Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: MX1stKlZ+G3JDgVg1y2k/XxjX9DB1JCm8K6qCgAjeGw=
Subject key identifier: F1:11:A3:E6:41:B9:26:35:D4:7B:85:AD:1E:36:5C:44:5F:37:91:2C
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019FACAC9C86567BD48A51D1D0F477E7C415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0D2F
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: sLzf8asfOdgGWQi/NGYv6mtr6M3sCtG8maiAnfq1eS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9c:86:56:7b:d4:8a:51:d1:d0:f4:77:e7:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=f111a3e641b92635d47b85ad1e365c445f37912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:e8:c3:06:fa:91:66:5e:62:2a:a1:84:cb:
1a:d2:c0:e2:05:bd:0d:a9:84:83:20:d4:83:72:27:
e9:1c:c3:24:cd:6b:8f:6f:9b:98:8c:e7:10:6b:bd:
84:8f:67:8c:f2:f6:58:b9:1e:69:4b:72:e4:a6:35:
55:60:f9:1d:35:e3:55:f8:37:dc:9b:4a:e2:9d:67:
3d:de:cc:69:25:e7:1c:44:c2:1e:1b:7a:9f:9d:33:
d9:7f:2a:c4:2c:08:24:a8:38:6c:e7:58:56:11:6c:
b3:b3:88:fd:cd:2b:ec:be:0f:fa:ec:ca:cb:1e:1d:
b7:79:07:cb:7b:de:10:75:d5:9b:16:c7:4a:ee:1d:
23:0b:e1:65:ef:ae:9c:43:e3:7f:65:37:f3:ed:7f:
2d:2d:94:2d:64:a2:c8:a3:c5:da:6f:0d:b4:ab:34:
27:75:08:34:fa:77:12:a6:8d:27:01:09:2a:02:85:
94:55:ae:a4:e8:af:89:cf:8e:a4:28:81:4a:9e:34:
dc:8b:b2:30:26:7a:75:6a:91:f8:8e:af:ba:a1:50:
86:a6:98:62:89:5a:79:15:d6:ce:09:3c:52:0a:ab:
25:9f:c9:b0:e8:6a:40:61:ea:92:fa:6b:cf:82:e5:
8a:b2:2f:9f:7d:f9:e0:78:23:1b:a3:a1:56:9e:da:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:A3:E6:41:B9:26:35:D4:7B:85:AD:1E:36:5C:44:5F:37:91:2C
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:d9:3a:88:ed:ea:18:3a:18:bf:46:ca:35:09:ea:d3:3c:
87:61:c4:77:73:e8:93:3c:35:a4:03:13:12:d9:b6:85:59:c3:
dd:04:68:6f:33:8d:72:8b:b2:21:d4:2f:86:e2:ae:e9:05:d8:
cb:12:b3:34:81:65:71:93:41:43:4c:a4:5f:40:49:0c:24:2c:
28:92:0e:1c:ac:c6:d8:ac:2d:5d:58:ca:e5:a9:44:e8:9e:80:
92:9c:b1:cb:4a:9c:22:0e:07:09:17:c5:b5:1a:bd:ff:bc:4b:
d0:7a:c1:2e:f5:82:27:5a:28:21:11:80:92:f4:bc:04:25:b4:
74:d2:ce:7f:57:5f:b1:e7:49:c4:06:d6:06:ac:ba:f4:a7:6c:
39:54:2e:d9:0b:dd:34:c4:75:4d:5d:8a:21:79:50:13:6a:2f:
06:d9:79:71:4d:8e:f9:6e:6e:80:24:fd:2a:37:9e:cf:84:03:
f3:69:e7:fa:3c:98:90:d2:f7:c6:3c:a0:72:36:21:6a:d4:da:
e6:58:19:cc:b1:49:66:81:b6:8e:80:7f:3e:d3:0c:4f:6e:d5:
f1:f9:92:8b:6d:e1:ec:12:0e:56:6b:c2:a8:df:67:d4:17:5f:
3f:05:2c:10:96:c5:39:ce:e6:4c:cb:6b:de:18:c1:ac:82:e4:
98:f5:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:45 2026 by rpki-client