Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier: WD8gZwij49unMGkNimJOzJJ+qagJmj4P7waeOnDN/FY=
Subject key identifier: 59:28:60:8B:94:F7:68:0A:E8:F9:AE:73:AC:0C:5D:BF:0E:88:5E:61
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial: 019FA7BD703F0E6A017EBBC2F70B352E66AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number: 027C
Signing time: Tue 28 Jul 2026 08:00:37 +0000
Manifest this update: Tue 28 Jul 2026 08:00:37 +0000
Manifest next update: Wed 29 Jul 2026 08:00:37 +0000
Files and hashes: 1: jWmjtGD2Z4RaU3asc-wZbXQbm6s.asa (hash: bGy022JMTuJ7OIunwosKl/bvxi77UE2f0xMastYG87k=)
2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: vM6R4MywJ2A8elGJWCfu/AbihVUB84P1LMGiDqA8JTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:70:3f:0e:6a:01:7e:bb:c2:f7:0b:35:2e:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Validity
Not Before: Jul 28 08:00:37 2026 GMT
Not After : Jul 29 08:00:37 2026 GMT
Subject: CN=5928608b94f7680ae8f9ae73ac0c5dbf0e885e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:2b:e6:bd:25:f2:a7:f0:02:d2:a5:ba:84:
ec:d4:ba:97:84:e2:0c:8e:9c:f4:95:d3:da:8d:83:
9b:87:76:a2:0b:94:c9:b4:01:57:2f:2a:d2:e9:02:
da:95:9a:d7:7d:72:a5:2b:30:bc:fd:ca:83:20:a5:
6d:62:61:35:2d:ae:08:6d:d7:68:b8:42:88:2f:ca:
11:72:c5:0d:75:6f:41:b6:05:cc:a9:01:01:78:f0:
95:e0:b2:98:66:44:d1:5f:f0:74:8b:7d:93:03:97:
02:43:7c:d8:c1:e4:82:00:7f:ac:a6:5c:ea:db:04:
9a:d7:c1:6e:ed:9e:f1:a9:e5:e4:da:5f:84:35:f7:
59:68:40:d4:5d:71:57:79:6d:a7:06:3a:b1:ca:07:
02:b5:97:7e:86:5a:fd:7d:ec:a2:40:45:a1:6f:55:
b2:11:15:25:4e:c7:5f:88:dc:4e:ec:66:8e:94:f3:
eb:72:04:c3:5f:f9:da:69:6e:29:fe:df:70:1c:2d:
a4:38:53:1b:b4:5b:5c:e2:78:e9:20:fd:ca:07:ce:
72:d4:99:8d:1b:f9:c0:db:29:36:4d:50:25:0b:09:
46:3a:d6:b3:79:3c:bf:ef:6a:9b:57:a4:65:fb:7a:
f1:68:92:5e:02:bc:eb:1c:ff:2c:1c:c6:e6:fc:e3:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:60:8B:94:F7:68:0A:E8:F9:AE:73:AC:0C:5D:BF:0E:88:5E:61
X509v3 Authority Key Identifier:
keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:d8:4f:54:2b:93:67:cc:17:46:5d:77:d9:bb:23:b6:07:
4a:25:4f:0a:bc:49:67:a9:52:6d:3d:69:ed:3a:af:20:23:a4:
1a:30:71:70:42:28:b3:6b:2e:8c:b9:e6:92:57:1a:52:d5:58:
d6:0f:70:cc:0c:a6:52:41:a5:a2:22:e6:03:70:ec:de:30:b8:
b7:aa:ec:9c:a2:01:15:17:ea:85:3a:01:79:1c:6e:22:26:64:
12:86:82:d3:24:30:3c:3e:c3:87:6b:d4:d5:35:36:96:80:f8:
5e:52:14:47:3e:95:58:e4:4d:f3:9d:f7:1c:eb:6c:99:6f:c0:
dc:96:f8:56:ec:b6:e5:f4:51:4a:f0:b0:1e:23:5f:19:28:e5:
34:c3:65:0b:5f:9f:d1:e0:04:cc:c3:e5:25:bc:73:50:ce:8f:
1d:8b:33:d3:71:32:da:c3:04:9b:25:f9:f6:11:0a:6c:f2:b4:
26:17:35:59:bc:7f:f9:a7:80:50:2c:b0:2d:79:65:41:0e:77:
94:08:a2:61:16:38:ce:05:c1:9d:5a:42:a0:c3:de:16:08:31:
8f:00:fa:95:c1:eb:59:f6:71:fc:8e:05:fa:03:8b:29:ef:f7:
00:a8:f1:82:22:1d:e8:bc:ab:4e:97:1f:88:dd:1a:d9:80:1b:
e1:66:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:55 2026 by rpki-client