Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: KM3pB8HXOgasCwkKO9rUfMkKqj4ZopLCQP2HPMQbRu0=
Subject key identifier: E5:AD:76:63:6A:F6:53:7A:8A:7B:F4:C4:09:C3:54:A7:FE:E5:D6:90
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019F921149566B2703D510D98ADB2766F42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1A29
Signing time: Fri 24 Jul 2026 03:00:33 +0000
Manifest this update: Fri 24 Jul 2026 03:00:33 +0000
Manifest next update: Sat 25 Jul 2026 03:00:33 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: DTzs8ipXwaORSs6UUCMfM7wv6wOJZGpvWfP7wgEjshQ=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:49:56:6b:27:03:d5:10:d9:8a:db:27:66:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jul 24 03:00:33 2026 GMT
Not After : Jul 25 03:00:33 2026 GMT
Subject: CN=e5ad76636af6537a8a7bf4c409c354a7fee5d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:9e:1f:06:87:e9:15:33:ee:1e:7a:ad:cc:
b2:90:a2:41:70:4f:d2:7f:d2:67:39:74:97:ac:81:
05:a9:49:52:5d:14:65:26:69:d9:eb:fe:c2:87:c8:
41:6f:06:9b:f1:9d:eb:22:b6:97:f9:4a:b5:42:e4:
77:95:9c:4a:4a:30:eb:29:54:3b:50:f9:86:5d:07:
eb:b0:e9:01:c8:df:34:2e:4c:e5:3a:1b:31:04:b0:
54:88:80:0d:ae:8a:3a:27:e1:b5:2b:1e:32:1f:74:
e3:74:28:ae:8f:fd:c6:9b:32:29:73:06:94:c8:c9:
1a:90:d5:e6:3c:01:ad:22:19:f9:c9:91:00:20:97:
6a:82:33:58:73:83:14:2a:8e:39:80:12:da:b9:7e:
f2:3c:aa:10:b0:6c:b4:e2:ef:21:ec:3d:1b:a6:53:
fa:ff:2a:a8:3f:8d:9b:9f:f8:33:00:23:c4:6b:de:
2a:de:21:16:d7:81:4f:8b:e2:b9:db:af:e5:7e:6c:
18:7d:c6:a2:e2:bd:4b:68:a1:03:05:1c:fd:79:9a:
44:2f:bf:1d:0c:91:f5:40:66:75:61:b0:9c:4c:7b:
51:71:af:e9:b0:ab:3a:c5:ec:6a:c2:90:b0:bb:aa:
2e:f5:eb:34:2e:9f:da:5b:d6:03:bc:e9:03:d9:9a:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:76:63:6A:F6:53:7A:8A:7B:F4:C4:09:C3:54:A7:FE:E5:D6:90
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:49:57:e7:9f:de:fd:34:c3:ec:c0:f7:97:77:bc:7c:e7:80:
9c:22:ed:50:69:91:61:fa:70:19:95:32:2a:df:d8:c3:59:e4:
02:6b:36:06:b8:39:4b:da:5f:aa:61:0f:38:63:10:9f:c4:93:
ac:a3:5a:2e:bf:c7:a3:af:87:8c:d6:cf:f5:f4:d2:14:b2:a9:
41:16:d4:38:54:6f:8f:d3:13:c5:3b:24:13:13:ad:fc:e5:8c:
dc:11:5a:55:21:37:b8:09:fc:14:88:46:d0:0c:1b:8a:71:70:
b3:b8:04:73:d3:4f:ce:ad:69:19:fd:93:ce:19:b3:c7:d6:7e:
d4:d3:92:00:d7:b7:cd:41:2c:3b:8e:1d:8c:21:2a:5f:8a:0a:
74:b5:a8:d7:58:7b:aa:66:cd:6d:8b:55:d6:55:bc:79:f6:d1:
8a:6c:ac:c5:96:05:1f:ba:a8:63:b8:a6:07:a7:fb:3b:d0:04:
82:a6:b7:40:f5:78:fc:96:8b:68:bd:b2:25:fa:f1:d9:59:7a:
1c:92:6b:e9:1a:16:f0:8d:86:6f:7c:4a:e0:b2:3f:de:b7:66:
ae:b1:5b:12:4e:36:37:e7:7e:e5:d1:57:74:3b:fe:2a:aa:a4:
02:5a:71:0b:5e:f5:1a:1d:9f:6b:b9:82:3e:bd:9a:be:42:9d:
f7:ed:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:47 2026 by rpki-client