Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: J8BD0vX44h3J1fd3i1lbvmEODVJBf3MmsQfQbch1M9o=
Subject key identifier: F8:B6:0B:61:27:10:5E:E0:C3:C1:6A:BC:C4:36:9D:7A:A2:13:90:70
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 019F9391D50CCA92CD94C819476630D3A249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 167B
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: KRiJZFLmkz47HV/du20u6Wek0eVfswOsmjYfsalbIqU=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d5:0c:ca:92:cd:94:c8:19:47:66:30:d3:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=f8b60b6127105ee0c3c16abcc4369d7aa2139070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:63:df:50:cf:60:5b:59:d0:dc:98:c0:47:
8d:67:25:d8:78:26:b2:4f:f4:fe:58:88:26:23:5d:
39:36:e2:9f:2a:03:27:2d:eb:b9:58:5a:84:7d:17:
94:08:28:c1:e9:58:c1:2a:0d:77:9f:a5:87:40:19:
90:a2:a1:7f:2d:fc:9b:20:99:0b:52:cf:63:77:50:
e9:3c:02:37:52:ef:c0:bb:c5:23:3b:40:9c:9b:73:
0d:df:c2:8e:5b:36:e2:d1:93:32:f7:be:bc:83:37:
5a:6e:3a:b2:e2:40:47:17:b8:5b:06:19:ac:d8:f4:
6a:0b:e7:63:a2:ab:86:09:31:5a:17:3b:90:40:0d:
fe:2b:aa:f0:db:db:53:3a:93:43:3e:13:2a:8f:36:
03:19:b5:63:bf:3b:d9:5b:cc:1a:dd:e2:42:43:d9:
97:ba:6a:2b:c8:47:d2:14:35:ee:0d:ac:fa:53:94:
b1:be:bd:df:99:b6:a0:d5:4d:6a:b6:95:06:82:1a:
c2:f8:74:5d:3c:a2:67:37:21:86:3a:eb:de:62:7e:
3f:c2:9d:80:39:a6:54:e1:30:c6:ab:26:75:02:ee:
55:0e:18:df:6e:4b:c5:10:7a:4f:ad:12:b0:d4:e3:
a6:7a:4f:4b:9c:c5:ac:0c:7b:3f:a0:4d:8b:ab:cc:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:0B:61:27:10:5E:E0:C3:C1:6A:BC:C4:36:9D:7A:A2:13:90:70
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:57:c0:e1:6e:c9:68:93:1b:e4:f6:da:69:50:97:af:a4:
27:fc:60:f9:61:07:c4:c5:d0:1a:b0:64:6f:b6:f3:d4:d2:56:
4e:a2:7c:99:ca:e2:b9:48:ac:22:9b:85:99:dd:34:fe:1d:48:
e5:bc:3e:6b:8d:9f:a7:05:ad:e5:34:ec:c2:0c:1e:5f:8e:a8:
a8:a6:cb:57:09:12:f0:02:1b:cc:dd:f6:59:7e:ad:80:01:c3:
65:31:bf:c7:67:52:67:6a:c7:64:4b:c2:33:36:a4:3a:ae:7f:
86:ba:75:74:99:25:d5:f3:94:95:cb:bf:92:75:3c:77:c4:54:
7f:bb:c2:bb:8e:8c:f3:c1:4a:8a:31:41:cf:48:2d:7d:cd:70:
52:57:5b:35:c2:30:6b:7f:e0:c1:72:c9:c9:7a:71:61:2e:f8:
74:37:48:b3:75:40:54:4f:11:03:7a:de:1b:25:9e:30:37:0d:
6f:aa:99:9b:ae:52:63:55:d5:bf:21:8f:a0:44:92:62:f6:bf:
d9:eb:1a:4c:2a:ae:26:9c:b7:9e:1b:2a:a2:69:cb:b3:3b:64:
4c:57:8d:b0:38:72:58:8f:61:45:73:8e:4d:c5:da:4b:d3:07:
29:95:92:19:30:24:89:bf:d1:a0:b6:a0:c5:34:78:86:81:14:
12:58:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:39 2026 by rpki-client