Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: Tm/cGTvZ2WiiqPBB8VsUnPOLBKLU7eYBJOraZM/05Xc=
Subject key identifier: 04:52:B6:7A:E0:AF:A5:F3:29:CC:CE:34:DA:27:3F:96:E2:2A:87:E0
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019F19B16C380C8AE526FDE83210F73135C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 1016
Signing time: Tue 30 Jun 2026 18:01:25 +0000
Manifest this update: Tue 30 Jun 2026 18:01:25 +0000
Manifest next update: Wed 01 Jul 2026 18:01:25 +0000
Files and hashes: 1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: OryeYAT0Uyss3+7s0nIsKUIV/zsz2yKFnI0SCZhUv/U=)
2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:6c:38:0c:8a:e5:26:fd:e8:32:10:f7:31:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Jun 30 18:01:25 2026 GMT
Not After : Jul 1 18:01:25 2026 GMT
Subject: CN=0452b67ae0afa5f329ccce34da273f96e22a87e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:a6:bf:c3:4c:bb:98:e0:a5:27:4b:a4:8e:
9d:b8:0d:90:55:f3:9f:1d:6f:f5:d5:96:04:d9:5a:
49:43:b9:3a:9b:3b:91:f6:c2:55:51:84:b9:c8:71:
df:be:75:88:d8:ee:6d:9a:c2:44:17:36:c9:d5:68:
ea:ad:99:1d:4c:85:89:de:e2:de:e7:69:e7:54:df:
6f:3a:46:56:3c:ac:d6:a5:02:07:20:95:bb:23:df:
c5:d2:01:27:12:19:3c:41:c9:aa:3b:bc:24:f9:86:
48:2e:e8:93:3f:cd:38:87:e4:e6:c3:3e:76:2d:58:
41:fd:6f:a2:5d:7b:3c:91:1a:7f:17:58:7f:ce:a2:
26:85:6d:80:75:5b:79:af:10:bb:ff:a1:5c:dd:7d:
f5:be:91:01:db:c2:33:d0:5e:0a:9e:8b:4e:ce:73:
73:78:3d:4f:33:ef:7e:e5:d1:52:e8:e1:2e:2f:6c:
9b:56:84:d9:16:0b:85:08:2b:74:55:99:e3:d5:50:
06:8e:c7:55:2a:86:ed:b8:75:16:e1:b3:40:e5:b4:
0c:ab:85:fc:50:d7:48:9c:23:6c:dd:b5:fc:eb:db:
e1:18:03:1d:53:12:78:e3:cc:c1:2a:41:a6:a6:d7:
34:31:01:d0:d6:8c:bc:d7:c5:16:fb:6c:c3:62:c8:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:B6:7A:E0:AF:A5:F3:29:CC:CE:34:DA:27:3F:96:E2:2A:87:E0
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:53:29:d9:3d:ee:10:53:dd:2f:3e:4b:16:c3:0e:f3:ac:
ce:e0:cf:bf:5c:8d:28:83:87:b7:31:63:ec:ab:16:98:7c:c8:
63:92:6e:66:8d:03:5b:4c:d1:5f:20:71:96:3f:7f:49:9e:f0:
78:27:cf:85:c3:c6:04:a9:9b:84:7b:c7:c2:25:5b:53:de:a6:
d5:db:8e:46:7a:e3:d6:4c:db:6a:06:a5:c1:09:cc:f5:d8:ff:
ea:db:7e:bf:9c:00:fe:dc:69:37:f3:a1:91:f6:f9:81:69:8b:
5e:96:bb:d6:da:fb:b6:25:b5:39:90:1a:04:4e:65:99:84:ff:
41:5b:d0:ad:ac:4f:03:88:20:a3:47:a0:73:16:d4:6f:7a:e6:
31:76:3d:c9:0c:ea:e9:65:33:44:08:1e:52:c5:b6:e1:a4:51:
b4:d4:a6:f4:68:69:e8:7a:fc:c0:bf:e4:d8:a5:05:40:52:ac:
2f:01:67:eb:86:b7:8e:12:dd:2e:14:07:12:c9:85:a3:c3:49:
c1:73:a9:c6:dc:98:f5:d3:4c:35:d4:f6:e9:35:8f:f7:83:e4:
45:76:49:1a:1a:61:70:be:45:4d:78:76:4c:54:3f:98:a7:7b:
59:14:95:79:2f:50:49:41:fd:17:1c:4c:b0:33:52:c7:98:21:
94:86:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:50 2026 by rpki-client