Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File: tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier: U2jxQNrP+1M7xIJ/S6XM0CbiOP00sx8uA7/GGY0C2YA=
Subject key identifier: 98:3D:D6:3D:8F:9B:BF:B8:0E:53:AC:28:04:7E:BB:41:36:B0:DD:8D
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 019FAABEFE6F70DF24E2030DA9F295989A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number: 157D
Signing time: Tue 28 Jul 2026 22:01:11 +0000
Manifest this update: Tue 28 Jul 2026 22:01:11 +0000
Manifest next update: Wed 29 Jul 2026 22:01:11 +0000
Files and hashes: 1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: UrBX8acLTPU0IW7fIDUaVW9OvZQnLtKvyxBFTJ7lBVQ=)
7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:fe:6f:70:df:24:e2:03:0d:a9:f2:95:98:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jul 28 22:01:11 2026 GMT
Not After : Jul 29 22:01:11 2026 GMT
Subject: CN=983dd63d8f9bbfb80e53ac28047ebb4136b0dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:30:58:39:17:aa:3b:64:94:28:d0:25:26:
6c:98:9a:c8:18:33:62:aa:da:60:92:39:b1:be:3b:
d1:3d:94:1a:7b:e8:02:67:aa:2c:91:82:42:87:2c:
fb:f9:89:fb:4b:49:ed:be:bf:38:b4:c0:56:a3:71:
0a:41:76:01:94:23:72:1a:3a:63:fb:f6:b8:a7:e1:
ea:f7:4d:bc:1e:1a:00:39:a2:48:46:04:5c:75:bf:
f9:77:bb:9d:5a:c5:39:5a:cd:f9:4a:16:12:20:2a:
4d:cf:94:f3:8a:cf:c2:0e:bc:73:9a:2b:29:af:68:
e1:29:63:69:82:1c:84:6a:27:f0:d5:ab:63:8b:1f:
1c:3e:70:98:9f:f3:fc:2c:ae:d3:6e:56:c4:71:e7:
c0:f5:81:24:56:7f:7c:eb:73:be:01:09:1d:fe:7e:
a3:80:06:a9:3c:b7:b7:5d:0b:8d:08:66:97:5c:c0:
e9:d9:f1:71:42:ae:8c:a1:e7:ea:e0:f0:47:81:06:
b0:ef:be:33:52:4c:05:7d:99:d8:71:c7:8d:61:1e:
17:78:21:40:53:5f:06:10:d5:cf:bc:0e:d5:5f:9d:
47:9f:45:3c:42:3f:88:22:9e:ef:6f:e3:64:a8:7b:
f9:4a:4c:7c:eb:e2:07:70:bc:b2:b3:54:ce:85:9a:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:D6:3D:8F:9B:BF:B8:0E:53:AC:28:04:7E:BB:41:36:B0:DD:8D
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:ca:f2:fe:d5:09:41:10:5a:fb:70:d3:cf:0d:87:fa:13:
d1:97:ae:91:58:2f:01:ee:8d:b0:61:6e:c3:88:0c:9a:be:e1:
d7:aa:08:80:33:1e:43:34:68:da:c6:29:65:1b:a8:8a:f4:e0:
85:44:cd:e7:a4:72:8c:26:8e:6e:fc:07:9d:8b:7e:15:3d:c5:
32:ec:a4:e4:93:88:2c:de:73:ef:fa:3c:d3:af:7d:b6:a1:e9:
1a:31:cf:07:17:16:32:6a:11:3a:dd:4d:ec:43:6c:35:ba:12:
83:c0:57:51:c5:28:29:9f:8d:b6:cd:af:e9:11:83:b4:09:d4:
aa:80:b9:2e:e0:d1:6a:d4:1b:ae:75:1e:82:49:85:9d:0b:a5:
bf:5c:ad:32:34:80:28:8b:82:9d:58:27:e2:d3:a0:5f:0d:66:
11:06:ee:8f:9f:52:64:af:f0:6a:e6:4a:05:91:2a:18:59:57:
de:55:7a:bf:5b:a3:22:36:dd:a0:22:64:39:38:87:dc:d6:af:
0f:30:ef:1a:b8:e1:e3:dc:79:73:d9:c2:dd:46:e9:78:8a:84:
30:8d:3c:dc:d5:18:83:89:08:44:86:e4:f7:8f:1d:aa:d9:f6:
61:d3:67:65:6d:83:80:06:75:4f:fb:92:90:21:60:47:7a:07:
0a:d6:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:40 2026 by rpki-client