Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: Ikz/TmSde5Be7t2DI4o8/yuyQAGouAix+s6oFr50qxw=
Subject key identifier: 9C:AD:8A:D2:71:AE:91:DB:6D:70:B1:C5:54:19:03:19:88:33:90:73
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 019FA14D6864682214AB375C10514B886CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 19DB
Signing time: Mon 27 Jul 2026 02:00:32 +0000
Manifest this update: Mon 27 Jul 2026 02:00:32 +0000
Manifest next update: Tue 28 Jul 2026 02:00:32 +0000
Files and hashes: 1: S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa (hash: vxfwKl9OJNlj62NwZPK4TBDjwebx7L8XA//O2MRpF/I=)
2: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: w2KIYdQWjS5WPFafrK3W1arGS+CWHNcC/WbS5yFcAkU=)
3: c-YCWyzoKuSSywaDEkzGQvM7mCM.roa (hash: LATRwAOMpRe3Y12ruNlNc3V0nVK0fS7nwrlPNDtss+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:68:64:68:22:14:ab:37:5c:10:51:4b:88:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jul 27 02:00:32 2026 GMT
Not After : Jul 28 02:00:32 2026 GMT
Subject: CN=9cad8ad271ae91db6d70b1c55419031988339073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:69:36:f2:50:61:a8:99:fd:69:0d:fb:41:
0f:92:e6:e0:79:08:e7:57:9e:b2:2d:04:dd:ad:a0:
ec:d3:6c:94:62:77:4b:30:0d:a2:4a:f8:89:6c:00:
97:58:15:b0:24:dc:a2:fa:cc:49:d6:55:04:a6:63:
12:b9:16:f9:78:5d:cb:22:34:7e:e3:6f:f5:ab:89:
98:48:81:ac:1b:59:2f:99:a6:df:66:82:09:81:61:
50:8d:64:e3:d0:2d:38:a5:03:47:51:da:6f:a7:4d:
28:6b:c1:15:c9:bb:4d:d1:97:8a:77:b9:d6:75:9e:
06:dd:0c:91:65:22:4c:13:e3:e6:1a:69:4a:6b:a7:
91:34:8c:6f:5f:62:db:44:5f:ee:c8:c4:2a:ac:74:
db:01:b4:96:20:91:e1:f6:84:38:79:f0:fb:00:aa:
50:65:58:34:7b:d1:13:46:d7:e4:63:30:fb:47:c9:
62:73:74:12:64:1f:d6:78:30:70:c7:f0:55:14:93:
ba:44:20:be:ff:91:2b:e7:66:44:d2:46:d6:45:2d:
e3:8d:7d:99:8a:c8:04:1a:67:8b:1c:12:e0:66:99:
b6:7a:2e:b0:1b:f2:79:c7:a7:cc:ba:60:d4:b2:8c:
91:c2:e9:cf:06:51:ba:84:39:77:aa:5c:6d:1e:3a:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:8A:D2:71:AE:91:DB:6D:70:B1:C5:54:19:03:19:88:33:90:73
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:6b:c4:54:e6:39:c8:ab:1a:72:e1:a0:fe:2b:33:21:89:
73:60:7e:28:46:2d:d7:ca:b8:45:03:9f:eb:76:6e:f1:57:9f:
48:83:bb:4a:11:f2:19:e8:8f:8a:06:88:55:0c:0b:20:4c:52:
b1:c0:f0:0d:f2:9b:f5:8b:ba:9e:be:c1:6a:c0:26:80:08:47:
4a:3b:28:a9:a5:6a:4d:96:32:f7:7f:21:f2:a3:54:08:04:21:
f9:c2:98:db:4f:4b:aa:eb:2f:3f:dd:62:cf:22:d8:fb:17:cb:
7c:f2:3d:9a:79:88:4d:8d:33:bd:0a:50:9e:1d:3d:b7:44:66:
4f:12:b3:45:7a:f1:4f:f0:c2:85:6a:a5:59:04:71:b6:3a:9c:
72:a2:f5:d6:c3:f1:9a:ac:7d:84:58:23:29:98:8f:03:86:4d:
74:35:a3:c6:93:82:f0:29:76:b9:c6:04:c1:65:54:f5:43:74:
1e:93:b1:2b:1e:bf:28:1f:f1:76:4b:ad:33:6a:b8:39:51:e9:
5f:3b:51:ea:be:82:87:cb:ce:0b:3e:47:10:a0:b5:a2:c7:f6:
fc:f0:63:f6:91:a7:8c:2e:69:cf:a1:80:ca:fa:8f:87:61:ae:
72:5b:c5:ee:ef:c7:c0:c5:31:be:12:c9:eb:f2:66:34:9b:ee:
ae:6e:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:48:50 2026 by rpki-client