Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
File: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft (raw, json)
Hash identifier: oRto8zoa7xvUE5FwG0vgCDNCfwHyx2abgo62Tq2md1M=
Subject key identifier: F4:09:AC:32:D4:44:56:D9:1C:0A:75:7C:BF:9C:83:47:B7:66:BA:2C
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 019FAC766F02F84EBCC9BE9BF235A725EE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:10 +0000
Manifest this update: Wed 29 Jul 2026 06:01:10 +0000
Manifest next update: Thu 30 Jul 2026 06:01:10 +0000
Files and hashes: 1: tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl (hash: gCCA8bmuvI6kbgHWmmT1VmwL5Q4pyDObPPccQXaRgEc=)
2: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (hash: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:6f:02:f8:4e:bc:c9:be:9b:f2:35:a7:25:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Jul 29 06:01:10 2026 GMT
Not After : Jul 30 06:01:10 2026 GMT
Subject: CN=f409ac32d44456d91c0a757cbf9c8347b766ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:26:6a:cc:5a:8f:1f:79:32:35:c6:c5:c8:
a3:58:91:2d:83:5d:eb:a1:04:e1:d4:bf:a5:71:26:
ee:d9:0b:12:9d:08:b8:d5:67:40:dd:f4:3a:10:ad:
e6:f7:06:f1:9b:b5:73:02:17:c3:37:f7:f1:60:be:
4c:e9:a1:60:2a:a7:e3:17:8b:6e:66:a2:0a:cd:7b:
ad:4b:bd:47:64:15:b5:81:ce:75:0a:06:f5:f9:42:
45:a0:6c:91:7a:ee:5d:66:97:6a:3c:ab:92:e0:23:
16:8c:e2:2e:bd:83:67:e1:d5:6e:a7:c1:c7:1d:73:
5f:51:7b:28:88:c7:af:02:1b:a0:f8:35:6b:74:aa:
6c:11:3a:76:23:6b:28:ba:5a:f8:25:e3:50:3f:45:
28:fb:2e:08:03:21:f2:12:1b:e4:56:34:1c:84:6f:
88:8d:72:56:04:95:35:bb:b5:1e:d0:da:bb:a7:3a:
b7:43:d4:db:b7:b2:b9:d4:8d:6f:8e:14:ea:47:ac:
65:33:5b:34:69:ae:86:44:28:ed:13:45:6a:94:8d:
09:19:5e:21:df:76:b4:11:24:9a:d2:8a:e6:69:d8:
07:ff:f4:ea:75:b6:9e:ed:f5:c9:14:dc:74:f9:e3:
29:07:79:56:96:f9:5e:5c:a3:dc:36:91:a9:99:d0:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:AC:32:D4:44:56:D9:1C:0A:75:7C:BF:9C:83:47:B7:66:BA:2C
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9a:c8:9a:4f:d0:22:8c:91:7f:0b:ba:75:51:01:36:c8:c6:
60:8b:98:e6:ae:fc:f9:8e:3c:4d:84:0a:e1:75:2a:ae:8c:b1:
45:be:11:96:a4:9b:0e:9f:47:00:99:a0:14:16:50:af:34:c0:
99:59:f6:73:f4:03:9a:bb:50:14:49:64:6a:e2:72:fe:82:ec:
f0:fa:b0:98:25:80:8a:0f:b1:ce:bb:e6:49:79:53:28:79:6d:
28:b5:c1:12:37:10:82:79:e7:ff:bd:ad:42:ff:96:d3:10:93:
49:ef:c4:a6:85:6e:35:1f:f1:61:52:06:9d:6a:b1:4c:2f:d1:
e1:14:c3:12:b5:14:e3:64:f3:44:59:a0:98:f2:d9:7d:ff:57:
0a:12:74:7f:6e:96:a1:e9:fc:3b:c7:f3:68:61:8a:df:de:0d:
ab:47:e4:0d:4a:bf:0d:6b:01:78:1f:25:e6:cd:db:63:5a:8d:
4b:aa:75:6a:dc:c3:3b:dc:5e:ad:cb:b1:e4:66:19:6e:54:c3:
ea:41:b1:c4:d4:ad:38:73:9c:25:ad:f8:b1:81:81:42:13:58:
5b:ce:d2:07:d3:bc:0e:9f:c8:34:d9:65:88:3e:ed:df:40:e4:
be:f0:5a:a7:cb:8f:1c:6d:00:36:0d:56:57:67:03:ad:47:61:
be:fe:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:56:31 2026 by rpki-client