Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: wzyxpItwnSCwLihSr82nqqz1nhw/bg/ValHiVzRgXvQ=
Subject key identifier: 01:B4:6C:A7:32:39:69:E5:9D:2D:40:EC:DD:0D:A1:B8:7C:48:29:9F
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019FA8991ADA9CE7129B9A4B6AAC68C40078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 0237
Signing time: Tue 28 Jul 2026 12:00:33 +0000
Manifest this update: Tue 28 Jul 2026 12:00:33 +0000
Manifest next update: Wed 29 Jul 2026 12:00:33 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: oswTVQz2Wb2fv3NUYvS0fU2gFgjJs4MGpp76L7FiH/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:1a:da:9c:e7:12:9b:9a:4b:6a:ac:68:c4:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Jul 28 12:00:33 2026 GMT
Not After : Jul 29 12:00:33 2026 GMT
Subject: CN=01b46ca7323969e59d2d40ecdd0da1b87c48299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:bd:98:96:e6:fa:57:88:1a:f3:bc:77:03:
f6:3c:b3:09:2f:37:93:fe:e5:06:e2:9d:84:df:31:
41:1b:87:0f:b9:d2:b2:92:96:c2:fa:d7:3f:3e:34:
fb:9f:ca:c6:55:0d:f7:32:89:21:cd:4a:e9:e8:f9:
4c:0a:f3:55:b4:10:da:97:1a:28:5c:3b:bb:28:a8:
c0:18:bf:7c:dd:39:9c:31:4e:b7:cd:1f:36:44:c7:
32:73:3f:b0:cc:d7:c3:b6:b7:f4:a7:2e:5a:d8:de:
40:9b:f1:bb:e6:9c:af:3f:3c:90:93:80:99:03:85:
28:c0:2a:fc:f9:e5:b2:ea:5b:13:0a:61:4f:f2:bb:
e2:33:85:d2:ea:c9:1e:85:98:a9:ea:d3:40:2a:cd:
f3:f9:1e:b9:cc:ef:5a:61:d5:55:15:3b:fc:44:b8:
ed:79:cc:f1:6d:99:fa:fc:98:a9:4a:86:80:23:7d:
9c:1d:f1:f7:86:e7:75:9e:cf:e3:55:67:39:57:28:
20:be:d8:2c:09:bd:7f:a5:7f:55:ee:9c:c5:a8:9f:
31:98:b0:d8:7e:58:98:08:d6:79:52:b3:b6:80:73:
5e:5e:93:dd:a1:2f:9f:2b:17:76:2c:fb:9b:60:7c:
9f:76:9f:5f:8b:07:cc:d5:bb:6b:13:56:4c:4a:79:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:6C:A7:32:39:69:E5:9D:2D:40:EC:DD:0D:A1:B8:7C:48:29:9F
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:22:52:81:10:df:53:2c:7e:f9:04:7e:40:df:67:87:38:
68:48:e7:2a:55:3b:db:97:13:64:cf:29:13:28:fe:12:a6:be:
d1:e7:ef:5c:52:f8:4e:3c:a8:ad:9a:49:f8:59:fd:50:2c:fa:
ea:c1:21:a4:36:63:11:f0:9b:6d:29:78:63:c0:ea:b9:16:ed:
23:74:e5:ea:4f:dc:79:16:dd:23:db:83:a9:47:76:1f:98:18:
17:49:af:b7:70:f6:f8:cd:af:ee:e2:31:25:c2:ac:a6:6c:c8:
47:dd:ec:1c:e0:68:da:be:3c:14:54:1c:70:bb:27:92:41:a8:
bf:56:70:2d:af:c2:69:21:33:e0:d9:6a:b3:5b:17:ca:9c:87:
df:53:73:24:c9:7e:e8:4c:70:9a:4f:1d:34:ab:ca:92:87:f7:
1c:70:64:a2:6c:45:5c:35:92:b9:66:3c:83:47:d1:5e:0b:e7:
ef:2c:27:58:d8:d0:50:8f:7f:d8:82:fd:62:99:6d:11:5e:60:
3c:42:8d:a1:4a:1a:a6:96:64:42:ef:ee:f6:42:02:12:17:f8:
a8:0b:8f:1e:55:75:48:46:e0:ce:d0:4b:f5:42:68:6c:85:42:
6a:02:25:16:5e:09:7c:f4:2f:c0:e3:d5:44:19:58:d3:67:3f:
f5:03:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:36 2026 by rpki-client