Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: oRBwKiwTRmPWlmuJPJUyhRxnNDyhMe2i2jnLFaOUMPM=
Subject key identifier: 51:68:93:40:E0:6C:1E:CE:6C:AD:0E:0F:C7:0E:9D:8D:E3:83:2F:F0
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019FA9AC1109B212427261F90CDB50A56905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:53 +0000
Manifest this update: Tue 28 Jul 2026 17:00:53 +0000
Manifest next update: Wed 29 Jul 2026 17:00:53 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: ym6VZryx/nqgb8vK+XDuAkZlHp5LNayYBtbT+A3GrNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:11:09:b2:12:42:72:61:f9:0c:db:50:a5:69:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jul 28 17:00:53 2026 GMT
Not After : Jul 29 17:00:53 2026 GMT
Subject: CN=51689340e06c1ece6cad0e0fc70e9d8de3832ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:57:d6:82:55:9b:b8:80:09:8c:05:62:98:
da:c1:5a:1b:e0:1a:bb:78:4d:68:58:c8:c3:cf:d0:
49:e3:66:92:c5:9d:78:66:8b:1c:7f:7f:6d:78:5b:
8d:6d:63:5a:1d:31:aa:bf:e8:04:92:04:56:17:99:
85:23:97:71:e2:ba:c5:07:2d:8b:71:9e:c1:74:85:
e9:02:42:db:5f:ca:67:87:8e:38:df:21:43:18:2f:
c2:18:9f:78:2c:22:07:b9:aa:eb:9f:79:82:b6:b8:
80:d5:f1:56:2b:21:68:a4:64:df:2e:79:a8:ef:9e:
97:cd:cd:b7:cc:b4:4f:20:25:55:8b:8d:67:d2:7a:
ff:77:96:bf:ff:6b:61:da:b5:83:a2:f2:6b:46:bf:
45:df:47:1e:74:1c:33:de:07:5c:09:a1:78:0d:4d:
5a:38:b9:37:d4:ba:60:9b:85:7f:97:68:30:5e:ab:
5d:0e:28:41:9a:41:00:f0:0e:9f:de:60:4a:67:a0:
91:59:17:63:d6:88:ad:88:c9:5a:98:76:f6:ae:44:
7f:3a:62:18:1a:64:2c:e3:b2:2c:21:21:49:4c:ef:
13:42:17:a4:d5:5b:02:ee:f6:f5:3f:35:1a:38:59:
18:2a:f2:84:6f:b0:64:49:36:a9:92:50:49:62:05:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:93:40:E0:6C:1E:CE:6C:AD:0E:0F:C7:0E:9D:8D:E3:83:2F:F0
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:27:c7:eb:89:61:76:3f:b6:1e:2a:9a:47:f8:8e:76:87:07:
d7:a5:55:18:1c:27:04:b2:08:27:45:39:a0:5b:e6:a0:03:de:
98:a7:a1:5b:c8:66:cd:70:bf:dd:22:ec:f3:41:e7:2d:82:30:
c9:73:d4:4a:e7:65:97:2f:dd:d8:8d:22:35:dc:57:69:c7:0a:
b1:36:33:ec:0a:b4:2c:de:99:61:c9:9d:18:85:dc:79:b6:56:
9b:7b:ca:6e:16:c4:2d:bf:8d:64:b0:57:5e:a3:0f:18:ab:5c:
48:bb:04:c2:ff:4c:8b:0e:31:f7:e9:90:05:fa:2c:71:67:37:
e1:e4:02:a5:e3:85:7f:b2:a3:b1:56:2e:4d:05:04:5d:ea:04:
48:c9:8a:cf:e6:8e:2d:dd:e2:5d:6b:53:64:4b:e0:67:3e:30:
89:a4:b0:5f:ee:7a:2e:d4:3b:a0:62:4c:88:66:d2:1b:b6:13:
62:ad:fa:ac:9a:03:db:db:44:2a:d6:6c:94:f9:1d:ec:e1:e4:
6c:d8:c4:4b:5c:bd:8c:be:41:b7:3e:de:42:9e:f2:90:db:a5:
13:d2:3e:06:d0:1d:66:81:91:53:0c:5e:1e:e2:7d:28:b5:4c:
12:ef:43:66:2b:2d:25:5e:11:00:ab:6d:f3:a7:a8:ae:5c:da:
b5:5c:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:27 2026 by rpki-client