Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: BWmSGbi51CcPzrkDmuRIEFKef89/sALk2hJWeKjOA7A=
Subject key identifier: B0:CA:BB:E2:4E:95:30:9C:E0:44:D6:5D:2B:D5:F3:A8:E6:72:8D:E2
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019FAAF552B60C96CEA98DF0A1300E9ACFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 23:00:31 +0000
Manifest this update: Tue 28 Jul 2026 23:00:31 +0000
Manifest next update: Wed 29 Jul 2026 23:00:31 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: iMs3/3OG7jZ+erXRo5o2oLzSiUo9Cb1SwFor7FTy6TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:52:b6:0c:96:ce:a9:8d:f0:a1:30:0e:9a:cf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jul 28 23:00:31 2026 GMT
Not After : Jul 29 23:00:31 2026 GMT
Subject: CN=b0cabbe24e95309ce044d65d2bd5f3a8e6728de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:5e:8f:59:46:c8:ba:87:ab:ec:7a:57:30:
8f:b7:80:b1:da:55:c0:a8:8e:48:62:58:bc:44:51:
96:c2:58:55:81:b4:8b:7e:82:cb:1b:0e:33:38:bb:
00:bd:3c:f8:23:72:b1:bc:53:fa:7b:a6:70:ee:47:
c2:3b:92:cd:74:03:a5:99:a9:a3:d8:39:ef:cb:e6:
fe:52:c0:9f:47:3f:5a:41:1f:09:2a:1e:d5:19:8b:
fc:e7:e9:96:e9:dd:c7:a1:32:3a:f3:85:56:7b:af:
52:7c:52:de:a9:17:ed:97:26:1f:ff:6c:da:bd:b6:
83:a9:1a:e9:fd:c0:b6:d8:ee:1e:61:42:07:20:7f:
8a:4c:ef:00:3c:66:e0:ad:b0:fb:c3:cb:97:73:2a:
fb:ac:e3:4a:96:d9:80:ad:6e:a3:6b:94:36:e5:8b:
08:e5:9f:53:23:09:72:22:fd:0a:45:7d:0b:b1:57:
7a:73:8d:a4:69:ad:af:cf:d4:9a:d1:51:84:9f:4b:
10:9e:82:29:1f:76:39:28:76:08:08:8d:f5:9c:f6:
1a:d3:fd:31:55:30:f5:79:72:f4:b3:1e:f8:4a:72:
48:4e:8a:23:02:c5:06:84:b6:e1:0f:e6:73:1e:7a:
42:05:c3:a8:e6:43:72:d5:c7:1e:6e:8d:6a:89:c7:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:BB:E2:4E:95:30:9C:E0:44:D6:5D:2B:D5:F3:A8:E6:72:8D:E2
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:be:e2:29:3c:ab:7c:f3:62:e6:4e:3b:1a:57:7d:43:d8:76:
d6:bc:e6:c4:7e:81:43:79:ab:ec:32:97:72:af:ea:39:97:48:
68:4d:e7:fa:8f:5c:d5:af:b0:ee:20:56:db:cb:a0:02:20:87:
46:22:a0:4e:84:8b:a2:8a:38:2b:35:92:4d:23:40:af:71:0c:
e0:22:67:45:f8:e1:38:fc:73:37:11:24:6f:c0:cd:5b:c8:d9:
41:df:68:d5:30:59:54:fa:07:c0:f5:28:37:b9:a7:bd:66:b1:
4a:85:79:e7:c5:85:d3:91:a4:53:a5:ed:96:21:e9:bd:c3:4f:
37:5e:c0:6e:47:6c:00:74:c6:c9:25:8f:5f:e0:e2:50:69:fe:
b9:55:6f:2e:e6:e9:c2:37:f4:bb:59:9e:49:e2:c3:da:8d:45:
3a:d1:5e:30:26:e7:d6:cf:d3:19:6f:0b:8b:90:4d:12:13:1d:
88:17:53:b8:e5:33:f8:ab:0a:06:d1:40:20:65:a2:f1:d0:e3:
3f:9c:bc:5a:ce:3b:94:27:3d:9a:75:6e:ff:75:98:2b:ea:77:
34:8d:2d:78:b6:06:57:c9:f2:87:cc:1c:dd:b2:3a:e3:4a:c1:
d1:e6:ee:53:00:99:df:47:93:5f:e6:5d:6b:d9:3f:e7:90:07:
de:f3:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:49 2026 by rpki-client