Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: 2VpJrgzX54lOUXWS6uZtjAEoIgMMeafng2rdaZarjGM=
Subject key identifier: B1:97:44:62:E9:71:83:F3:F5:80:7B:45:96:1E:67:F4:C5:8F:1E:8F
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019FA14DC7C50917E1A875089048ACD5B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 02:00:56 +0000
Manifest this update: Mon 27 Jul 2026 02:00:56 +0000
Manifest next update: Tue 28 Jul 2026 02:00:56 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: y2TBy2Rx7Cd8zqKLbC+3OsW7zLF6wpVdsh8tzAxEqfs=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:c7:c5:09:17:e1:a8:75:08:90:48:ac:d5:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jul 27 02:00:56 2026 GMT
Not After : Jul 28 02:00:56 2026 GMT
Subject: CN=b1974462e97183f3f5807b45961e67f4c58f1e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:3d:7f:82:1a:9a:6c:b8:f7:6d:96:a1:a1:fc:
59:f4:5b:43:15:29:9a:10:2b:26:a5:60:35:f1:c8:
73:b4:88:aa:50:35:c7:cc:46:86:a9:85:25:dc:fc:
37:78:de:1e:4a:08:c6:68:c8:af:91:7c:a4:e8:e8:
14:8e:79:16:91:a7:98:4c:d8:39:c6:06:c3:fa:f7:
15:bd:79:27:9f:42:7f:aa:25:88:f5:fa:ed:a5:6e:
2d:ee:8d:cd:5a:7b:f5:6c:bb:68:46:38:8b:33:c0:
aa:8e:95:d5:0d:9b:29:b9:fb:f9:7e:1c:53:13:85:
83:bf:5c:44:0a:40:65:a9:23:25:36:67:70:36:4e:
8e:4c:f2:aa:b5:f4:55:dd:2f:52:81:52:9f:8c:18:
fa:8d:58:4b:a8:e6:a4:ed:9a:0b:c6:d7:cf:c6:83:
b7:f8:a7:7a:dd:1c:67:2b:ea:b9:b5:fa:03:4f:9b:
b3:cc:89:4b:ca:e9:db:c0:bd:d3:be:37:b4:1c:31:
c0:c0:b1:c7:2d:99:12:76:5e:4f:99:35:94:ed:d3:
ee:47:2d:2c:e8:88:8e:8b:c0:ac:16:9e:5b:fb:e2:
6e:83:36:66:36:3e:a6:bf:93:44:14:a0:e8:98:eb:
a9:7a:32:60:24:68:10:fa:75:7c:43:09:f6:48:a5:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:44:62:E9:71:83:F3:F5:80:7B:45:96:1E:67:F4:C5:8F:1E:8F
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:89:5b:10:05:45:0d:ef:66:8c:13:d9:3d:65:b0:33:73:
fe:b9:ee:60:2d:9d:71:01:68:06:58:df:b0:22:80:99:bc:64:
0c:6d:fb:41:a2:0e:da:7c:9d:83:46:c1:8f:d8:0f:bb:f6:a1:
f0:01:cd:77:7c:bb:d6:91:ff:cb:55:e7:a0:c7:a8:2a:c4:f7:
95:8f:63:46:c2:25:6c:1d:dd:2c:9a:e0:1e:e5:50:af:ea:e6:
15:0c:e4:3e:b1:4b:f8:11:9e:bf:7c:c2:2f:1d:54:a0:06:67:
a1:46:6c:98:de:45:ba:e8:76:1a:de:3a:52:f5:59:cb:ef:46:
2e:8e:11:6b:a4:8a:fa:08:79:21:72:d3:66:68:3b:4a:99:31:
10:3f:71:67:fd:d4:b9:bb:04:58:14:11:0f:7a:6f:f4:87:49:
e9:21:10:be:b2:d8:e2:12:98:0b:36:d1:08:d5:3d:b9:94:ba:
18:04:33:48:8f:2a:1f:1e:16:27:6e:85:52:32:da:06:d9:74:
74:11:c9:57:e2:84:33:55:31:3c:c7:60:f7:30:c2:5f:dd:77:
fa:0f:55:c1:cb:1a:a1:43:ef:9f:f7:3a:f3:49:5f:0a:f6:0d:
7a:16:01:00:3d:37:e7:71:a1:19:fa:c0:17:5e:6e:d2:4c:c4:
d2:46:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:26 2026 by rpki-client