:3f:9a:8d:
77:ec:84:ef:3d:b9:c0:e6:b8:18:4f:9b:5c:3b:76:0e:ec:c8:
cd:32:e5:d4:d5:47:e9:94:17:d4:9c:67:66:71:1d:f9:b9:bd:
a2:26:20:0f:f6:ae:c2:c5:ad:29:ed:27:e5:2e:03:ad:e9:78:
09:40:3d:e0:a1:49:3f:fe:59:6a:51:33:81:a5:5e:56:2d:00:
94:dd:f0:ce:bd:25:e7:02:21:00:df:4b:8b:5e:11:14:cc:62:
12:f2:f2:51:12:95:2e:15:52:06:12:75:41:ba:4a:d9:54:e0:
3c:8c:69:f9:bf:80:9e:02:11:fa:24:b8:11:c8:7e:ec:65:59:
93:f0:c6:49:14:30:c1:9e:08:5a:f9:22:74:c8:25:99:6c:b5:
4a:c9:ad:8a:5d:43:21:3e:3b:f1:74:81:0a:cb:7e:4a:89:ae:
1d:2a:cc:16:5c:ac:df:bd:a7:15:1a:33:b9:0e:2e:eb:d1:c9:
8f:e4:9e:ee:3d:26:f5:2f:5e:6e:04:21:79:b4:68:53:2c:42:
65:ed:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:38 2026 by rpki-client