Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: 3+03evp6EZU5qq4uvrbHaRO5MjX2tt0bZpmiT79o0tk=
Subject key identifier: AD:F6:8E:90:B6:58:AF:23:10:0F:8C:69:2E:AB:94:D9:2F:63:12:B9
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 019FAA505D8AFB569041AE6B4AF5491D2715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 20:00:21 +0000
Manifest this update: Tue 28 Jul 2026 20:00:21 +0000
Manifest next update: Wed 29 Jul 2026 20:00:21 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: ByyaXHOipq2N20RjnVbiRJBOlZEq1R0pFQMwn4CvFzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:5d:8a:fb:56:90:41:ae:6b:4a:f5:49:1d:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Jul 28 20:00:21 2026 GMT
Not After : Jul 29 20:00:21 2026 GMT
Subject: CN=adf68e90b658af23100f8c692eab94d92f6312b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:34:e1:e5:23:dc:26:c0:6b:cf:90:09:fb:
41:24:12:30:c8:a9:62:3a:55:c5:7b:f3:5e:8d:e7:
38:3d:f1:3a:d8:e1:15:6d:e0:d4:8e:f9:c2:0a:79:
f0:69:39:f0:f7:7a:60:db:a7:bb:21:56:41:d5:b7:
61:6d:f4:25:e8:8c:e2:1e:81:9f:39:0e:88:c8:17:
3a:da:04:81:51:42:31:be:f9:41:f6:a5:bf:4f:f0:
47:a1:19:4c:86:38:d2:6e:8b:cb:32:b4:b7:7c:90:
c5:03:a8:62:9b:8c:48:29:56:1a:3c:d7:a0:92:27:
bd:f3:91:12:05:53:5f:aa:a0:6a:28:11:71:74:c1:
09:e9:1a:67:43:f6:1a:83:c3:a1:fc:76:69:fc:0c:
27:22:36:59:5f:f1:7d:bd:a5:4d:1d:46:bf:fc:d7:
b5:2a:4d:25:07:5b:5b:fe:7a:df:0c:49:2a:49:d0:
74:ce:f6:fd:4c:51:7d:51:0c:4b:c3:fe:e7:10:9a:
55:cc:5b:84:1c:cd:bc:0a:dd:de:64:5c:7c:d2:e2:
83:2b:b5:ca:8f:33:a5:06:8e:53:d1:47:05:f2:66:
d8:45:da:df:65:d0:d0:92:14:00:f2:e8:2c:87:00:
30:09:13:16:7d:41:50:09:db:d9:4d:04:32:bb:47:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:8E:90:B6:58:AF:23:10:0F:8C:69:2E:AB:94:D9:2F:63:12:B9
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:2b:8b:57:44:31:cc:29:ab:8c:f4:07:35:bf:67:df:e1:
28:bd:04:a5:90:a7:c5:41:b2:fc:d2:f2:d0:54:51:ef:5d:4f:
14:26:1c:e2:b0:a6:85:b8:7e:fa:3d:8c:b0:2a:72:ef:d5:4d:
8d:b3:94:87:a4:43:eb:0d:da:79:6c:77:1d:ea:49:f2:5a:c2:
b9:8b:38:ba:fb:6c:b4:58:6f:3e:01:6f:e6:6c:e2:23:4e:12:
19:23:06:07:71:98:98:9e:ee:78:ca:fd:8b:ee:2d:7c:86:ba:
49:2e:96:b5:22:85:f8:28:03:f9:30:74:e1:0a:58:97:3c:20:
89:59:54:57:9e:c5:5a:a4:a6:5d:ba:bf:51:54:7a:e2:1f:42:
db:bc:27:d3:b7:8c:87:21:8a:9c:16:aa:8e:97:8f:30:c8:45:
3d:ad:98:2e:10:34:1f:0b:7c:a3:32:92:89:92:45:38:f4:b4:
62:aa:fd:bf:91:cd:7a:38:9a:1e:11:4d:bb:41:99:ff:58:7b:
2c:92:bb:a7:ab:cb:64:a7:50:de:25:f0:5c:8d:55:53:3d:5c:
bb:5a:35:ee:06:ac:ab:96:43:fe:92:ee:eb:01:cd:95:19:2f:
0f:74:b3:c8:ed:41:7a:99:80:11:58:01:56:de:d9:d3:74:07:
5e:5b:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:51:54 2026 by rpki-client