Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: Yw66OYeYDFCtTb+6sMQZeC3Bis07pd7i+nlUblvIgPg=
Subject key identifier: C4:64:76:46:D7:53:BE:EA:8B:E6:D4:A4:A3:43:12:2D:8C:C7:75:2E
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019FA004775A66618A6AD151E5123C075E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 03D2
Signing time: Sun 26 Jul 2026 20:01:14 +0000
Manifest this update: Sun 26 Jul 2026 20:01:14 +0000
Manifest next update: Mon 27 Jul 2026 20:01:14 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: Ju5vubciJygJukWm3YxVEx8m0Paoz9oLvjnx0PamIWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:77:5a:66:61:8a:6a:d1:51:e5:12:3c:07:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Jul 26 20:01:14 2026 GMT
Not After : Jul 27 20:01:14 2026 GMT
Subject: CN=c4647646d753beea8be6d4a4a343122d8cc7752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:91:89:c5:ea:74:ca:d5:65:e8:c8:d0:16:
3c:b7:aa:a1:e7:52:86:46:41:a0:d0:8e:35:49:e7:
dd:20:88:17:7c:69:ee:70:fc:3f:3e:4d:e7:81:10:
5f:b9:b0:06:1e:84:4b:d3:b7:bb:9d:ce:21:2c:7c:
e8:3f:d8:34:a6:29:68:ac:c9:b3:8e:08:5d:44:81:
66:f8:90:85:1b:8b:fc:1d:3a:6b:6d:c9:f3:ad:41:
52:0e:82:0d:f5:d9:eb:c3:21:02:b4:ee:56:48:c1:
af:3a:85:1b:68:72:18:26:03:13:21:20:86:16:9a:
30:7c:ca:c6:74:8a:ad:f9:ec:54:e2:6a:e4:9e:4f:
58:19:ac:d2:dc:0d:df:58:03:6b:d7:1a:64:f8:22:
d9:fc:81:5b:87:21:ac:36:a2:d6:8c:57:26:df:fe:
72:ab:11:05:d6:eb:fd:15:7c:f2:04:d9:0d:44:df:
a1:42:81:af:a0:a7:36:a0:fb:97:de:17:d1:ed:3d:
aa:3c:95:a2:a0:73:1b:04:bb:bf:b5:a1:ed:64:58:
9c:a6:90:c8:4a:83:68:9e:0a:d6:0a:b0:89:9d:ba:
8a:0d:4e:6b:3a:90:4d:4d:a0:ad:97:a5:1a:e3:17:
b1:bc:21:74:8a:cb:8b:26:55:6b:02:45:d6:aa:bd:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:76:46:D7:53:BE:EA:8B:E6:D4:A4:A3:43:12:2D:8C:C7:75:2E
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:33:1d:de:97:92:de:df:ab:5b:37:d2:3c:aa:20:ba:8a:
da:b2:da:68:0f:fc:a9:68:55:9b:54:af:b0:49:b4:90:6f:40:
dc:dd:c2:9f:dc:48:36:c6:3b:8d:81:f1:79:86:b1:16:80:32:
71:4a:52:8c:b1:cb:2e:d2:8e:2f:8a:9a:b8:aa:bf:82:0a:1f:
7b:79:f2:2b:40:a0:c3:d8:12:4c:a4:da:e9:79:95:7f:f7:b7:
bf:ab:0a:dd:9b:b5:d2:b3:d4:11:c6:4d:60:06:5b:83:4e:35:
24:c9:d1:64:bf:9f:9d:ad:1d:55:bc:5f:c4:af:1e:85:3b:31:
d8:bf:3a:f2:98:b5:c6:40:e5:1f:16:cc:df:6d:2a:be:80:50:
8c:4c:93:d3:cc:0e:4e:e5:12:54:1b:ad:13:b7:6b:cf:df:e5:
e2:fc:a5:28:b0:2f:4a:57:da:a2:18:a8:62:3f:3c:b1:7a:ed:
0f:d1:2c:d4:e6:c0:79:1e:51:27:27:af:54:aa:55:42:92:2e:
58:e4:5d:4b:56:69:f2:54:f7:75:fa:69:39:07:31:80:fa:c5:
e4:e7:06:84:36:8b:3d:6c:f1:d3:5c:a9:52:54:7d:30:11:bc:
70:2f:65:25:c1:c3:5e:64:d2:67:88:ea:6e:d0:df:c6:99:38:
1e:65:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:28 2026 by rpki-client