
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
File: tGZGB9tMTT48FWLyjSDPuSMkGBA.mft (raw, json)
Hash identifier: jPXNHQlaNjJLo/uoeTmCToqcgYREUkJ2ratPcFsgUjI=
Subject key identifier: D4:27:E2:F1:EC:01:26:5C:CF:67:2B:78:6F:57:D0:3B:0C:04:30:B1
Authority key identifier: B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
Certificate issuer: /CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Certificate serial: 019FAB2C2972AA6CF3233B61C6DFEE75FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
Manifest number: 74
Signing time: Wed 29 Jul 2026 00:00:25 +0000
Manifest this update: Wed 29 Jul 2026 00:00:25 +0000
Manifest next update: Thu 30 Jul 2026 00:00:25 +0000
Files and hashes: 1: tGZGB9tMTT48FWLyjSDPuSMkGBA.crl (hash: n5u32Iw0+xydgcTzigkmjFF2pIKAJ6kH9ri0LmNHm0U=)
2: ziWW6n1B_UZcXiD6pfKzphrsK3A.roa (hash: hLVr8gy4usgiH3/VrSF1XURRYPhpaPisnOC7F4Eq2L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:29:72:aa:6c:f3:23:3b:61:c6:df:ee:75:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4664607db4c4d3e3c1562f28d20cfb923241810
Validity
Not Before: Jul 29 00:00:25 2026 GMT
Not After : Jul 30 00:00:25 2026 GMT
Subject: CN=d427e2f1ec01265ccf672b786f57d03b0c0430b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:79:a3:12:57:a3:57:c8:13:48:72:2f:21:
d2:33:62:76:a5:f1:15:46:32:52:72:79:b7:df:f6:
e1:ad:72:b3:79:c4:eb:72:fe:79:75:56:71:5e:c5:
1f:7e:03:e0:58:55:80:95:f8:de:5e:64:db:b8:ea:
3d:e2:52:8e:0b:b1:3d:70:b7:36:a2:26:a0:9f:c0:
b1:b8:9e:a5:41:ae:46:82:43:e9:2f:c6:9b:db:36:
55:a3:06:c1:ea:0f:40:98:35:11:02:16:34:ef:d9:
dc:aa:14:4a:72:42:28:b3:7f:2d:c6:82:34:59:66:
c7:4a:24:b4:46:91:c3:5f:e8:f1:33:36:8d:ea:66:
81:9a:16:3f:ea:a6:77:7d:a2:12:8d:93:aa:9f:ae:
fb:e1:63:07:bc:60:93:26:56:fc:05:45:07:fb:2b:
05:78:f0:17:2a:a0:61:81:19:04:34:d5:c1:a5:9a:
43:81:f3:de:50:80:96:ce:17:da:4a:e0:50:a0:21:
65:1f:81:06:9d:3d:44:ba:b0:2d:b0:09:c9:c8:81:
fc:c1:88:af:0b:01:f7:63:a1:f5:f9:59:4e:80:2d:
67:69:55:d7:8b:7d:fd:3a:a9:92:ab:92:e2:f4:33:
85:34:57:45:74:84:ab:a0:59:0a:aa:25:b1:7a:e6:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:E2:F1:EC:01:26:5C:CF:67:2B:78:6F:57:D0:3B:0C:04:30:B1
X509v3 Authority Key Identifier:
keyid:B4:66:46:07:DB:4C:4D:3E:3C:15:62:F2:8D:20:CF:B9:23:24:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGZGB9tMTT48FWLyjSDPuSMkGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/336084-d2cf-4346-a720-c4236465a10b/1/tGZGB9tMTT48FWLyjSDPuSMkGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2d:50:85:3d:40:52:47:4e:15:31:66:e1:9a:57:03:8b:bb:
7a:70:40:ac:5d:2d:e8:9c:0c:4e:f1:b7:13:08:c3:8a:19:9a:
43:e1:8b:40:61:35:16:5d:42:a5:f1:c3:ce:98:7f:b0:73:0a:
12:dc:d6:c7:81:52:fb:86:84:8d:2e:46:3b:f3:c9:8f:2d:7d:
1f:c4:2a:26:67:c9:29:5a:9e:a7:67:df:66:a1:50:fb:bd:65:
37:92:47:03:cb:c6:a7:2e:60:e1:2f:1b:b1:2a:df:b1:c8:f8:
7b:0c:40:f3:f7:2c:7c:8d:d0:8f:14:60:ce:9f:45:76:7a:2b:
a0:2e:2a:05:2e:11:23:f3:78:ef:29:bf:5b:ca:51:12:3d:fb:
ac:48:b4:a5:9d:92:ed:88:ca:28:1e:29:26:7a:d8:60:2a:70:
c5:ef:70:38:e3:82:51:b9:3f:a4:ef:11:ed:c8:ac:de:01:ea:
cc:52:99:51:6c:2d:f8:2d:c5:c2:2f:9c:9d:b8:6f:f2:dd:f6:
41:a8:ae:57:52:0e:1b:ad:57:ab:ba:7b:28:89:62:47:21:ed:
6e:09:46:4f:e0:57:01:61:85:55:26:42:ff:9b:de:82:eb:57:
d3:6a:14:93:12:65:53:86:10:53:3b:ba:f2:90:f2:59:dc:68:
ce:99:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:17 2026 by rpki-client