Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: D4G5lwaGGwEHnpbQ2y/BKClUOb+RKPxnyGhaw0zHV9Q=
Subject key identifier: 21:C3:51:3F:88:BD:A7:64:21:9D:81:FB:4D:A3:39:23:E8:41:C0:48
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 019FAB9AB7C07DF9D689997F95425FB6A894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: 023A
Signing time: Wed 29 Jul 2026 02:01:11 +0000
Manifest this update: Wed 29 Jul 2026 02:01:11 +0000
Manifest next update: Thu 30 Jul 2026 02:01:11 +0000
Files and hashes: 1: R53abRTy3nsePVXZ6FXqbP844c0.roa (hash: roRhMTyLNIYOGvT9vt5IgOR5P+5/7DtKqsBJYyp8XnI=)
2: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (hash: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=)
3: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
4: loPeDfGPyDMlaIz52TWhtcsHUe8.roa (hash: eVYCTyXWXF7uzmYgmDXlX+QmiWaxF3k2ICYH5NEVWDE=)
5: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: GJeqCd4EIz/i1B3++qhsUovwHVhZAh8Cc7sZm+dG/T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:b7:c0:7d:f9:d6:89:99:7f:95:42:5f:b6:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Jul 29 02:01:11 2026 GMT
Not After : Jul 30 02:01:11 2026 GMT
Subject: CN=21c3513f88bda764219d81fb4da33923e841c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:60:23:a2:fd:0c:ae:cc:9f:77:6f:b0:1c:
d4:e6:c3:0c:16:15:33:2c:4b:6c:ee:8b:98:8c:21:
2b:21:fc:f8:1c:5c:21:5f:1a:66:3a:64:37:f3:86:
c6:23:a1:30:3b:bf:b8:df:c8:91:94:43:33:87:fa:
7f:e7:e7:d1:2f:dd:73:88:31:1d:dd:a5:1a:92:e2:
bb:7c:9e:bb:31:2e:9e:3a:19:c4:c6:a1:67:a6:b8:
99:be:07:55:f3:f3:5e:33:5d:10:d2:c6:00:b2:5a:
fb:ae:30:49:46:7f:80:25:cc:a3:ef:4f:c9:86:39:
ed:5d:81:e9:82:81:5c:f4:eb:0e:dc:3c:35:c3:21:
57:1f:2f:26:74:84:07:70:c1:05:38:39:9d:6e:00:
12:be:2c:af:b9:07:7c:27:91:86:b2:f2:75:c2:39:
ef:f9:42:78:51:00:79:6f:73:1d:f5:62:c5:96:cb:
d0:11:5e:4c:1b:90:01:0b:db:63:a2:32:e8:f6:0e:
1b:92:5b:fd:9d:60:a4:c7:5d:d2:be:84:d4:a7:86:
af:e3:04:7f:28:4b:86:0f:03:c0:1b:c0:70:7a:e3:
b3:ff:a9:33:df:33:e6:ff:20:1a:55:da:2d:12:3f:
83:6b:f3:1e:e8:a5:bb:27:f0:66:b7:ca:44:0d:9d:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:51:3F:88:BD:A7:64:21:9D:81:FB:4D:A3:39:23:E8:41:C0:48
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:64:65:70:82:4f:94:60:3f:d8:39:df:a3:78:f1:63:67:aa:
48:75:df:de:9a:4b:5b:b7:a4:f0:ee:13:c3:5a:86:67:91:63:
69:e1:a4:ed:d9:fd:17:77:2c:a7:e8:1f:77:5a:e8:7e:32:7a:
52:70:9a:24:00:ec:4f:a2:26:8c:fd:1c:3f:bd:bf:5d:ee:aa:
98:fa:54:ff:3f:4b:87:25:06:e1:60:9b:70:8f:a5:20:cc:d9:
48:eb:ad:e7:5b:df:66:0e:c2:46:4a:d2:c8:8c:3c:5f:2a:78:
1b:54:c0:54:f1:08:62:06:16:45:dd:43:f7:80:97:85:be:68:
0e:6a:17:02:3d:6d:4e:b6:55:9e:61:37:7c:e9:d1:54:43:2d:
6d:b4:36:2e:cd:82:f0:7c:3f:57:d7:7b:bf:7b:f6:a1:47:a8:
14:81:61:99:e4:ca:9d:78:79:73:53:8f:15:a7:a1:ea:00:57:
0b:c5:50:a6:38:f8:56:58:23:11:a4:6f:c7:fb:31:a7:59:ec:
3e:4f:5c:e2:98:66:82:d1:cf:3b:f6:93:8b:02:7d:e7:8f:6c:
65:81:13:59:ca:7d:64:f4:60:2d:c8:50:5a:ec:72:e8:28:87:
df:ea:72:70:c0:c9:74:78:7f:f5:ff:fb:6b:4e:da:18:ac:22:
d2:47:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:05 2026 by rpki-client