Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: Utcei1Uiyd5Lrrq19NNJAYAH7jEg3OJTIy78u9LuHU8=
Subject key identifier: 4F:FB:C4:E2:10:D5:9A:C8:B0:D3:80:50:BD:23:5F:2F:38:91:6E:0D
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019FAABE4B81E6EC185FC938DCC9BD76CC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: n1FTF/VIbwGqkxXZA+oS1pevq4bcCyPN0Oodz8T8oVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:4b:81:e6:ec:18:5f:c9:38:dc:c9:bd:76:cc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=4ffbc4e210d59ac8b0d38050bd235f2f38916e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:55:55:df:fd:6e:d1:1c:9d:39:05:34:ec:
2b:77:12:f3:fb:07:0a:fb:ea:63:ac:4e:16:20:1f:
21:e4:5f:36:cc:18:d1:ea:a2:89:bd:95:33:30:f0:
1e:aa:a7:f1:83:ec:ee:7b:d6:d8:c0:6e:53:a5:87:
78:c2:03:aa:72:c7:67:a8:6e:1a:61:cf:d1:93:07:
a1:b2:61:9f:fb:68:30:db:38:1b:1f:cd:3e:6a:44:
c4:0f:34:c3:68:61:d8:19:94:79:12:c8:ab:cd:ac:
46:bc:a3:16:e0:0a:c0:48:66:df:b8:bb:cc:9f:1c:
0b:82:3e:59:0c:5f:67:74:84:e2:e7:14:b3:09:63:
b0:9a:53:43:da:32:6d:26:d7:c5:0c:cc:91:dd:65:
09:37:04:58:b5:f7:86:fe:1a:46:5b:9c:88:16:98:
49:bd:07:28:a1:a6:b1:b1:ce:94:c1:2f:f0:6c:3e:
9b:3e:f3:24:e2:c9:ad:33:c5:6e:5f:a9:52:cb:d0:
59:06:76:47:37:0b:cc:cd:cf:99:d8:10:cc:cd:c9:
5c:81:07:17:fb:6f:c4:0f:6f:8e:f3:fe:23:dc:af:
52:3b:e6:ef:75:54:73:1d:8e:21:7b:05:f6:1d:b9:
2b:2a:59:93:eb:31:d0:4b:79:0c:93:6f:9e:d2:73:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:C4:E2:10:D5:9A:C8:B0:D3:80:50:BD:23:5F:2F:38:91:6E:0D
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b7:a8:6e:2e:a8:0f:07:6d:6f:ed:e6:f4:d2:0b:ee:9c:f4:
40:18:0f:83:5f:31:79:bb:a7:3c:6a:95:11:1f:e5:a9:16:10:
d8:4b:46:2e:cd:3f:e2:e6:d7:42:1e:6a:bd:d9:c3:ed:a9:a9:
2c:67:3d:cf:d8:7c:72:19:e2:1c:eb:27:36:14:0a:d3:85:eb:
31:ff:72:2f:87:6a:72:61:37:b9:ad:92:22:df:45:6a:98:7a:
c8:0b:b9:2e:ec:47:ae:13:69:95:27:a7:cf:2e:d5:e4:98:5b:
fa:e4:89:07:85:21:6d:c0:42:62:00:28:89:dc:e1:3b:a0:45:
c0:9f:ef:aa:af:17:6d:7a:55:a0:1b:8b:ab:01:ae:8d:1c:ef:
df:1a:1e:c9:a0:d1:4b:32:59:32:f6:74:f6:4d:e3:4a:dc:c6:
55:63:72:cc:46:63:54:ea:48:2d:8b:44:bc:4a:26:20:4e:7a:
d8:1f:88:5f:e4:2f:7c:97:6a:45:dd:54:d5:3a:03:42:75:03:
9b:63:af:4c:36:cd:4e:8b:bb:c2:66:21:6b:92:73:1a:64:1c:
17:13:41:39:e7:0a:e1:38:d9:d8:7a:da:da:98:3e:09:b5:79:
24:12:a6:38:36:4f:ff:c1:45:0a:2e:b5:a5:3b:b4:a3:d0:2e:
27:e1:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:57 2026 by rpki-client