Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: kOab/5kkFVb+HoUcIiLj9wF3NhAaYvRdXaSvwsCkJGA=
Subject key identifier: 0F:BE:13:74:EA:90:56:45:C4:1E:7F:3B:65:F5:59:9D:E6:FF:55:35
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 019FAED1D95B385326AF1F033C6ACAA864C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0AAD
Signing time: Wed 29 Jul 2026 17:00:15 +0000
Manifest this update: Wed 29 Jul 2026 17:00:15 +0000
Manifest next update: Thu 30 Jul 2026 17:00:15 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 4/dbXj6IrnvECiDox36nUAvUHCdkzWU/93z+DeIgr+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d1:d9:5b:38:53:26:af:1f:03:3c:6a:ca:a8:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jul 29 17:00:15 2026 GMT
Not After : Jul 30 17:00:15 2026 GMT
Subject: CN=0fbe1374ea905645c41e7f3b65f5599de6ff5535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:82:dc:a9:ce:c1:1a:cb:e5:8f:f1:e1:5a:
0e:b0:c2:00:4d:21:6b:d8:f9:7f:ea:6c:66:26:90:
00:2b:2b:cc:c0:7c:0a:5f:39:c9:3e:9b:d4:53:d2:
a1:3d:d2:f1:bd:98:e3:ff:89:34:36:12:14:7b:73:
67:07:ef:d6:63:8c:6e:eb:87:50:1e:8c:11:d6:9b:
da:0f:2a:99:d8:4b:68:ba:8b:78:ae:aa:ef:4f:8a:
16:63:a2:cf:ec:ea:b2:b6:2a:43:98:f9:15:4b:29:
dc:99:1e:99:77:48:f7:17:ef:ca:7c:39:cf:24:c5:
37:45:b5:cd:f0:dc:dc:98:ec:2d:b5:f6:09:36:6f:
db:00:04:a2:9c:96:dd:f5:9b:44:01:63:aa:85:4d:
49:1b:cc:00:ed:ab:d0:24:34:38:2d:11:f3:a7:7d:
bc:1e:d9:c4:69:4e:2c:f8:f1:da:07:0a:ad:93:22:
4a:f9:bf:95:f3:20:4f:62:19:08:60:02:ab:38:c5:
4d:c9:0d:0e:cb:20:a1:0d:00:77:54:2d:1c:ca:4b:
1f:fe:e6:05:16:2d:e7:8d:98:98:05:82:f1:10:b4:
0d:7e:fd:ce:ba:97:40:0c:a2:2d:75:c0:a0:da:95:
91:3e:d6:33:79:76:08:39:b9:8b:ba:7e:33:f5:c6:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:13:74:EA:90:56:45:C4:1E:7F:3B:65:F5:59:9D:E6:FF:55:35
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:ed:a9:cf:53:65:be:1b:92:46:7d:01:74:29:a6:8d:7c:
74:dc:13:50:07:5e:e5:7c:ea:54:8d:07:39:93:6f:a9:d4:e2:
0d:a8:d6:ee:13:0f:0d:51:62:5d:d8:2c:dc:36:8f:f4:5b:c0:
64:d4:b7:ae:b9:da:7e:01:49:55:58:13:9d:55:a0:f1:94:8e:
f2:d7:c2:5a:a7:a8:86:98:e4:80:e1:81:c6:00:36:76:fa:a3:
b1:ca:a7:16:ca:5e:f9:96:32:c4:03:0f:d9:f7:c2:2c:31:06:
62:35:23:09:da:16:fe:72:85:db:f3:91:8f:d0:56:bf:86:d4:
7c:2e:86:73:48:1d:3d:70:bb:02:58:45:ca:95:9f:00:78:d1:
86:f6:10:29:c8:03:19:50:40:01:76:4b:82:a2:86:ad:2c:f6:
10:00:5f:74:ae:4e:e2:00:c5:8a:14:bb:53:4d:8d:83:8c:fc:
17:54:21:1b:f2:c6:26:2d:38:ec:5b:d3:37:21:21:05:03:d0:
a6:fc:13:db:71:77:95:af:a3:8d:e0:5a:fd:38:a6:54:a9:4d:
15:c2:5c:04:43:04:a6:85:48:f0:f4:7a:7c:c6:24:fc:4e:cf:
63:42:c8:e3:22:05:8e:c2:84:ef:f0:3a:df:08:5b:42:6f:be:
1e:68:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:28:27 2026 by rpki-client