Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
File: T1HrSeFu3RhEgrvMFjExdFOV9GI.mft (raw, json)
Hash identifier: QOuwrIgFLTZWiKaFSSmbWCY+QWjOL8g2M5BPXwp9Ac4=
Subject key identifier: 56:71:AA:79:67:C7:A9:59:2E:4B:DF:86:30:CF:55:36:02:B6:B3:DF
Authority key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Certificate issuer: /CN=4f51eb49e16edd184482bbcc163131745395f462
Certificate serial: 019F8FECA37A35F9855DA802BD4CFC9346BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
Manifest number: 0149
Signing time: Thu 23 Jul 2026 17:01:17 +0000
Manifest this update: Thu 23 Jul 2026 17:01:17 +0000
Manifest next update: Fri 24 Jul 2026 17:01:17 +0000
Files and hashes: 1: Io7n0RKdSC8NYvr3HwlbU080m-o.asa (hash: WD9WD3ogZA9m8TfNUNn+teG3m8j/94zNgQLzHUw+9JE=)
2: Ppt42Gv5gIDfqeLOpJTE20JEbUs.roa (hash: NdkXtmUAvOxUP9UHZgcc6jVZbUnj3SGw12e1roYv7cw=)
3: T1HrSeFu3RhEgrvMFjExdFOV9GI.crl (hash: OnkA8d69OVjrn3zfo4w57NVDJ+WOfqY8XZ9dqUIcmeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a3:7a:35:f9:85:5d:a8:02:bd:4c:fc:93:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51eb49e16edd184482bbcc163131745395f462
Validity
Not Before: Jul 23 17:01:17 2026 GMT
Not After : Jul 24 17:01:17 2026 GMT
Subject: CN=5671aa7967c7a9592e4bdf8630cf553602b6b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:d3:f4:a2:99:f2:a4:b1:45:96:72:be:de:
8e:4a:67:98:26:2e:dc:8a:af:ca:9a:46:00:6e:3b:
b5:23:e2:a9:a1:f6:fb:c9:f4:1b:a7:16:80:21:7f:
44:bf:ac:f0:15:81:55:f1:5f:33:93:30:ba:e6:b4:
02:c0:fa:c6:92:7d:62:25:36:33:b3:bc:4f:49:dd:
86:7a:38:65:19:ca:ed:ec:7d:96:b9:1f:cd:e0:a5:
0c:21:ea:b6:a6:bf:b7:02:6f:e3:c4:03:b1:31:c0:
f3:58:19:15:3b:ed:3a:d5:23:34:7c:16:2d:c0:14:
8f:7e:b9:04:98:a1:b8:bd:78:4f:9b:66:98:f4:df:
d8:c6:76:6c:95:4b:82:0e:d0:7f:b7:ce:ce:c0:80:
7f:15:05:d3:15:a7:f1:06:9d:c8:56:08:06:21:95:
fc:cd:de:a9:08:cb:86:25:3b:ad:f4:96:c5:3b:65:
83:bc:3f:30:c0:1e:56:bd:b8:e0:ab:9c:7e:6d:ae:
65:4a:c0:93:a8:9a:7e:24:61:02:36:b4:58:db:fe:
77:14:b5:66:1a:18:45:a6:d4:02:cb:0b:91:b6:e3:
e8:f3:d6:a1:b1:41:d6:66:39:42:8c:d2:4b:16:76:
ef:58:52:79:3c:3e:f7:64:a3:76:7a:f5:fd:b6:69:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:AA:79:67:C7:A9:59:2E:4B:DF:86:30:CF:55:36:02:B6:B3:DF
X509v3 Authority Key Identifier:
keyid:4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:70:92:f3:ea:99:b9:8b:53:79:7b:4d:83:f7:96:7d:5f:e1:
15:d7:b5:7e:90:0c:ca:65:ca:70:b9:67:f6:96:76:7a:65:53:
44:bc:cd:83:83:dc:d0:87:54:a0:6d:25:f2:4e:d5:10:07:fb:
ba:88:25:91:4a:02:8f:46:47:b5:67:74:1b:92:76:c8:14:99:
ab:1f:ce:1e:dd:49:bf:dd:f1:69:66:07:ce:84:0c:1e:96:7a:
6d:e2:41:a7:2c:0a:a4:46:64:e2:d3:c6:3c:2d:61:db:86:9b:
f1:50:7f:7d:2e:6c:0e:a0:8e:ea:07:8f:9b:6a:41:1a:68:8b:
35:f7:37:3f:fe:2c:f4:5f:45:5b:81:f6:8b:3e:74:57:ca:93:
c0:07:ca:89:d3:a5:8e:be:37:7d:0e:0f:5a:84:bb:b0:69:22:
be:e8:6a:cc:ae:f0:92:1f:00:19:9b:69:c6:a0:ec:51:f9:2b:
6c:34:43:8f:94:cd:0f:a5:19:8e:b1:af:47:9d:27:7d:b6:e0:
af:dc:2e:cd:2e:fc:2d:2e:7a:16:b4:24:7f:d6:9a:f9:e9:ea:
28:27:03:b9:64:88:37:01:d8:13:f3:70:a3:5f:50:3a:f5:47:
3d:cc:65:11:a0:55:93:81:43:2e:c6:f3:7b:f9:df:32:c1:5a:
cc:00:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:54 2026 by rpki-client