Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: ApCIx12hQztMPYFU3fJiZCSVmy8501vpGtNb8bj7s28=
Subject key identifier: BF:FA:75:60:D0:02:CA:A3:33:18:CF:F0:3A:D6:36:5B:6E:73:AF:BA
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 019FAC76E3C1334678451C52EF4F3E883CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 15E1
Signing time: Wed 29 Jul 2026 06:01:40 +0000
Manifest this update: Wed 29 Jul 2026 06:01:40 +0000
Manifest next update: Thu 30 Jul 2026 06:01:40 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: FX4SeiAfVk1oJ3ZX0t___kVvznw.roa (hash: sXBIiV4q77E68XFfHYdEfXRYe3LlOJvfM3L5/gohbgE=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: zeRV4pqXYKLDdn7Kc8wUWXHkkqycuvB+0DdZ7dOY7IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e3:c1:33:46:78:45:1c:52:ef:4f:3e:88:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jul 29 06:01:40 2026 GMT
Not After : Jul 30 06:01:40 2026 GMT
Subject: CN=bffa7560d002caa33318cff03ad6365b6e73afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:f1:c2:30:51:9a:92:b4:ba:6c:92:a3:e7:
55:d1:cd:72:24:23:15:9b:9e:76:73:7c:3d:4e:e9:
fc:8a:0c:0d:ee:7b:30:66:5c:e5:33:50:87:af:b8:
79:95:fa:a4:99:1c:cc:be:f2:8a:45:27:9b:5d:29:
28:00:f6:51:d5:29:c0:82:a2:3c:ab:22:36:46:29:
89:66:83:4b:e2:81:d6:84:7a:7a:72:05:9a:d6:15:
6b:9e:51:1f:0f:f8:9a:04:e2:16:bf:66:5e:e5:33:
24:73:88:db:29:33:bd:a2:f2:83:e8:58:90:a4:a1:
32:63:e1:f2:02:d4:5a:da:28:63:b4:98:17:84:41:
e7:b9:3c:f0:ea:f8:88:36:10:4e:04:7a:ae:7a:40:
05:e7:ea:0d:ba:2b:0f:ee:6e:7f:1c:1a:a2:42:e7:
05:3d:71:15:18:75:ef:db:06:c5:5f:28:3a:5d:e9:
39:9b:cc:3d:b1:8b:dd:16:1c:ef:d2:9e:65:96:da:
76:b0:1d:5a:54:85:00:24:8b:91:59:21:d5:42:62:
3f:ad:5f:43:16:f7:63:17:a1:7c:62:56:c8:6c:6f:
b7:3b:ae:e3:63:87:20:75:49:9b:53:04:13:7d:b0:
9f:87:ec:40:29:e8:95:c8:51:ea:42:fb:99:6e:99:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:75:60:D0:02:CA:A3:33:18:CF:F0:3A:D6:36:5B:6E:73:AF:BA
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:0f:38:7e:d1:96:73:be:fa:9e:87:8f:6d:ee:f1:d0:86:03:
89:b8:36:6f:e7:95:df:49:d2:3a:fa:2e:78:2b:33:4a:81:c1:
7b:91:01:ef:1a:2b:be:40:51:87:88:da:90:82:36:7a:5b:ee:
ce:18:6c:89:62:56:84:1a:aa:22:21:e8:cf:4a:19:4f:67:3b:
f4:93:54:89:ba:da:98:77:a3:81:2e:3f:01:3a:c1:4e:ca:b7:
03:1e:34:46:84:90:ac:2c:54:c4:ba:9e:74:d3:9b:44:b6:cd:
27:71:12:8d:fe:ea:c4:b7:9b:fa:12:40:d2:38:0e:e0:cf:8b:
38:99:c9:7c:68:bf:d9:09:bc:e3:76:e2:9b:6a:79:49:b0:7b:
05:14:6f:6d:37:ec:62:1f:19:29:59:76:fe:cc:be:f2:ec:51:
e2:8d:d8:b2:66:68:64:0d:ad:85:75:c7:2f:d5:41:8d:98:74:
b9:80:40:73:3a:7d:a4:9f:0a:74:6f:bc:cd:bd:f0:d6:83:d8:
de:40:7c:78:01:c4:1e:46:c5:43:4a:e9:64:5c:30:00:fe:a0:
cd:d8:30:29:b1:77:d8:f0:9e:65:0e:f7:06:8e:65:a0:b4:33:
ca:ec:92:d6:f1:c5:bf:a5:97:ed:f6:9b:f3:ba:42:82:45:a4:
9e:f5:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:35 2026 by rpki-client