Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: SKMNjRdyhJaAknu1sK+04Js0d6iSgG5knBBL8KuC18g=
Subject key identifier: 98:56:FE:D0:14:6B:15:88:D7:35:3F:AD:CF:E0:88:16:7B:0D:D8:FB
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019F93923D8759107C930E33A662E1B5B06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 10:01:02 +0000
Manifest this update: Fri 24 Jul 2026 10:01:02 +0000
Manifest next update: Sat 25 Jul 2026 10:01:02 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: Y6j9nFB8ZIYl7srsp8GEyfa+8PloeMloarpG+xUwz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:3d:87:59:10:7c:93:0e:33:a6:62:e1:b5:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jul 24 10:01:02 2026 GMT
Not After : Jul 25 10:01:02 2026 GMT
Subject: CN=9856fed0146b1588d7353fadcfe088167b0dd8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:7e:56:60:31:2e:5a:51:ae:12:97:5a:56:
f3:44:b0:d9:b2:3f:b7:a3:10:0d:16:b7:9d:1c:2f:
ea:02:a0:5e:a6:5d:94:90:d7:04:30:22:d5:b1:f7:
5a:75:41:c2:6c:f5:d2:87:15:f0:27:e5:0c:9a:58:
3f:eb:5f:99:74:80:ce:a0:d9:24:41:79:e3:77:71:
3d:02:5b:a1:8f:2c:e2:95:32:35:16:41:86:cd:2f:
7c:09:09:9f:9a:cb:0f:5f:c3:6f:71:b1:41:af:42:
60:0c:f1:3f:7f:97:e0:c4:91:dd:2c:0a:70:46:69:
da:4d:62:15:31:6c:7d:41:4e:f6:ee:39:ad:66:ad:
47:a6:44:5e:2f:02:19:13:02:1f:20:88:74:a6:f5:
f4:6e:bd:d7:d0:de:31:f3:b9:d5:dc:69:0d:65:9d:
61:fb:5d:9b:64:6f:b0:89:d7:7b:4b:df:26:55:10:
7b:3f:bf:5e:76:50:33:5c:da:0c:23:e2:83:ad:80:
6a:9e:68:a0:8d:9b:cd:3b:3b:cd:2b:5e:92:5e:2d:
27:f7:ee:22:b9:80:91:86:b4:71:a9:49:fd:7c:be:
cd:f4:77:03:66:0c:65:99:3d:e0:ab:3b:9d:8e:23:
f8:d2:83:ac:74:e9:14:b2:e0:58:3c:86:0a:b8:cc:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:FE:D0:14:6B:15:88:D7:35:3F:AD:CF:E0:88:16:7B:0D:D8:FB
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:0b:43:3f:45:77:7f:e8:20:f3:25:fa:70:92:f8:fc:b9:
e4:6b:a8:0a:cf:e9:2c:a5:c3:34:42:e8:c5:ee:f8:64:05:37:
1f:2d:30:8c:ba:51:4e:90:8c:c9:10:15:af:73:6a:79:04:8f:
50:d3:9a:9d:ce:5a:dc:27:3a:7a:4a:47:43:1c:3b:f0:7b:36:
4a:e7:a5:01:90:a2:db:05:3f:b3:16:d8:13:0a:2c:cb:c9:db:
a7:fe:a9:07:05:32:aa:00:42:96:f4:f3:ed:4d:4c:e0:5c:19:
59:f7:03:20:a6:26:38:df:51:40:f3:25:9f:35:8b:14:14:b2:
74:85:99:06:1b:1c:cd:da:b2:de:5f:cc:ed:e7:1d:0a:d4:66:
a7:46:97:33:c2:cf:93:e4:e8:f3:18:a2:d3:79:29:23:e1:ae:
35:7e:a2:6e:33:c5:44:b8:01:80:5e:a9:5a:c8:3c:21:12:5a:
89:27:93:06:1a:76:f7:fd:da:1a:f1:6d:95:79:1b:f0:e2:41:
8f:27:eb:46:b8:a3:dc:d1:c1:34:55:dd:09:c9:93:15:03:70:
ed:78:41:1f:19:61:d4:a5:b2:c4:e6:df:fc:5a:e3:45:b9:46:
75:1a:d9:8c:1e:a5:4d:75:e3:52:b5:94:b8:ec:a6:26:07:53:
a7:07:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:58:31 2026 by rpki-client