Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: 6SAYonhZQsMxTCX9WTE/dthKsUTL1NDR1A3ilBsEwvs=
Subject key identifier: 1A:03:CD:4D:0E:3A:1E:01:9F:0C:16:91:E9:AD:48:BC:45:CC:C6:7E
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019FACE3BF6B42965975DD1BF35BA0FAFEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1758
Signing time: Wed 29 Jul 2026 08:00:34 +0000
Manifest this update: Wed 29 Jul 2026 08:00:34 +0000
Manifest next update: Thu 30 Jul 2026 08:00:34 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: oIM/6GALgQRu5vAA09Sf0cZxDZzmfeKBF8p8Hzh6Lww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:bf:6b:42:96:59:75:dd:1b:f3:5b:a0:fa:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jul 29 08:00:34 2026 GMT
Not After : Jul 30 08:00:34 2026 GMT
Subject: CN=1a03cd4d0e3a1e019f0c1691e9ad48bc45ccc67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:87:32:3e:32:3e:42:45:09:ab:e1:2a:a4:
f5:4c:c4:e5:43:a6:38:1c:3b:44:0f:59:05:7c:14:
8c:1c:2b:61:af:96:52:90:8c:5f:e1:f7:a4:32:d0:
65:67:5e:fd:0f:b0:c7:6a:85:1a:75:46:45:0f:e5:
f3:b9:41:e0:21:e4:39:4e:db:7a:09:c0:a1:07:96:
3d:fa:5f:e5:ca:85:c3:a2:be:f1:c6:a2:71:1a:09:
88:46:22:55:f0:02:ec:26:47:0d:87:d6:4a:b8:97:
1c:9d:3c:0e:33:16:06:a4:65:95:e7:c5:36:be:76:
92:fc:93:bf:59:b4:43:e2:15:63:d2:9c:3b:5b:a2:
04:e3:a8:80:a9:53:cf:1d:9c:99:ca:1c:97:78:33:
57:cd:3a:7f:85:78:1a:56:5b:1b:84:ce:fc:fe:4c:
55:a6:00:f6:2b:9b:ef:ec:e0:9d:ee:ca:98:9d:3d:
62:06:50:64:c6:8e:8b:ae:fb:f4:8d:c7:24:79:24:
6b:03:cd:75:78:84:67:8d:12:8c:82:cf:c4:64:19:
16:47:a3:05:71:a1:c4:40:38:c9:28:d0:c0:26:02:
3e:eb:97:94:21:27:09:3c:40:57:dc:02:ef:71:f6:
50:47:dc:22:84:56:f0:23:c4:2a:d3:1c:b1:eb:7a:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:CD:4D:0E:3A:1E:01:9F:0C:16:91:E9:AD:48:BC:45:CC:C6:7E
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3b:ec:70:c2:3e:e6:d1:fc:bc:9e:ae:9d:dc:a8:5d:eb:18:
b5:7e:12:fd:dc:35:f7:0c:42:98:45:b1:8c:4f:20:7b:87:7e:
cc:d8:f8:f1:96:96:b0:86:ec:52:cd:f9:35:2c:5a:23:55:18:
9c:0b:b8:f9:02:af:ab:95:65:5a:9e:7b:54:16:af:b3:67:cb:
bd:73:cf:9f:ed:23:0a:d9:37:1f:45:75:72:5e:56:6d:da:81:
e2:6f:ba:bb:9e:ae:85:88:31:c9:63:cd:6f:bc:04:22:91:92:
04:27:76:0e:f1:af:1a:6c:e0:e3:e2:51:9a:3b:0e:92:d2:41:
16:27:03:0e:cc:70:03:c7:62:5d:16:47:00:8e:1b:db:69:01:
c1:98:48:b6:99:80:96:d1:71:88:ed:c9:d0:37:ad:19:b6:b1:
e2:8d:78:d3:c0:15:51:97:e1:66:a4:47:e2:ef:3b:ec:30:8a:
e9:14:b6:e7:79:5c:fd:4b:9e:72:63:e9:24:6c:94:cf:a1:0c:
75:ed:e6:3d:a9:6f:e8:58:ca:32:8d:10:3c:af:52:b0:a2:8b:
f0:5d:2a:32:59:2c:aa:d7:6f:8e:23:dc:f4:db:34:72:1b:68:
e9:9c:07:5b:c9:aa:c2:3a:d3:2a:39:d2:d2:14:4a:3b:2c:ea:
1c:22:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:44 2026 by rpki-client