Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: X3nylCJ1NeY3Yc6ncxoaUNhCyaR5PnNLg+ZDS0aSNo8=
Subject key identifier: 59:FF:E2:77:BF:FF:C9:AD:CA:46:EB:E4:6D:2D:28:A6:A0:FE:68:64
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019FAABED96A5C144EFFA71E65806FB459A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1688
Signing time: Tue 28 Jul 2026 22:01:01 +0000
Manifest this update: Tue 28 Jul 2026 22:01:01 +0000
Manifest next update: Wed 29 Jul 2026 22:01:01 +0000
Files and hashes: 1: 2cs6BtaFV3H5PXU6nZOA8Uu_NwQ.roa (hash: VpwFMCxf02N3s6qbKcrB7OwUNutAGhYjp7y72GSVaW4=)
2: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (hash: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: rIuhViGZJ57bO8zJc3eO7ZPAg81Z4BBv5hdNYVZl07c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d9:6a:5c:14:4e:ff:a7:1e:65:80:6f:b4:59:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jul 28 22:01:01 2026 GMT
Not After : Jul 29 22:01:01 2026 GMT
Subject: CN=59ffe277bfffc9adca46ebe46d2d28a6a0fe6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:59:8a:4a:bb:af:d2:f3:7a:29:e9:30:8f:
d2:e1:ba:ba:0c:2e:70:d0:b3:c4:e9:3c:c6:13:b0:
96:39:fc:02:6b:a3:a2:ea:ec:11:a9:bb:61:bc:75:
b8:94:6c:ea:df:b4:52:6f:0f:d0:93:63:48:4e:e6:
bb:c3:59:0d:7c:44:35:2d:09:d7:e3:62:92:bc:9e:
9b:2d:24:86:5f:7c:30:e8:79:35:8c:e7:ff:36:39:
68:7a:db:7a:a3:38:ae:89:5f:d8:e0:e4:06:82:ae:
89:fb:e1:25:a1:95:79:3b:00:3a:4f:f8:d0:89:c9:
9c:dd:be:98:4c:5d:c0:13:3f:6e:5a:a2:97:47:a3:
de:61:69:ed:39:6d:a9:36:f7:ec:f0:e1:1d:8d:1b:
c5:10:fb:f3:90:b3:08:76:f8:0e:e2:49:27:9b:cd:
df:79:55:00:c0:e5:55:2a:31:26:14:9b:d0:3c:4c:
52:45:a1:c7:b3:18:81:ee:9f:d1:ad:9d:b9:88:ac:
68:64:0c:b8:21:2a:f3:cb:ea:9a:0e:0f:74:52:c6:
3e:2a:91:70:62:bd:e9:27:e5:f5:35:95:ba:cd:bd:
d6:bf:31:27:c8:22:4d:90:d9:2d:27:f4:a1:0a:14:
7a:b7:be:16:7f:b7:34:95:db:d1:2e:10:65:e7:b1:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:E2:77:BF:FF:C9:AD:CA:46:EB:E4:6D:2D:28:A6:A0:FE:68:64
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:12:74:f6:3e:89:b2:50:05:90:b3:85:51:92:f4:9c:92:
d3:c8:f2:62:7d:94:01:d8:8e:19:1d:15:b3:00:1f:f0:67:7a:
25:7e:48:c5:37:54:39:5e:39:d0:fc:02:60:55:bd:af:3e:4e:
51:5d:66:24:0f:14:4a:16:cf:0b:b4:81:42:f0:37:39:ba:07:
ef:8f:6f:32:2d:29:5a:47:72:6c:c6:5c:3f:de:8b:30:9f:b8:
9f:f4:13:3e:39:c6:df:e7:01:8d:b4:12:f4:ee:82:d7:0f:42:
d3:b1:00:78:2c:56:55:5b:a8:76:56:fc:9c:4c:ad:58:1c:b7:
61:6f:1f:e7:b3:a9:ae:57:2a:a9:8c:08:d1:98:a3:28:38:52:
5b:f6:b3:20:ed:42:08:67:4a:fc:06:df:29:41:73:8d:98:84:
f9:e0:6d:56:28:cc:e2:eb:fb:d2:2d:7d:ef:68:f0:dc:8e:b6:
31:21:e3:12:41:fa:3d:9c:99:da:33:30:68:36:16:87:3f:51:
b7:de:11:59:ca:05:93:86:dd:98:0f:2d:d5:1a:4d:f7:6d:8b:
1a:4c:e3:2b:91:d0:13:46:1d:3b:4e:1f:68:9b:ff:27:fd:8c:
58:3f:4e:ce:fc:30:fa:1c:3c:de:0d:7a:f7:26:67:17:5f:e5:
d4:d3:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:06 2026 by rpki-client