Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: 42VYCEFFAs+R26j6qc3cKd4UDljJQoI3BlelCSUXE7Q=
Subject key identifier: E7:81:B9:DA:83:2F:88:82:FD:39:71:93:D5:F0:D7:29:27:36:C4:41
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01A0B3F5F7B2C8BA58F2AEB9BF2F2977A015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 19F8
Signing time: Fri 18 Sep 2026 10:00:36 +0000
Manifest this update: Fri 18 Sep 2026 10:00:36 +0000
Manifest next update: Sat 19 Sep 2026 10:00:36 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: R4rm/6lSjlZfZOQ/fo9jzghc7eF0EvHYmPYEvIoK1uM=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f5:f7:b2:c8:ba:58:f2:ae:b9:bf:2f:29:77:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Sep 18 10:00:36 2026 GMT
Not After : Sep 19 10:00:36 2026 GMT
Subject: CN=e781b9da832f8882fd397193d5f0d7292736c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:81:ac:2f:e7:61:75:62:f2:10:61:39:9f:
ce:71:df:a2:2a:b1:7d:23:b1:07:36:57:17:ae:6d:
0f:37:b4:82:23:d0:d0:6f:f7:5f:8b:78:c1:8f:2b:
8d:79:c0:8c:5f:9d:18:94:4e:29:18:f9:d6:d6:04:
9e:b9:4c:9e:06:c0:a6:b3:0d:9d:a7:ef:1b:c3:f1:
b8:74:98:39:b1:7e:82:e8:43:ce:d1:c8:06:a3:16:
50:f7:fc:fe:96:3a:eb:bf:43:0e:f4:c9:68:0e:05:
17:e0:cc:38:20:95:20:ae:71:9c:b1:51:b5:40:d3:
f8:46:4c:cb:e1:b1:ba:4c:f2:00:32:7d:5f:12:c4:
98:27:8d:1d:15:74:5f:53:4b:0d:ed:65:0f:73:63:
57:f0:db:4a:2c:da:cf:ab:ea:62:fc:94:b3:c0:29:
37:02:4c:c6:69:08:3d:f2:48:1d:1f:65:fb:80:5b:
e2:8f:ff:dd:67:3e:0b:a7:31:43:d7:af:32:ad:94:
58:fd:5f:95:28:69:7b:6a:23:0e:b2:b7:97:2a:d7:
2c:ee:7b:e6:05:6d:68:41:a9:64:e6:ee:b8:37:42:
9c:cd:49:1c:d2:1b:d6:da:02:a8:c8:a1:1e:a5:d3:
cd:b2:25:25:6d:99:81:87:46:0f:a5:3b:c1:1b:8b:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:B9:DA:83:2F:88:82:FD:39:71:93:D5:F0:D7:29:27:36:C4:41
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:2c:fb:ee:fd:14:41:c5:42:69:eb:cc:0b:3e:17:eb:95:
4b:af:e7:84:23:15:f4:e3:3d:7c:82:87:78:83:21:96:f1:bd:
18:9f:eb:b2:90:8c:98:47:6e:da:53:a2:a0:cd:39:25:99:10:
8a:73:0e:8b:8e:bf:b8:55:fb:e0:89:91:36:c1:dd:c4:dc:f0:
34:65:42:4b:4b:ab:25:bc:ec:c3:5f:e0:3e:59:aa:dd:59:6e:
e1:64:c9:d5:2b:d5:35:79:36:72:e6:89:56:54:b1:4b:5e:0a:
85:2c:b3:8a:fa:01:88:0f:b9:83:f1:d3:72:51:fd:d4:87:ac:
0d:f5:49:42:4f:e7:fd:44:22:26:ab:71:89:07:fc:fa:e4:0f:
75:df:19:18:ef:fe:85:22:1f:07:fe:c4:69:59:6c:90:c4:98:
74:5d:5c:32:40:86:c5:1d:89:26:4c:c7:89:df:e1:1d:c2:00:
19:4f:35:5b:64:85:d1:7b:0d:bf:9a:11:96:38:0a:39:f8:8c:
8a:67:0d:17:55:00:92:b0:ef:fd:b9:a5:f8:d3:b5:8f:42:7b:
ab:34:42:24:54:5b:0d:76:e7:35:80:62:cf:cb:40:cc:56:84:
29:9f:c6:ea:a6:ca:12:b3:d8:16:80:1d:9a:eb:76:ad:be:22:
39:3a:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:25 2026 by rpki-client