Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: a3ktUdVXvPpVYEpRySBCKB4L4VvMPwlNHtFz4mYOpeM=
Subject key identifier: 63:79:1D:64:21:CC:6A:20:7F:78:C3:E0:76:60:30:F2:31:00:BD:7F
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 019F951233E1F0B39F9E8FB9EF53847DFD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 17:00:25 +0000
Manifest this update: Fri 24 Jul 2026 17:00:25 +0000
Manifest next update: Sat 25 Jul 2026 17:00:25 +0000
Files and hashes: 1: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (hash: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI=)
2: HIq_BdqUCGatF2Rbj9NrkH9Ghjw.roa (hash: 8u28dk9o5BT41xzqo9yKmYyw/VKFKW4yRANeNy2FRA8=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: B+Am+556tZj6WXvDA7eMxv2iE9QrO6rGx3P/08S0w2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:33:e1:f0:b3:9f:9e:8f:b9:ef:53:84:7d:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jul 24 17:00:25 2026 GMT
Not After : Jul 25 17:00:25 2026 GMT
Subject: CN=63791d6421cc6a207f78c3e0766030f23100bd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:22:ec:10:69:38:6b:41:a8:79:3a:0a:fb:
0e:80:ff:d0:bb:2d:bb:a9:40:95:6a:09:a4:0c:6b:
f2:92:fe:92:4f:55:eb:e3:a4:98:23:ca:f4:18:30:
34:62:10:1f:ff:93:c8:b4:9f:52:b3:a7:d9:47:1f:
29:71:1b:71:ce:73:6e:87:db:a2:0f:d7:d9:63:e4:
e6:c6:87:29:19:5e:08:56:ae:d3:33:82:a3:5d:f0:
46:76:6a:a0:26:77:a1:67:50:70:8a:e5:27:be:45:
4e:dd:5b:35:d2:27:39:d4:e7:38:d0:e1:38:71:0d:
3e:ae:6d:28:07:96:29:77:21:12:a3:45:bc:ac:0c:
04:11:ca:07:1d:a5:a7:87:04:f3:5f:d8:bb:b3:88:
a1:9d:ae:d4:67:91:d2:b5:4c:d2:22:37:c0:eb:e0:
c4:86:b5:e7:60:86:70:d2:d4:2f:75:4d:e4:b2:eb:
0f:03:63:e4:af:87:66:db:4c:93:56:6c:8d:e5:ab:
cf:d3:a0:86:b8:05:2b:9e:a1:1e:19:f0:f2:28:f6:
df:3d:fa:31:fc:48:4b:98:ff:f5:49:23:ca:38:c7:
04:4b:1e:26:a8:bb:96:2b:93:86:c5:1f:d7:ea:b9:
c0:e3:2f:4b:0c:d1:58:1b:d4:9e:7d:57:21:b1:26:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:1D:64:21:CC:6A:20:7F:78:C3:E0:76:60:30:F2:31:00:BD:7F
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6d:ec:b8:a9:14:aa:ab:9c:d1:7b:e9:54:3a:b7:d8:ae:db:
77:80:55:9c:eb:27:a5:0f:39:60:e2:2d:7b:e9:40:5e:f6:b3:
81:31:df:d5:de:d9:3c:8f:d9:f3:6d:e4:4c:4d:64:35:4a:e1:
1b:5f:74:93:c6:84:89:1f:6d:3a:c6:00:22:66:62:97:0e:22:
3e:36:59:8f:b6:fa:32:76:cb:13:a5:96:62:16:fc:87:ab:60:
96:f5:09:0b:9e:df:50:a1:41:88:67:c9:29:5d:a3:03:1e:73:
92:49:f0:52:21:90:b9:7a:9b:4e:82:48:45:bc:53:5f:fd:3b:
16:8c:cd:e6:6b:ed:67:38:a1:c7:d9:a2:94:09:6f:50:91:e6:
b2:b9:cb:2f:bb:ec:fc:84:c9:fc:9d:c4:a4:24:db:11:b7:64:
db:3a:a4:ad:a8:53:1e:ff:5a:2a:c2:e1:99:1b:cf:f7:20:1f:
26:ed:db:97:df:62:b8:f5:33:35:68:98:83:fb:f1:e3:05:db:
24:f7:86:90:fb:19:e0:0a:d8:18:db:83:c0:f7:22:7b:8f:87:
46:d2:a8:78:36:8d:07:eb:54:32:21:1d:32:bc:66:30:f9:10:
dc:07:54:e8:27:a0:56:de:74:5a:13:f9:a8:89:4e:bd:89:1d:
92:1b:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:25 2026 by rpki-client