
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: qFGsD/Ci93VXaFQoBsi57+T3WYh+PQLATOC4A39vFCY=
Subject key identifier: 37:A2:DD:15:16:FF:90:21:2B:07:DA:76:5A:33:4D:22:8F:BF:20:9B
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019F19435A5CB5E1B0ECB20C5A64E0C796E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 143E
Signing time: Tue 30 Jun 2026 16:01:12 +0000
Manifest this update: Tue 30 Jun 2026 16:01:12 +0000
Manifest next update: Wed 01 Jul 2026 16:01:12 +0000
Files and hashes: 1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: T6A/Obcf7it91GsnPJO1jj7n1Qzrx/VwCqYrJwcHXIw=)
3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:5a:5c:b5:e1:b0:ec:b2:0c:5a:64:e0:c7:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Jun 30 16:01:12 2026 GMT
Not After : Jul 1 16:01:12 2026 GMT
Subject: CN=37a2dd1516ff90212b07da765a334d228fbf209b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:a9:82:f3:ea:a5:dd:df:db:c7:e6:ec:5c:
32:91:de:43:9e:f6:b7:be:dd:c1:21:66:17:a7:a6:
2e:1e:75:78:c8:8d:b5:7c:27:3b:7b:d5:50:f6:b8:
d0:eb:0b:86:05:f3:ff:f5:70:2d:d4:a7:8a:92:12:
a8:66:8f:89:fa:4c:16:60:e4:44:68:1c:7c:a8:7b:
b9:71:05:4a:50:4b:08:92:94:18:5b:ec:5e:59:4e:
84:74:e5:e3:77:70:0c:36:d2:89:b9:be:8c:b2:5c:
e8:2f:80:f8:3d:08:6f:a0:86:f8:4b:93:03:bb:eb:
50:a4:94:74:3e:53:0e:cd:ee:3c:e2:7c:33:bf:e7:
4b:69:78:8f:19:6b:b8:18:32:7e:57:d9:17:29:52:
37:27:07:05:6a:a5:60:4b:06:e0:0e:42:0c:51:29:
fc:66:06:12:b5:3f:d8:94:4c:d2:27:95:45:93:2a:
1a:2a:6a:02:12:32:e0:00:f5:03:b4:52:54:56:ef:
ed:ff:96:7f:49:2d:ab:d3:1d:28:57:04:24:fd:6e:
e5:c6:65:46:11:4f:c4:e5:2e:26:9a:7e:e1:3b:fd:
05:59:f6:5d:63:93:03:54:00:4b:38:03:a0:9b:34:
79:03:83:ea:b5:74:39:d2:64:dc:fb:34:39:ef:e2:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:DD:15:16:FF:90:21:2B:07:DA:76:5A:33:4D:22:8F:BF:20:9B
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:5d:5e:a9:07:0e:c0:d6:4b:1f:2a:70:ac:61:28:54:31:
53:53:67:18:e6:19:0f:3c:69:d4:c2:0d:df:d4:69:7d:d0:dd:
82:4f:b8:52:ee:b9:8c:e4:fd:19:7d:5d:d2:11:3d:79:49:39:
01:58:df:75:77:24:2b:80:aa:6e:af:44:5f:66:42:c4:75:88:
0a:27:98:50:3d:30:d8:96:95:3b:69:bd:b0:94:6f:bd:c2:b4:
7a:99:95:38:b8:fd:f3:2e:45:37:a4:b4:ec:d8:16:49:dd:8c:
ea:c2:d9:1c:c9:bb:3a:82:be:7a:8b:18:0a:5f:f2:45:d4:98:
73:41:8b:7d:fc:7c:29:18:bd:71:27:ed:84:c7:b5:62:e2:a3:
74:6d:03:d7:49:c2:aa:ef:6c:bf:e3:1e:14:c1:28:c0:f8:30:
ed:a6:99:f3:78:88:2e:e4:30:ba:d5:f0:49:3f:77:b1:a8:28:
c0:13:3a:f7:c0:34:b3:39:e6:bb:f7:01:f8:ec:2a:08:a2:5e:
c4:ba:25:8c:ba:ae:75:5a:2e:c4:d0:2e:54:b3:02:0b:3c:ee:
45:28:65:b2:6a:77:9d:03:ea:71:a6:65:c5:c6:58:09:bf:a6:
aa:ab:29:58:61:3d:4e:27:22:66:75:c9:1b:ca:44:77:8d:b6:
ec:f1:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:08 2026 by rpki-client