Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: bS7NL6NS86c31p9/dYPCqMAX9O9Dlnj8a0Xf4UuChec=
Subject key identifier: 05:68:12:BB:33:AA:41:B1:7C:22:44:F3:E9:71:F0:3A:D8:DC:0E:53
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 019FA9ABD3EB51E9ED8F90526700ED28D287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 026A
Signing time: Tue 28 Jul 2026 17:00:38 +0000
Manifest this update: Tue 28 Jul 2026 17:00:38 +0000
Manifest next update: Wed 29 Jul 2026 17:00:38 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: NCC9ppCem/gbKG8DEGnOlexfS8JeNXG28xjimSH7LAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d3:eb:51:e9:ed:8f:90:52:67:00:ed:28:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Jul 28 17:00:38 2026 GMT
Not After : Jul 29 17:00:38 2026 GMT
Subject: CN=056812bb33aa41b17c2244f3e971f03ad8dc0e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:8c:49:f1:a7:78:12:07:50:9c:3c:82:a2:
2e:3d:31:f0:ab:98:ad:48:e6:7b:b1:b0:21:1d:e7:
41:b7:7f:42:66:3d:f2:32:e8:a9:31:fd:f2:24:75:
f4:0b:e9:32:36:22:ab:31:1f:89:a6:a2:5f:da:d8:
02:00:c8:75:91:9b:38:cd:4b:75:e6:42:79:4f:06:
b4:34:d3:36:7d:90:af:35:44:b3:75:f8:f4:1e:13:
2c:91:f2:47:5e:8d:a9:48:82:31:95:65:5a:3f:6a:
2c:1a:84:69:05:ba:bc:42:d0:0c:cb:26:ce:73:a6:
a2:0c:ca:f2:2f:63:ea:5c:e9:cf:59:3b:54:7a:8f:
15:1d:ff:62:f6:5b:3c:26:15:11:74:39:c2:74:69:
92:bb:a9:f3:f0:e7:10:bd:1f:fc:f9:d0:dc:75:5f:
dc:36:92:6f:de:99:a8:a6:8c:a4:43:81:5c:2f:74:
25:5d:00:04:ff:4d:26:90:57:01:09:a8:37:a5:6c:
98:99:fc:a5:4a:e9:42:ac:98:bc:90:a4:3a:59:2c:
ec:10:fc:75:74:2b:41:b0:64:58:0b:99:69:f1:a7:
45:26:7f:81:a2:80:2b:19:ad:9e:95:3c:32:83:a4:
f5:9a:55:e7:58:e1:fb:25:a5:cc:ef:4e:fc:4d:96:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:12:BB:33:AA:41:B1:7C:22:44:F3:E9:71:F0:3A:D8:DC:0E:53
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:de:ea:b1:dd:b9:dc:0e:60:c3:a9:3d:2b:a7:db:a1:f5:f4:
10:e0:bf:b1:8f:8f:81:9c:66:aa:39:d9:23:d3:32:a6:29:78:
65:f1:53:61:88:6c:4b:3f:32:4f:99:91:9b:ef:88:37:3a:37:
78:31:25:ff:ab:d6:7e:21:a7:69:27:4f:0c:e1:49:13:37:0e:
8d:73:f8:1a:58:24:14:78:b4:c2:6e:bd:d8:0f:42:2e:44:c8:
d3:16:0f:8a:fc:0d:e1:21:cd:65:c1:ed:a7:54:8c:95:d7:79:
c8:02:c3:f3:cb:cf:0e:b0:34:44:5d:bc:6b:00:f5:a2:3a:99:
10:8e:30:b5:a6:7b:fb:96:9f:be:d8:ce:98:83:dc:8f:f4:dd:
19:0d:db:b9:5c:19:5c:07:72:c6:0e:3d:22:75:82:cb:5f:c0:
78:81:0f:bd:72:2b:7c:67:2c:03:92:fe:13:f2:54:50:56:bf:
f5:6b:7d:b1:fd:9c:b6:80:41:c6:2d:77:9e:a5:1e:a6:e5:38:
84:ac:e8:54:a5:b8:5d:85:e5:60:f6:a1:38:a7:60:ae:39:13:
ae:f0:33:11:88:10:ae:5d:bb:a3:ec:46:e1:4d:0c:c5:d3:5c:
cf:1b:01:89:8b:f4:69:55:c3:1b:ea:e8:9f:f7:0c:4e:bf:74:
05:2d:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:05 2026 by rpki-client