Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: 0ibqvS98hS9jbnOBflvMEahA+Yeqg8H3VQCp2ex+Z6Y=
Subject key identifier: 93:92:6E:DC:CD:FF:7C:C7:98:7B:42:36:EB:E0:77:B5:F9:AE:29:EF
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 019FAD5169A42351F4E5887104038425C173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 10:00:21 +0000
Manifest this update: Wed 29 Jul 2026 10:00:21 +0000
Manifest next update: Thu 30 Jul 2026 10:00:21 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: Dzi0i1fpkpii8mjGH+TlB2NalAnXGDVh0ckPkXN4A2g=)
2: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (hash: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:69:a4:23:51:f4:e5:88:71:04:03:84:25:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jul 29 10:00:21 2026 GMT
Not After : Jul 30 10:00:21 2026 GMT
Subject: CN=93926edccdff7cc7987b4236ebe077b5f9ae29ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:a7:9c:86:77:cb:55:4f:2f:14:5b:c9:5f:
6e:bb:47:4a:9b:16:a7:e2:45:51:83:8e:bc:f3:43:
23:4f:5b:3c:2c:e5:d3:74:6c:b5:fa:da:cc:77:e9:
4a:cf:b3:cb:f3:e3:49:c6:d4:20:48:33:64:2a:42:
0a:4b:3e:a9:5d:68:6c:85:74:0b:8c:f6:be:f6:6c:
85:ad:49:9e:9b:7b:31:40:fd:22:60:5d:c4:ff:e0:
4c:b1:b0:01:c0:cd:3f:91:55:5b:5b:d3:f0:99:5b:
c7:c1:ee:72:26:67:12:03:b2:29:dc:1f:07:d6:e8:
00:e3:f1:8e:ed:3e:62:c4:1e:dc:37:d8:2b:4a:73:
ef:d2:3a:96:20:4f:26:ad:d3:27:1c:64:e8:96:cf:
0b:24:62:77:d6:ba:69:04:ef:e2:80:f4:7f:59:d4:
e8:4e:2e:df:3a:c1:b6:e9:ab:14:c6:ec:06:da:0e:
29:66:8d:bd:90:a2:a0:2d:19:53:87:4c:23:94:61:
1e:f6:ef:54:1d:31:56:71:e1:7f:d9:f9:df:4d:c5:
3f:5d:b0:e2:90:82:00:91:66:62:e5:0b:5e:ff:9f:
3d:6b:85:24:08:70:ae:81:0c:a6:3b:71:06:07:ef:
d9:d8:36:e9:e5:d8:87:a4:be:55:ad:a5:f9:45:ed:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:92:6E:DC:CD:FF:7C:C7:98:7B:42:36:EB:E0:77:B5:F9:AE:29:EF
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:e9:82:48:92:a2:d9:e5:1e:65:6d:e5:d5:df:a5:1c:9b:
cb:fc:86:9b:ea:c3:ae:f8:a5:8d:d1:74:c4:40:96:9a:e8:a8:
98:d6:f7:70:1c:2a:a2:47:26:b4:9b:97:f2:bf:ed:73:4b:52:
11:8f:54:cf:a2:d6:5c:6f:df:40:d8:f5:9c:46:ed:e5:6d:08:
f2:f8:a0:9c:fc:0c:54:f2:72:e0:b4:c0:be:1c:fb:c8:a9:25:
7a:32:06:08:92:91:be:17:7c:35:de:e5:da:ad:d7:d4:10:62:
9b:d1:c2:b5:8c:71:8d:8a:6c:63:d2:86:a0:f5:73:62:8f:25:
02:d8:b9:a0:a5:77:cc:c8:1d:2c:79:61:f6:5a:41:4c:d6:e8:
b4:6c:f3:16:4a:af:1a:14:98:15:36:97:71:39:2c:56:4e:d5:
ab:f9:c4:80:6e:9b:a9:2f:cb:2c:33:e5:4f:6d:e1:e6:93:14:
8c:f9:6f:7f:c4:af:1e:9e:b1:64:26:f0:7c:fd:22:25:5f:87:
64:88:b0:20:ad:93:4e:bc:87:5b:20:f6:30:cb:68:c5:2e:fd:
fd:1b:61:00:1d:b2:62:cb:70:f5:62:06:ab:5a:6a:cb:bd:12:
1f:a3:e2:03:c6:2c:e1:a4:6b:f6:e0:91:6a:61:44:20:f5:83:
fe:16:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:50 2026 by rpki-client