Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: RJ5x0pMlUy97tY5QYKLfp8FWQtxzConhhFwwxDBEgdA=
Subject key identifier: 40:03:D1:AB:31:F5:92:6B:5A:D6:0F:92:94:BE:D7:50:05:BA:31:D5
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019FABD0D759BB61AA94ED5FAE0ACB523767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 03:00:17 +0000
Manifest this update: Wed 29 Jul 2026 03:00:17 +0000
Manifest next update: Thu 30 Jul 2026 03:00:17 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: E+nzily76vyKkr+R4UvqdW7TY6RucDJZ2KR9Bqea/2k=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:d7:59:bb:61:aa:94:ed:5f:ae:0a:cb:52:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jul 29 03:00:17 2026 GMT
Not After : Jul 30 03:00:17 2026 GMT
Subject: CN=4003d1ab31f5926b5ad60f9294bed75005ba31d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:a1:b5:c4:3c:af:42:24:3a:34:c7:74:d4:
01:4f:2c:a5:b5:0f:60:e0:e1:de:a3:27:0d:84:83:
a7:3f:b1:8f:57:90:06:e3:da:91:7c:04:f9:e4:75:
ce:1b:d5:dd:0d:12:98:05:5a:77:33:be:7a:37:49:
33:c9:2b:a4:c9:ca:88:8a:cf:91:51:6d:d3:c4:7a:
9d:91:38:d0:5c:44:cd:fb:ed:70:34:14:65:58:39:
2e:b2:45:33:b8:ed:24:0e:3b:0c:45:52:7b:23:47:
d4:e5:e2:22:d5:07:86:e5:7f:61:27:a9:0c:52:16:
3a:69:2a:6e:4c:79:30:26:6b:62:48:35:4f:ad:e7:
88:c4:74:4d:f4:c4:4e:36:17:e9:65:04:22:eb:1e:
40:75:a6:e5:b0:26:d6:88:f5:a6:9f:0c:09:89:72:
fe:c5:ec:94:c8:23:e6:50:ea:ce:47:bf:e1:2f:a7:
22:b9:5c:bd:c4:e3:6d:cb:4c:69:9c:cd:3f:52:da:
a2:bb:b7:d6:6e:d7:28:7b:52:29:4a:7b:72:b1:14:
6d:d7:6b:9a:20:a1:e3:a5:5a:67:30:75:72:3d:65:
17:11:ac:0e:d0:5e:98:a8:f3:9b:48:3a:6e:86:fb:
ec:49:4c:69:fd:68:b8:be:7a:28:4c:e1:51:d1:6c:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:D1:AB:31:F5:92:6B:5A:D6:0F:92:94:BE:D7:50:05:BA:31:D5
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2a:0b:d9:50:d9:b0:5f:7d:a3:86:45:10:5e:9a:ca:4b:4c:
3b:26:9b:02:d6:df:1b:c5:9d:36:31:bc:0d:34:67:7d:7f:4b:
55:ed:26:85:75:a5:e9:4d:9d:af:d2:ab:db:be:89:df:6b:3b:
6d:58:85:30:8d:74:b2:8b:eb:56:88:e2:9a:c9:68:45:86:85:
8e:ed:44:48:98:c9:bb:96:ea:0f:5b:df:73:09:2c:86:b1:48:
b1:cc:a9:c4:46:bf:12:28:75:f2:a8:2a:ff:9a:a7:8a:82:4f:
8a:77:8a:96:f5:54:10:ce:c8:03:b6:a8:e2:76:39:99:06:4e:
b7:d3:e7:ae:4c:1a:80:13:05:6f:c4:b8:1e:73:e1:e0:3e:2a:
ad:db:c2:53:d9:c5:88:b6:50:93:0b:0e:45:22:c1:48:cf:50:
af:fc:20:41:93:cc:98:f7:3a:46:d6:95:56:5c:78:e5:ea:f6:
04:f5:df:e7:59:82:b8:b6:ab:21:b7:b5:fb:94:e9:06:bf:62:
b5:bc:5e:25:59:ef:29:82:ff:45:81:d4:dd:a2:f4:73:f9:f4:
2f:56:4d:e2:48:b3:be:ea:43:17:1c:85:9f:32:e9:a0:2d:d4:
4a:f4:cf:88:64:6e:9d:11:0b:0a:32:63:c9:38:f7:aa:86:3d:
16:15:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:10 2026 by rpki-client