Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: rFMFK8jEsLRp4ewknwFTEpT1n0Fwhj8IB+vDKcp6BWo=
Subject key identifier: 2B:3B:BC:17:1F:D4:04:E0:15:5C:00:46:44:88:53:33:CA:EB:98:31
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019FAB2C4053397078B91ADBF3668A952005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1A36
Signing time: Wed 29 Jul 2026 00:00:31 +0000
Manifest this update: Wed 29 Jul 2026 00:00:31 +0000
Manifest next update: Thu 30 Jul 2026 00:00:31 +0000
Files and hashes: 1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: gH15FMzSSkc4/vV1n6AM4T0h17JB72M235ZHppwyZGY=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:40:53:39:70:78:b9:1a:db:f3:66:8a:95:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jul 29 00:00:31 2026 GMT
Not After : Jul 30 00:00:31 2026 GMT
Subject: CN=2b3bbc171fd404e0155c004644885333caeb9831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:f5:94:1b:15:69:21:71:63:86:39:95:ce:
d5:87:b5:6e:fb:03:c6:ca:26:5e:86:7d:46:a4:9c:
b3:50:bc:73:a9:3d:30:b3:3c:9d:12:6d:a1:2d:b8:
89:16:46:42:e1:bf:02:fb:14:e1:e5:3d:1c:49:0b:
86:3a:ce:e3:59:ae:85:c1:53:ff:69:06:dc:e2:99:
5e:7a:f0:7a:71:4e:39:d8:51:e0:e7:47:9f:b7:62:
c3:fe:4d:b1:02:93:88:68:0b:b5:7a:d6:fd:32:0f:
7c:d5:9d:39:59:37:dc:9e:f9:51:7b:b6:64:64:38:
a4:31:25:a7:65:ed:bd:9a:05:18:2c:34:23:0e:3a:
df:9c:6b:c3:fd:78:c5:ac:d6:3d:97:f9:54:53:ac:
85:fe:88:ad:6f:8b:f0:10:eb:2f:97:e2:6f:0e:67:
51:44:ed:8c:8c:6e:6f:ba:43:c2:44:de:d0:9a:9c:
51:ba:0d:b3:f0:f0:b5:fa:8d:d4:89:00:c2:87:9f:
05:98:c8:1f:fb:fa:3a:fa:30:de:39:3c:7f:6e:7d:
c8:07:87:3e:40:a6:b0:b2:ba:49:2d:f1:1c:5b:12:
40:7b:38:6b:c2:f4:14:f2:89:c2:4a:27:93:4b:9d:
fe:d4:35:9a:34:6f:36:9f:94:9d:8e:47:7b:b2:72:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3B:BC:17:1F:D4:04:E0:15:5C:00:46:44:88:53:33:CA:EB:98:31
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:02:46:b1:46:15:9f:f5:a9:ca:54:30:dd:a4:85:1d:a6:
7f:0f:4b:e9:b2:c5:6a:6b:94:6f:f5:08:b7:ed:a0:3a:16:72:
e3:72:22:b1:41:a7:e2:26:c4:a8:79:ca:00:8f:03:d0:f1:ef:
85:e8:d4:35:2e:bd:a4:a8:6a:47:d5:1d:4c:ab:b3:ca:f8:ac:
9b:b9:df:22:21:af:ae:97:c4:3f:88:0e:5a:ce:c0:91:6e:ca:
c2:cd:c6:6e:a1:55:a6:88:2c:f4:eb:c8:b5:c3:2a:82:b0:b5:
74:66:70:c1:c4:7a:2e:f7:7a:c0:69:8f:9d:64:72:1b:94:8c:
94:d3:25:87:9b:90:63:38:b8:df:40:b4:fe:88:38:a2:e2:f2:
4c:fb:59:9a:ec:ff:66:fd:0f:6b:cb:fe:bd:58:0d:f1:dc:65:
28:25:7e:ad:02:f0:8b:5e:ed:64:b4:6d:ef:79:4c:6e:d9:d5:
39:bf:cd:b0:26:b0:51:3f:0d:70:33:94:87:9e:4b:de:82:9e:
63:43:7a:f7:6a:6d:20:6b:8f:30:8b:80:5b:ef:a5:54:52:48:
3f:2c:74:78:db:20:7b:ca:1c:dd:bd:37:c8:7a:05:37:91:67:
97:5a:28:76:b9:ab:2a:05:82:cf:66:cf:55:71:3b:55:18:0b:
69:69:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:58 2026 by rpki-client