Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: tbnZWapSxVqF0mxOivm4bc0pqhcA0Gl8mlQAELW5RFk=
Subject key identifier: FF:87:C9:21:CA:D6:B1:9E:BA:3A:57:AF:76:34:24:F1:87:0D:6E:B7
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019FA93DF2E2AE55CF57A2D1C3CBC589F8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 01B2
Signing time: Tue 28 Jul 2026 15:00:36 +0000
Manifest this update: Tue 28 Jul 2026 15:00:36 +0000
Manifest next update: Wed 29 Jul 2026 15:00:36 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: RllaNiYBYhuEeXhM1ItXEzFmPPJTK9bcLjVRH0GfkmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:f2:e2:ae:55:cf:57:a2:d1:c3:cb:c5:89:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Jul 28 15:00:36 2026 GMT
Not After : Jul 29 15:00:36 2026 GMT
Subject: CN=ff87c921cad6b19eba3a57af763424f1870d6eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:2a:80:dd:95:d6:73:31:30:0c:6e:2a:20:
71:98:24:60:08:25:9f:15:05:89:98:75:6a:11:f2:
d8:c4:51:e9:11:8f:63:14:c8:76:cd:b9:00:d6:50:
6f:d5:31:d3:64:29:d2:b7:7d:1a:9a:e2:dd:51:52:
4e:8b:2c:cb:6c:60:d2:26:1b:f6:03:ac:68:4c:1f:
17:30:dd:ea:03:dd:06:45:81:e5:bb:01:ec:51:39:
76:52:10:b3:90:55:13:c5:f7:78:4d:6f:5f:a7:e4:
6f:b5:dc:6a:b4:4e:3d:56:90:f1:49:91:9b:fc:c4:
c4:51:ec:73:50:cd:24:3a:37:58:17:09:f5:bb:59:
c6:8f:b6:5d:02:1d:82:9f:12:e2:72:bd:10:f0:f4:
1f:76:f0:9d:99:d6:0e:13:8a:bd:81:dc:6c:e1:46:
48:9f:a7:f3:3c:2a:ab:6b:49:f0:fa:4a:89:6c:6e:
f1:c3:8a:bf:e1:23:67:a2:89:95:16:18:59:20:98:
6d:a5:5a:d9:49:d5:df:5e:40:a5:6f:af:64:d9:5b:
d9:7d:48:40:3d:09:7f:84:50:a1:c5:dc:c3:47:67:
1b:27:bc:c1:76:17:bb:84:56:7b:44:fe:95:b0:95:
c6:ba:87:05:79:b5:e3:c7:4c:82:d9:67:ab:33:94:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:C9:21:CA:D6:B1:9E:BA:3A:57:AF:76:34:24:F1:87:0D:6E:B7
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fb:34:07:b9:06:64:e4:83:1a:f7:83:0e:ee:e0:96:8f:bd:
86:eb:58:22:dd:72:e3:9d:87:2c:7a:26:4d:b7:43:07:c4:b2:
2f:b7:ea:b1:17:dd:55:1f:d2:98:bd:ca:49:97:19:7f:76:12:
a5:49:ed:f6:9c:7e:e0:08:6d:86:65:02:d6:0e:49:f2:8c:53:
8c:1a:c6:93:81:de:37:06:f3:00:c5:07:45:90:0e:21:43:ce:
db:2d:e4:35:31:8d:32:0f:d1:02:2e:32:9f:d8:37:3a:24:66:
88:02:68:03:d3:8b:b5:53:fe:64:37:79:13:e3:62:4b:41:07:
65:f6:ad:2a:b8:76:fd:74:73:01:1d:6c:2e:bc:35:de:0a:a7:
06:66:96:75:36:fa:af:39:56:9c:7f:df:d7:ea:63:3c:2e:d1:
49:e4:a4:71:78:61:f5:3b:ad:01:9c:f6:12:db:bd:49:7d:58:
de:c5:c4:2f:20:23:df:d5:c0:6c:4a:d1:d4:f3:91:70:fd:93:
08:62:a4:24:04:8f:02:c7:a6:71:89:43:e8:fb:75:05:d5:6c:
d7:a4:6f:9d:48:bc:d8:04:bb:89:79:9c:2c:c1:5b:82:26:8e:
d1:2e:f0:bb:b7:47:16:f7:46:7f:df:db:63:1e:45:3d:a7:89:
72:47:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:53 2026 by rpki-client