Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: eO6xjLlOWeYMf9wciHRs5nWuEHNiF+adeYd9YKEcMN0=
Subject key identifier: F0:E1:99:70:B8:E8:01:D0:1C:64:C8:45:59:43:E8:A4:45:27:6D:C1
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019F946DA8519513CB550368B9F46C5C4266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 14:00:42 +0000
Manifest this update: Fri 24 Jul 2026 14:00:42 +0000
Manifest next update: Sat 25 Jul 2026 14:00:42 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: R/4TrpQyFAhwDgNClVvc0xNf9ns5VN8eilggrqhjv7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:a8:51:95:13:cb:55:03:68:b9:f4:6c:5c:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jul 24 14:00:42 2026 GMT
Not After : Jul 25 14:00:42 2026 GMT
Subject: CN=f0e19970b8e801d01c64c8455943e8a445276dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:08:a0:af:97:34:8d:f5:1f:5a:44:9e:c8:
2e:53:c5:da:01:e6:bd:7c:22:43:61:5e:2e:f7:18:
df:11:75:eb:c1:f6:c5:e1:59:1d:40:65:9a:ac:46:
73:44:d9:7f:e7:09:29:a5:3f:ea:5f:7a:e0:6f:07:
74:30:df:6d:1d:b6:cf:0e:94:de:7b:45:10:94:95:
6b:31:9e:f3:19:03:4f:14:db:b9:33:6d:8e:a3:2f:
61:5a:1e:d7:f2:57:74:ef:20:46:97:2d:85:83:a7:
10:3c:4d:99:b9:2c:e9:4d:66:46:75:dc:62:82:d1:
2d:9e:bd:27:95:a9:d4:3e:de:da:e9:d9:fb:ff:bf:
64:29:c8:5f:63:e3:59:de:73:99:bb:70:17:43:c5:
b6:46:29:bc:d7:25:94:83:df:ef:ea:97:5a:5e:82:
0c:68:1f:0c:c4:b4:76:27:3c:49:f3:2a:61:d5:04:
7a:cd:01:0a:5d:74:57:fe:90:27:c5:fd:a7:04:4d:
15:09:ec:a6:54:83:7e:d7:01:af:92:ed:1f:d0:13:
12:59:80:e9:4e:5b:9d:b7:23:2d:9a:8a:d2:20:1d:
9f:a8:cc:b5:b5:d0:2f:17:5c:d9:bc:1b:03:c5:52:
53:bc:ec:4a:d0:4e:6a:aa:b9:75:ac:0d:e5:70:1d:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:99:70:B8:E8:01:D0:1C:64:C8:45:59:43:E8:A4:45:27:6D:C1
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3c:fc:6c:a0:37:9f:af:87:4c:a5:d3:26:5b:e9:09:78:48:
da:52:60:cc:33:5a:fa:bc:af:6d:b9:42:e8:12:a1:49:92:0f:
c3:1e:fd:7e:56:c6:36:90:8a:93:b9:4c:3c:82:19:fc:35:40:
87:93:9b:4b:f1:61:b5:be:c1:cf:68:c6:ce:1d:51:9b:d1:59:
6e:6a:a7:16:ff:a9:d3:a6:13:2a:09:0f:22:0c:b2:1f:43:07:
17:25:ca:03:f5:90:04:d7:a7:a2:f2:dd:01:0b:44:8a:63:22:
22:c5:af:2f:a1:03:01:77:bc:05:a1:d8:c1:bd:13:48:0a:01:
34:db:ee:52:9f:c3:c9:06:a4:15:57:a1:1b:b6:28:da:78:e0:
96:da:79:cd:90:c8:9d:d9:05:a2:c3:34:f1:29:53:91:0e:29:
3a:60:08:5d:c1:16:c4:fe:5c:fe:2d:d4:40:75:ef:56:54:30:
e1:82:83:c7:54:1c:8c:c7:79:0f:c7:37:ce:b6:41:67:e0:2f:
8a:b0:87:83:a8:1d:a8:36:fd:2b:03:54:6d:39:e5:94:51:20:
e5:19:a3:70:1e:08:f5:f8:eb:47:cb:f2:f0:d9:62:e0:23:7b:
d1:03:d3:f7:33:a0:29:66:b3:d5:0e:d1:24:cb:7e:06:a6:07:
2f:ad:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:47:55 2026 by rpki-client