Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: IsROnc8E4ZJjLUfBIEZBbEMeKrnGqRhe6vTkAjpsXyc=
Subject key identifier: BF:94:BD:39:76:7E:4C:F1:03:47:45:DF:A6:1D:4A:F6:48:55:BA:DF
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019FA9AC345DA3C100C9A1E53A0BFAC9C88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 161F
Signing time: Tue 28 Jul 2026 17:01:02 +0000
Manifest this update: Tue 28 Jul 2026 17:01:02 +0000
Manifest next update: Wed 29 Jul 2026 17:01:02 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: wMTKLPKvUrb2ToSMeLK4yNobh/7GAFz8fzPlVT2h3+M=)
2: fBLAHwUkRrn6HYBRnTV7FYQGNDQ.roa (hash: 2J5IIevOI4AOjVlKsCvjgqwg6VuZoErPwilBziOfEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:34:5d:a3:c1:00:c9:a1:e5:3a:0b:fa:c9:c8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Jul 28 17:01:02 2026 GMT
Not After : Jul 29 17:01:02 2026 GMT
Subject: CN=bf94bd39767e4cf1034745dfa61d4af64855badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:9c:19:d8:1f:06:d9:2d:7f:f9:ae:ca:ec:
c0:67:c3:be:85:8e:18:08:45:a0:ee:0d:7e:11:5c:
5e:d5:80:17:96:0b:ac:ef:9d:78:e0:df:3c:8c:23:
37:8d:76:80:d6:bc:71:d0:ef:3c:93:63:2e:92:c4:
18:08:2a:84:2d:51:f1:7a:82:46:60:f1:cd:09:f6:
f5:9a:07:fb:89:91:61:da:ac:82:cb:3f:5b:f7:72:
43:e8:a9:3d:2f:c1:2a:2c:47:67:47:03:26:d0:22:
63:03:30:f4:2d:a5:57:f5:f6:7d:77:d7:87:8b:46:
bc:e9:d9:d0:a1:0d:9a:1a:d9:bf:56:52:02:44:bd:
76:43:5c:57:ba:75:dc:72:59:f4:43:be:4a:12:f7:
79:f6:29:0a:af:04:27:51:73:3a:a6:d2:5d:04:61:
20:32:dc:58:47:2b:1e:c7:82:9b:7d:5a:af:29:a5:
ff:c3:04:a2:a9:4d:2f:70:9d:4e:51:bf:1d:b2:41:
39:3e:d7:dc:0c:41:01:57:3f:b1:93:0a:e2:f7:e8:
a7:f7:f8:c3:58:1f:32:2c:98:d1:e6:4d:9c:61:18:
3f:2e:9b:a9:73:51:bc:b5:fe:2f:70:9c:78:05:20:
54:f7:3f:35:25:86:e6:a9:9b:2e:44:c7:40:69:e1:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:94:BD:39:76:7E:4C:F1:03:47:45:DF:A6:1D:4A:F6:48:55:BA:DF
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:fc:5e:58:e3:99:13:90:ab:9c:46:c2:06:cf:00:69:f8:
c5:dc:a0:5f:c0:7d:f7:61:90:f9:82:67:c8:4b:2e:e1:ac:ce:
e3:a5:a5:83:d1:fc:97:7b:66:c5:92:11:a9:91:54:79:e9:dc:
58:62:83:ec:4a:d0:4b:b9:a1:f1:1c:a0:18:4e:73:cf:ca:1f:
5c:68:39:d9:61:c9:66:1a:53:df:47:5a:58:9d:ac:f4:03:80:
0e:e6:89:04:e7:cd:8b:27:a5:3a:4f:ea:0f:a9:d0:d9:30:26:
69:7f:7a:14:ea:65:66:e0:fa:5a:a7:10:15:4c:ef:57:0c:15:
c4:6c:9b:62:d8:4e:c4:ba:95:0c:56:a8:5a:b7:8f:87:40:b9:
ad:5b:80:eb:b2:49:11:b8:ec:a7:e9:d5:b6:90:ab:a3:a3:4e:
fd:1b:01:e7:d1:35:92:46:84:d3:0b:13:df:6e:6e:49:1a:12:
a0:31:aa:d9:18:5d:71:67:74:05:d3:f4:a7:6a:72:ff:5f:6e:
e2:53:60:e8:cb:f0:48:05:39:8b:03:8f:5b:41:81:7b:c4:91:
62:bd:6d:01:95:1e:5e:6f:59:b7:24:4f:ca:09:4f:72:0d:69:
f8:cb:d1:e8:ef:36:6f:14:52:ea:fc:8c:4f:14:4c:dd:11:3a:
99:72:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:42 2026 by rpki-client