Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 8wBZX+RrdGn57lI/QjQEIURsSP30w8PrFiEHYxG+m1k=
Subject key identifier: F7:5C:47:81:55:9F:DA:F8:A1:55:02:30:87:34:07:E8:FA:7D:10:3B
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019FAC3F22875A3F060F870C0399710DFE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 05:00:46 +0000
Manifest this update: Wed 29 Jul 2026 05:00:46 +0000
Manifest next update: Thu 30 Jul 2026 05:00:46 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: Pjp5DWtUTCoM6EZBM95D5DB98zOqTAgx9/z4YfNlO8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:22:87:5a:3f:06:0f:87:0c:03:99:71:0d:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jul 29 05:00:46 2026 GMT
Not After : Jul 30 05:00:46 2026 GMT
Subject: CN=f75c4781559fdaf8a1550230873407e8fa7d103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:6f:c4:e3:c8:25:d9:b5:50:d5:43:36:7e:
80:39:64:86:40:ce:1b:38:ed:8e:a2:db:59:e7:71:
fd:d8:52:fb:56:94:97:44:bc:a7:7a:ac:40:6e:65:
8d:e9:a7:e0:63:25:b3:eb:1a:68:71:8b:22:57:4e:
a8:d4:4a:58:88:a3:1a:3b:a3:bd:72:b7:24:e8:f4:
de:26:97:f9:49:2e:e1:29:31:da:19:e9:dc:88:bf:
e3:fd:7c:de:34:4a:94:0d:2e:49:0b:f5:3e:59:52:
90:46:50:0d:ea:b0:fe:67:b6:45:81:c5:11:be:c5:
b8:b7:d0:fc:58:f1:a3:0c:42:d0:89:48:09:ef:29:
2a:e9:d4:c6:ab:c9:d8:90:40:8f:8b:bd:07:e6:41:
21:e6:41:28:7c:49:1c:25:16:14:18:27:d5:b1:92:
c0:be:38:aa:37:00:43:6c:ca:b4:79:6f:ea:87:bd:
2b:bd:f2:f0:c7:d3:0e:4f:34:68:4b:80:c4:1a:86:
ea:a8:e0:e8:28:34:fe:ec:20:0c:f6:ba:0f:41:6b:
52:72:9f:ad:a5:fc:39:fb:23:6e:55:3e:6d:31:e4:
d5:b7:5a:2d:05:3e:79:b9:da:98:24:e6:73:3f:8c:
e2:20:90:03:51:61:1c:06:68:f8:5e:a1:c6:ea:56:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5C:47:81:55:9F:DA:F8:A1:55:02:30:87:34:07:E8:FA:7D:10:3B
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:38:95:41:f5:b5:65:75:81:57:71:bf:f9:b6:c6:9a:41:f8:
24:3b:c0:73:7b:b0:f9:7f:ee:03:21:06:22:26:87:48:12:fd:
7a:09:d3:6c:02:e1:54:98:1e:fa:0b:2b:50:13:a8:7c:f9:dd:
5b:cc:2e:23:24:ed:66:15:cc:19:01:59:c1:c8:91:5e:3b:3a:
6e:21:20:ad:c5:ad:c3:2c:2d:35:ad:d4:35:65:11:b9:88:5e:
0f:54:55:4a:73:f5:81:9b:c8:d6:ec:c8:5a:74:6a:7c:58:14:
f9:43:fb:32:01:21:7f:86:6b:62:2f:c0:5e:22:46:42:6c:1a:
05:66:57:b7:d3:50:ee:5b:5a:79:2e:13:38:89:b8:fc:be:29:
c3:cd:52:48:d2:8c:5c:c6:0b:4d:52:b5:1e:50:20:03:c1:25:
6e:49:82:80:ce:9b:54:10:7a:1e:a2:97:b9:19:1b:e7:96:94:
ca:7a:d6:2d:32:50:34:3e:d9:21:6f:9c:69:d6:c7:68:30:b4:
ec:85:7b:e7:f6:7e:53:a1:b4:43:69:59:e6:e0:b2:be:b1:4c:
08:2a:2b:3e:94:57:de:54:f7:1e:3c:7e:36:8e:81:7c:db:ca:
23:97:bc:8c:96:87:96:f5:74:37:ce:02:cf:8b:96:f7:ca:43:
6d:1b:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:16 2026 by rpki-client