Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: 17phvFmVyb49oAhpKpc0YStkJZHzRltoj/hLKqHR7JM=
Subject key identifier: E3:D1:04:F2:39:10:98:8C:A6:96:D6:7D:25:D0:59:9F:D8:8A:56:96
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019FA86296B6B73389ABD179442A78088FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 019D
Signing time: Tue 28 Jul 2026 11:01:01 +0000
Manifest this update: Tue 28 Jul 2026 11:01:01 +0000
Manifest next update: Wed 29 Jul 2026 11:01:01 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: 7F+Kv+8JH9XOT76364JsZb0bYj13KxbnKGX1daq4nhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:96:b6:b7:33:89:ab:d1:79:44:2a:78:08:8f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Jul 28 11:01:01 2026 GMT
Not After : Jul 29 11:01:01 2026 GMT
Subject: CN=e3d104f23910988ca696d67d25d0599fd88a5696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:a7:7d:e9:76:bf:81:19:80:ed:93:93:ba:
6b:67:ad:d9:be:93:72:d3:63:78:b6:eb:7a:2e:99:
63:08:b8:e1:e3:d9:a4:c4:c2:bb:c6:60:88:11:9a:
94:ab:a0:d3:0b:ec:87:74:73:57:ad:d6:cf:20:68:
8d:ec:2b:dd:4b:f6:1f:ba:e0:58:49:a7:18:56:f0:
60:d2:d2:83:1d:f2:8a:bf:eb:0f:e9:bf:ab:47:eb:
91:db:5e:13:cd:58:de:51:29:73:0c:46:a1:98:52:
97:83:d0:7f:1a:f7:df:67:04:2a:8a:a7:78:8b:50:
e0:c9:9f:10:ab:8e:1f:73:3e:7c:de:d2:af:45:5e:
4d:3f:d5:4a:22:bd:cf:c0:5f:27:76:62:f5:f0:63:
bb:bd:6a:95:1a:e7:a1:7a:51:76:24:6b:9f:b5:21:
cd:1f:ff:87:67:09:22:fa:43:28:22:54:7a:a4:08:
5f:00:17:c1:e6:61:3f:c2:ad:a5:ab:f7:6e:0f:e3:
85:48:9b:0e:dc:11:a1:da:f6:e8:30:eb:6a:8e:69:
47:77:aa:cb:d6:23:b7:24:f6:ef:0b:21:89:52:58:
36:a1:5b:8f:77:a9:06:37:e2:c5:88:de:94:ba:ab:
a1:f4:79:32:e1:bf:f7:87:2d:fb:4e:b4:95:8c:09:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:04:F2:39:10:98:8C:A6:96:D6:7D:25:D0:59:9F:D8:8A:56:96
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:0c:92:eb:28:70:b7:a9:86:bc:d7:aa:db:03:00:f3:5d:
6e:88:06:9f:be:0e:f1:af:c0:30:9f:95:07:02:52:fe:6f:3f:
dd:f5:a2:40:15:d5:8f:c0:d9:57:fd:2e:c4:e7:45:92:d5:41:
d7:01:dd:c6:cc:6f:5a:f8:04:73:3c:cc:ad:b6:f7:b7:02:30:
0e:06:76:86:c4:40:66:9d:38:92:a7:e9:42:ff:08:4d:a8:4e:
2c:c7:14:59:e5:8f:99:5c:1f:67:b7:be:2f:2b:7f:f4:8f:f1:
c4:a7:f0:a8:7d:19:3d:75:f4:9c:59:11:2c:1f:4c:b0:ef:d1:
be:19:44:80:36:fc:e5:e1:1d:e4:54:f3:cb:b5:ad:1a:b4:d7:
4e:10:f0:51:8f:bb:b4:7a:a7:d0:f3:96:26:25:15:56:d6:b0:
bb:b9:8d:5d:e7:f4:4c:bd:7d:43:13:f6:1a:d2:0b:92:d4:62:
ea:c6:c2:08:9b:42:58:7d:eb:dc:8b:91:8b:b2:1f:b3:20:e0:
c2:4e:7d:c3:98:29:09:f5:55:c4:fb:ae:c1:5e:96:2b:0b:08:
3a:9b:f9:5c:0c:f5:60:25:d1:04:df:b7:ed:93:1b:06:77:6f:
f8:19:ea:e7:ff:ad:3b:85:03:3d:75:63:ee:0f:0d:16:1a:ac:
02:b3:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:15 2026 by rpki-client