Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: pUTBhi05hbj1Q5AO0gQWILQ0H56sIKeARB1jgm+NTxU=
Subject key identifier: E2:B9:27:2F:C6:C9:D7:46:28:28:A7:EB:0B:30:E6:BC:29:F1:74:51
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 019FA8D07D7FE7A7FA3D40D35D722CCE0C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 13:01:03 +0000
Manifest this update: Tue 28 Jul 2026 13:01:03 +0000
Manifest next update: Wed 29 Jul 2026 13:01:03 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: jahXAz/J7LNpxUp2IL86jH4SWXXBZmvbHu024fPjolg=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:7d:7f:e7:a7:fa:3d:40:d3:5d:72:2c:ce:0c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Jul 28 13:01:03 2026 GMT
Not After : Jul 29 13:01:03 2026 GMT
Subject: CN=e2b9272fc6c9d7462828a7eb0b30e6bc29f17451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:69:18:a8:2e:12:4e:ff:f1:8d:d5:7a:8b:
a2:63:3d:8d:1e:2e:26:de:f9:58:f5:67:8a:f7:dc:
98:b0:43:92:8d:7c:52:e4:58:86:b4:94:53:49:ae:
94:aa:85:58:f8:88:db:ed:ed:0d:03:74:49:1d:a5:
84:e6:82:88:5c:9a:b7:8c:48:38:b1:01:1d:ad:a4:
32:40:ab:45:23:ff:46:53:cc:7d:e3:55:8a:be:ea:
a9:5a:02:d8:90:f5:2f:53:8e:24:91:17:ca:25:76:
04:c4:0b:34:f5:b8:d8:11:97:50:9c:5c:39:3e:99:
ae:d2:3c:11:32:af:96:4a:6f:4c:27:e1:11:ea:af:
59:ad:20:fd:b3:e4:c2:41:f4:3b:02:3d:36:0a:4d:
ef:e7:40:fa:1e:e3:e2:1e:c6:2e:da:bc:32:15:9f:
0e:fd:36:cf:9a:c9:b6:b3:8b:84:11:b4:e2:a4:c6:
d6:1f:bf:eb:fa:96:c9:a5:8b:2f:0c:a2:5a:25:2c:
da:fc:36:cc:f9:dc:65:f2:99:d7:a9:ea:f5:2e:76:
b4:a8:c7:06:bd:40:12:48:b5:e2:bc:c1:6a:5a:39:
31:66:97:df:47:d1:d1:87:0c:ea:ab:b2:fb:6b:a5:
35:ca:56:b4:18:04:76:6e:a3:82:84:1a:7f:60:91:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B9:27:2F:C6:C9:D7:46:28:28:A7:EB:0B:30:E6:BC:29:F1:74:51
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:53:d9:61:38:03:b4:73:ef:33:7c:a0:59:46:b5:2f:3f:
82:51:c7:a8:a3:2f:6c:26:b2:7c:7f:bf:1a:04:ca:1e:23:6a:
9a:d7:02:05:ed:71:04:77:98:08:c2:ba:45:0d:3d:14:c8:55:
91:a3:70:c8:c2:7b:ac:4e:f9:66:7b:fc:9d:77:62:d2:51:bf:
7e:fa:b5:ce:11:71:ac:10:02:c2:c0:1d:ef:f8:79:c6:34:c5:
5c:fc:4b:5f:a4:c9:9b:a9:b0:6f:54:37:d0:32:c5:d2:99:da:
f0:d7:68:f9:55:1a:65:49:09:93:34:c4:57:01:57:d2:10:66:
5e:a8:7e:ab:98:cf:ce:56:77:78:b6:ce:b6:9d:a8:b2:13:9e:
6f:8f:02:92:86:22:bc:17:ec:50:e6:c6:92:97:26:94:c0:12:
36:8b:e3:e5:ab:14:7f:2c:19:1a:6a:3b:b2:63:c4:3e:c6:fd:
ce:49:dc:24:c0:09:03:82:1f:94:84:8c:ed:29:89:1a:1d:48:
87:e8:b5:77:b3:08:60:9f:9e:0a:47:49:d9:c5:06:05:a5:10:
79:59:39:8c:24:5f:9e:62:5f:ab:9e:ae:4d:24:c7:aa:42:19:
1b:8a:23:a4:3a:9e:87:95:af:91:44:df:dd:98:d6:f4:c9:5a:
e0:9d:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:08 2026 by rpki-client