Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: h1ypsMWrp9p6DKcxApCKmFh9iu0GcDFdbNDyw+N0mSU=
Subject key identifier: 6D:50:F7:98:9D:18:0B:57:8D:EE:09:B3:76:93:FA:90:51:78:55:73
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 019F85D5F7600A291980F03064320E34AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0C21
Signing time: Tue 21 Jul 2026 18:00:19 +0000
Manifest this update: Tue 21 Jul 2026 18:00:19 +0000
Manifest next update: Wed 22 Jul 2026 18:00:19 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: 0BvR/oJH3TjDt+BEF+L8QwwhkpIILaFs9bjolA7c7yY=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:f7:60:0a:29:19:80:f0:30:64:32:0e:34:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jul 21 18:00:19 2026 GMT
Not After : Jul 22 18:00:19 2026 GMT
Subject: CN=6d50f7989d180b578dee09b37693fa9051785573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:ab:88:58:60:7d:dd:cb:cd:f4:3a:0d:c7:
e7:27:cf:58:6f:af:b9:d0:9d:4f:46:9a:03:bd:48:
eb:74:f1:b6:e3:a5:8e:ba:4b:83:d0:c2:7c:dc:44:
ff:83:0c:0b:cd:30:23:b5:25:1b:d6:d9:cd:c6:b3:
3c:e8:b4:9c:3d:d6:99:9e:93:54:2d:b7:a6:62:1d:
b0:8a:34:4e:91:39:67:7a:95:db:1e:7d:6a:d1:48:
30:b0:63:d3:64:a0:b8:69:dc:cf:c4:95:c4:f4:1b:
f7:5a:09:fe:71:c5:da:81:41:3c:3a:88:58:1b:0d:
6f:90:bc:d1:4d:b8:cd:2c:63:ea:3f:84:2e:e2:09:
50:f1:04:49:cf:6c:10:00:10:ef:4f:4e:4a:b3:3f:
b4:d9:b5:4e:26:b0:e2:67:2e:c5:04:d7:04:b4:36:
eb:fa:79:0b:c1:b6:ce:c3:16:1d:34:19:6e:48:80:
80:98:00:70:42:80:d8:ae:4b:59:50:3d:94:43:8b:
57:19:a8:b0:bf:a4:b4:d4:f3:1d:f7:1b:6a:b5:a0:
36:05:a0:53:11:dd:ab:db:68:7f:49:26:40:bb:2b:
e9:b4:0a:d8:53:2c:70:08:01:63:42:9b:54:f2:58:
94:a2:8b:fc:a4:72:31:49:27:85:0a:49:ca:fb:14:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:F7:98:9D:18:0B:57:8D:EE:09:B3:76:93:FA:90:51:78:55:73
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:3a:bb:df:4e:e8:04:07:b1:b4:a3:85:aa:c2:33:11:23:
3c:75:66:9b:76:4c:c1:df:97:bb:41:77:96:ed:fa:11:c2:3f:
d3:34:ec:a8:db:db:c3:39:05:9d:20:e8:49:41:50:70:a9:1b:
70:05:5c:b2:a9:58:2d:e3:ab:15:68:ee:a7:b0:66:ee:e6:99:
68:28:7e:3a:78:76:83:53:40:b5:e4:30:f0:90:16:f9:f3:a8:
78:5f:c7:6e:53:b5:72:d2:f6:8a:96:8a:33:f5:80:57:fb:9c:
69:b2:55:c5:f4:bb:46:26:d9:a1:d6:08:7a:5b:2b:69:89:2a:
76:25:97:57:3c:34:5c:fe:97:b6:18:5b:28:3c:f5:e4:37:d7:
8e:f3:a8:28:01:2d:1c:33:ff:75:5c:56:27:f0:f3:a6:f3:9f:
be:ab:c2:41:f2:51:cf:40:94:3a:45:9d:32:52:86:01:93:92:
79:de:ec:e2:2e:a3:63:8f:d2:e7:d3:9f:89:01:01:51:36:3a:
23:86:ca:3b:19:31:5d:18:83:72:c3:ad:53:32:ba:85:cd:44:
6a:aa:b6:f3:f4:82:08:6d:19:f2:71:44:43:be:84:4a:86:ab:
a5:13:19:0d:10:aa:29:81:50:04:4b:52:94:4d:ba:a1:ea:2f:
dd:e5:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:31 2026 by rpki-client