Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: Sx+lt7kHrKeK1mLayTbP69+n2wFh97Pq+id9LJiBnzA=
Subject key identifier: 32:D1:62:C0:27:B1:E3:A8:ED:08:20:1D:33:1F:18:9C:E8:7E:49:B2
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 019FA8995DFF1FD25E95CDED5D9954EFBA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: T7RtOfYzrCzXIzsN8SAzJj6Z4lOjgyl4MtEr5o9pkI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5d:ff:1f:d2:5e:95:cd:ed:5d:99:54:ef:ba:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=32d162c027b1e3a8ed08201d331f189ce87e49b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:b3:da:66:8e:d3:88:c9:72:0a:3f:04:88:
fe:bd:ad:a4:10:13:68:4d:40:33:b4:54:cd:a3:eb:
58:6e:03:c0:0a:cb:c0:da:24:af:ab:8d:53:88:63:
ae:e3:e3:58:ce:da:ac:79:55:2b:23:2a:05:50:29:
1f:48:e1:89:a6:1c:4f:61:53:d0:ee:42:73:1b:68:
98:c8:ab:2d:66:32:e6:bd:84:d6:84:88:bb:41:6c:
96:22:de:b5:89:4a:bf:62:ce:85:1c:b8:24:37:dd:
63:b8:f8:b6:48:68:5e:b9:0f:71:b3:d2:e1:f5:5d:
88:9c:fe:51:0c:6c:b1:e6:da:9f:3d:5d:9b:af:b1:
7f:0c:ac:79:9f:bf:b4:91:a8:50:5e:50:bf:7a:1e:
a7:e8:07:f2:09:e0:e1:ba:98:57:73:d8:a3:9a:9c:
d0:54:d1:98:e9:e0:5f:f1:04:e0:6a:72:01:7a:23:
74:cd:8a:ce:43:35:51:d4:75:c1:bb:42:9f:fb:c2:
11:1d:fd:10:ef:95:27:27:91:02:b0:31:11:97:01:
b6:72:20:eb:26:c5:6e:90:f3:20:1a:63:fd:b5:64:
1d:2f:d0:48:06:30:e1:4d:26:7a:18:64:67:fe:5b:
11:0b:8c:22:40:38:25:09:df:68:91:b8:f2:b1:73:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:62:C0:27:B1:E3:A8:ED:08:20:1D:33:1F:18:9C:E8:7E:49:B2
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:c7:19:51:d0:a4:da:e7:17:f7:f2:51:9d:7d:45:25:95:
7d:b6:7b:31:79:7d:5c:28:c5:da:db:72:c2:f4:df:51:03:65:
ff:bb:ff:b2:5a:ab:e7:40:ff:46:4d:07:fb:18:40:aa:16:6c:
71:92:3c:6f:c2:86:f5:4d:d0:39:6a:6a:9f:7c:58:63:ef:8e:
b7:31:6e:2c:fc:57:c6:ec:8e:5e:c7:8f:29:39:65:1e:f1:13:
74:47:0f:ca:27:d0:39:9c:67:28:6b:08:ec:70:53:ef:aa:1f:
92:0e:bf:9c:8f:eb:eb:fe:95:de:02:1d:a7:7a:51:fc:30:ce:
dc:55:1e:44:f4:f7:e9:cd:5a:9d:d7:63:47:4d:30:d1:08:f4:
45:25:2c:1e:c4:dc:01:d9:58:85:68:a0:8b:42:90:3e:7b:6e:
22:0c:81:bb:dc:1c:4b:fe:23:e8:d9:de:c3:b7:f8:17:d6:db:
7b:ab:19:e1:5c:8d:13:33:69:88:43:45:bd:2a:e6:db:33:50:
0b:1f:a9:7b:39:58:a9:be:12:0e:00:66:2a:9f:5a:f4:08:73:
d9:3c:f6:b7:46:65:7f:da:57:41:ff:0e:c3:4e:52:52:c1:98:
78:22:bb:b8:ee:4e:79:03:8f:b9:c0:86:3d:1f:ee:8f:e9:c9:
5e:1e:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:36:39 2026 by rpki-client