Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: OK8Q37ukqHWie4CDp9H6qwe+yr3ITyw/5Q1VaOoM/n4=
Subject key identifier: 31:E1:AF:85:95:1D:E3:CD:FA:42:82:8D:58:0F:DB:2E:52:08:21:C0
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019F93240C8FC1DC401E83B2AC426355F487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 03AA
Signing time: Fri 24 Jul 2026 08:00:40 +0000
Manifest this update: Fri 24 Jul 2026 08:00:40 +0000
Manifest next update: Sat 25 Jul 2026 08:00:40 +0000
Files and hashes: 1: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (hash: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4=)
2: JD-_RMbQpF-pKZOnXs4mYFjjidQ.roa (hash: kFiezG9HvRIWsHO1y6hBEeY1FqGlLKVulu5N0PlRmH8=)
3: mOOpQixSR_G0BkBLz_pfNJqCpPc.roa (hash: J7597tV7KTTIerXR1FKozSh7ddWeTNBPbVoOCxMRSXM=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: 6+NWlKWpJP6AfKDeN3+JCtZF4i6A7Fk2gQVYKqI3F+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:0c:8f:c1:dc:40:1e:83:b2:ac:42:63:55:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Jul 24 08:00:40 2026 GMT
Not After : Jul 25 08:00:40 2026 GMT
Subject: CN=31e1af85951de3cdfa42828d580fdb2e520821c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:92:98:3a:d3:6f:a5:9f:22:58:92:9a:fe:
fb:65:7a:8a:91:a2:d2:56:82:b8:21:f2:70:9b:a1:
c5:f4:af:04:7e:a3:7c:47:eb:85:2f:75:1b:58:13:
ca:a4:57:31:17:02:27:06:3c:ad:6b:df:bd:74:76:
28:1e:17:1c:25:73:9f:af:a3:e1:c5:92:7e:32:d8:
41:f1:df:4e:96:26:8d:82:0b:1d:d2:b3:e7:a0:0f:
af:2d:4b:1e:dc:8e:7b:7f:43:7d:aa:ee:78:c9:1a:
0c:f6:00:79:4a:ca:40:33:a7:8b:dd:4d:26:81:a7:
c6:0c:cc:61:ec:a3:85:67:37:bf:06:d7:7e:ad:c6:
e0:bd:8e:4f:37:da:d1:65:d4:8d:ea:cb:88:59:e3:
6a:bc:48:66:4f:2f:75:a2:33:0c:fb:5b:a1:4e:9e:
e2:41:8e:aa:72:47:35:4b:32:ea:4d:bf:84:b5:c2:
5f:46:b7:66:8c:48:cd:00:b4:dc:40:67:aa:7d:d8:
ed:5d:a2:ee:85:9c:69:e7:12:5f:0e:91:62:67:52:
95:ef:27:54:ce:ff:33:f7:ea:3b:82:b3:a1:6a:33:
ea:ac:a9:52:dc:d4:c7:26:ae:db:ab:43:cf:53:22:
4e:91:9f:dc:bc:32:a8:61:00:d2:55:8f:02:93:0e:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:AF:85:95:1D:E3:CD:FA:42:82:8D:58:0F:DB:2E:52:08:21:C0
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:75:13:e1:ef:18:1e:ec:e9:a1:d9:18:03:3f:6c:8c:b7:e9:
1f:2c:0b:51:10:a6:4d:34:57:20:2e:02:43:ed:cc:c8:f4:04:
94:63:1b:88:13:d6:bb:97:46:6b:35:ee:db:9b:6d:21:b0:d4:
bd:47:84:7c:84:8d:a7:b7:84:15:da:9b:1f:79:b9:9b:7f:6e:
02:f2:8f:e8:53:cf:99:ac:ae:1b:ad:74:c5:28:fa:e6:54:e8:
44:d9:5f:b3:82:5a:dc:a6:8c:5a:80:e0:a8:f9:67:28:43:3b:
60:b2:71:75:8e:e6:d4:33:01:b0:71:56:e9:0a:5e:aa:bc:21:
03:31:7e:3f:bb:53:62:6a:bc:fc:76:e8:13:cc:8b:cb:94:0f:
33:d8:65:01:3f:cc:d5:ff:65:29:56:3b:f6:1c:a5:03:10:83:
c0:4e:7a:a7:e4:9d:cd:43:bb:2c:33:60:71:8d:da:ce:0c:39:
dc:39:39:72:92:0a:5e:9d:49:4f:ec:3e:ea:75:d3:c0:ae:de:
75:21:b3:7a:63:5e:13:86:8f:70:97:c3:a4:ad:3a:ea:c7:33:
47:6f:7a:75:9a:4f:c0:ed:b0:3b:d8:53:6a:c7:f4:06:46:18:
e3:71:83:1c:77:c6:7d:35:75:1f:2f:5c:e5:85:bc:4a:30:ac:
a7:30:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:51 2026 by rpki-client