Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: iIZA+uOigKWgWfvNf5naj1zY0GELsB43szvtXS6GpVM=
Subject key identifier: 45:86:D9:58:D0:90:A4:92:4C:A5:B2:00:BA:E7:E8:8F:BF:5F:DF:29
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 019FAC76C5A767AA7F3C766106111CCEF2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 06:01:32 +0000
Manifest this update: Wed 29 Jul 2026 06:01:32 +0000
Manifest next update: Thu 30 Jul 2026 06:01:32 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: m584PgXt0i9yuYVsbcVGxZ+qPe9DBtfTFC7O8qiENDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:c5:a7:67:aa:7f:3c:76:61:06:11:1c:ce:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jul 29 06:01:32 2026 GMT
Not After : Jul 30 06:01:32 2026 GMT
Subject: CN=4586d958d090a4924ca5b200bae7e88fbf5fdf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:b6:36:47:3a:77:6a:5b:af:dc:36:27:f0:
6d:00:89:f1:55:87:ba:1d:c4:11:ce:0d:f7:86:07:
4f:39:40:f5:eb:d6:40:54:93:60:6d:41:3b:28:f0:
7f:41:5d:7d:46:24:a4:c6:c1:71:4f:72:8d:0e:46:
4e:da:fd:fd:af:ae:b5:41:c7:6c:fa:70:f0:29:02:
cd:cb:55:d9:42:28:e0:20:81:fb:91:2b:db:03:04:
54:71:ad:d1:89:4a:58:56:83:a5:18:72:4d:0b:e2:
be:25:84:c1:dc:5f:1b:73:10:3c:de:25:1b:0d:c4:
36:b4:38:5d:2c:15:d2:81:50:c5:dc:f4:1b:83:f5:
e8:cb:f3:94:10:d3:2a:f0:37:b6:12:6b:e8:73:40:
df:a4:5c:57:88:6d:50:e8:2a:50:b7:da:a7:e5:42:
1f:98:4a:ac:cd:bd:5f:ef:de:10:7c:dc:28:81:f8:
ea:7d:6e:22:c5:5d:d8:5a:ef:cf:f6:68:d3:bb:01:
7f:ed:d8:e2:ad:29:4c:ba:3f:5c:c4:8b:1f:82:b3:
51:65:ff:03:be:34:6f:c1:52:dc:88:5a:6b:8d:4e:
ae:38:fd:d7:b4:88:80:2c:4c:61:9b:00:2d:c6:7f:
80:d7:70:d4:ab:89:32:33:13:c1:0a:1d:93:3f:a8:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:D9:58:D0:90:A4:92:4C:A5:B2:00:BA:E7:E8:8F:BF:5F:DF:29
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:6a:04:e9:7b:1a:bc:03:4f:33:30:19:78:a1:bd:93:5e:
8d:65:71:26:4b:99:5f:a6:02:93:fc:0a:51:d8:01:16:d6:da:
9d:ee:27:e9:f0:84:61:c5:dc:da:46:68:4a:02:8f:50:ea:96:
ca:59:b4:d1:ce:19:9d:cc:ff:db:ed:3c:35:66:20:fa:7e:a9:
39:b7:8f:63:62:c7:12:2d:58:18:2f:07:6c:1b:65:d7:49:98:
e2:0c:0e:85:57:23:7d:8d:a7:f8:99:01:2a:65:ec:87:a8:fb:
3f:33:18:5b:fd:8c:b5:32:3e:f2:84:d6:c8:95:70:f9:1e:69:
88:50:aa:1f:7e:0b:79:95:41:9d:a4:61:17:14:d9:ef:8c:ec:
90:6f:60:3b:bb:de:c5:9e:cc:92:9c:3d:13:41:db:81:cf:06:
4e:fb:0c:50:2c:7f:c1:7c:92:89:fa:1c:5a:d8:53:63:83:06:
1e:7c:2a:2a:fe:cc:b9:0c:aa:31:43:97:35:bc:ff:7f:24:3e:
da:cb:b8:e3:bb:dc:a4:56:20:b8:cf:99:65:c4:d4:61:c6:f9:
79:b7:79:ff:84:b5:37:30:25:06:83:15:a7:e8:b5:73:73:66:
dc:76:40:35:e9:99:5f:dc:93:07:6b:f8:9b:13:f0:b8:17:3e:
db:87:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:43:25 2026 by rpki-client