Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File: tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier: HijUmweN3OepcraWeyMxFHa44fE0nluJwrqekjmqGVQ=
Subject key identifier: 54:E3:F9:A0:05:12:10:3D:7E:62:E7:A6:91:E9:62:EF:EB:E4:E0:56
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019FA93E002A8FBE4992B83200CC4BEB00BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number: 027A
Signing time: Tue 28 Jul 2026 15:00:40 +0000
Manifest this update: Tue 28 Jul 2026 15:00:40 +0000
Manifest next update: Wed 29 Jul 2026 15:00:40 +0000
Files and hashes: 1: gebinHk09-NabMXj-jq94wPZa6M.asa (hash: GQWmqZiCd4TGe+5+G38N918qHKq5ATM9kvInAFjIdFc=)
2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: rpp5RilIJcV5L5FQ8SZFxEK6IOXfX3My13x6e1esDi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:00:2a:8f:be:49:92:b8:32:00:cc:4b:eb:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Jul 28 15:00:40 2026 GMT
Not After : Jul 29 15:00:40 2026 GMT
Subject: CN=54e3f9a00512103d7e62e7a691e962efebe4e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:bf:99:9d:ba:d9:9f:50:76:66:94:8a:0f:
5a:fc:6a:c6:0a:9e:e9:b7:24:df:c2:27:11:75:e9:
4e:a9:e7:05:e1:bc:ef:38:54:b2:f7:16:71:0c:b9:
23:c8:87:ee:ca:33:9a:f2:01:7c:e6:5c:01:b0:ee:
ec:e7:1a:8b:69:37:b5:a4:c5:d3:c5:c0:47:96:5c:
c0:1c:c1:ab:ef:9d:df:d6:ea:1c:05:64:b6:81:1c:
04:e4:0e:ef:a6:4c:0a:91:fc:30:1e:6d:0c:3c:af:
64:12:b9:3f:3d:7a:b9:34:2e:42:3e:9d:d4:ac:6e:
bc:06:00:7e:a6:58:71:79:b5:52:14:82:f6:53:5c:
41:f2:5c:f1:3f:fa:9c:46:4b:d4:0c:73:75:6b:be:
6d:43:cc:dd:c6:8f:b4:54:c0:6b:4d:5a:86:e0:83:
f5:b3:d2:de:f8:23:a7:f1:e7:b7:a2:a2:af:13:11:
d7:c8:03:23:48:10:9e:66:aa:a9:7b:c0:7d:7e:bb:
1f:4d:11:8e:96:0f:ec:22:17:52:76:e9:1c:7c:f2:
42:20:3c:2f:da:34:3d:05:04:d6:ba:f4:fb:67:e1:
0a:77:3e:72:42:0c:c5:e4:e7:b7:da:94:68:38:17:
3d:4b:88:d7:08:b6:51:f7:90:11:fb:68:8f:22:3e:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:F9:A0:05:12:10:3D:7E:62:E7:A6:91:E9:62:EF:EB:E4:E0:56
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:04:e7:43:ba:67:ae:2a:6e:f1:9e:63:7e:c8:81:69:41:9e:
20:a5:01:bd:d5:d4:76:19:63:7f:24:6d:d1:da:c2:d3:50:83:
c5:75:4a:eb:88:3c:1b:67:c0:bf:04:c2:25:13:30:b5:d9:e2:
7b:74:7e:65:a7:af:54:0f:b0:56:1f:b3:0f:d4:fe:61:f4:b5:
98:cc:07:6a:1a:47:e2:83:d5:98:7d:84:2b:e3:f4:7f:fc:59:
6b:9c:9e:33:c6:d3:ea:99:6e:94:52:99:54:e2:2b:24:9d:b4:
8c:b0:92:d6:29:8f:c7:fd:be:4c:3b:10:4a:fd:58:42:89:b3:
b0:2c:87:70:f1:23:80:ab:a8:9d:ed:c7:f3:df:86:10:42:18:
d2:9a:ce:d7:f1:3b:ec:6a:26:a8:34:c6:fd:26:ce:e7:0e:d0:
96:c0:7a:e5:4c:cb:db:61:85:af:0d:08:5f:11:f4:86:93:0e:
3f:a4:12:ee:b9:68:7c:c7:f1:e8:38:b9:0e:24:5c:af:2a:84:
06:05:ff:b9:bd:3d:f3:20:9e:82:c8:e7:f4:2f:dd:ee:f4:6a:
50:d0:2f:81:38:e3:9c:ab:c1:30:36:71:1a:2e:72:d7:6f:41:
99:75:3e:03:97:e4:e8:3c:3e:9f:91:e6:ae:55:cf:ce:37:21:
2d:f1:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:22 2026 by rpki-client