Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: I5bN0nSoWiCr072iQwwCCFWKpLDFGzQDNZ2p9Lnd5GY=
Subject key identifier: 54:DA:D5:32:6B:1D:F1:5A:39:8F:97:08:97:B4:18:F8:D8:09:B9:30
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 019F197A3AC297E8417A30B569DF2A21D054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 1674
Signing time: Tue 30 Jun 2026 17:01:08 +0000
Manifest this update: Tue 30 Jun 2026 17:01:08 +0000
Manifest next update: Wed 01 Jul 2026 17:01:08 +0000
Files and hashes: 1: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: rfOxtSdXYbxkkGq+vN1bd8NrmlVbGm1vE4oobdkax+k=)
2: qhbgvCCuTYLs-T9K9IfIIvF38MQ.roa (hash: WdrjO4xvUh7bWyfHcWR8FrUXBHsQMBxvR3LgVLProrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:3a:c2:97:e8:41:7a:30:b5:69:df:2a:21:d0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Jun 30 17:01:08 2026 GMT
Not After : Jul 1 17:01:08 2026 GMT
Subject: CN=54dad5326b1df15a398f970897b418f8d809b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:bb:f3:c1:79:5b:95:77:f5:ff:b3:ce:d6:
36:c5:b1:3d:c1:f2:ca:90:1f:3c:b9:a9:37:59:b1:
db:3f:2d:fc:f0:bf:5a:8d:eb:f4:69:52:82:12:42:
f7:96:fe:25:aa:0f:4b:b9:e4:d7:8c:af:fe:f6:62:
ac:b1:f2:1a:a0:03:80:95:bd:74:da:1f:09:d8:21:
6f:50:f0:41:8b:0d:4a:d8:19:95:fd:cf:88:f4:3a:
53:df:ab:98:18:8f:92:aa:ca:85:de:ff:5d:ea:1c:
7b:36:96:71:8b:9b:d0:5c:31:de:df:fd:e2:c0:c0:
5d:07:9e:7d:06:cf:91:68:12:74:a4:80:69:8f:09:
df:de:97:f6:d3:1d:9e:7e:e3:d3:97:6c:70:e1:bc:
9d:f4:c9:a2:e5:03:b7:68:14:d9:c8:bd:e8:62:da:
58:57:6d:a0:7e:e2:da:13:85:e0:93:ad:00:cd:76:
9b:78:32:a4:c8:7a:4e:0c:61:af:93:69:d8:70:7a:
50:fe:6e:69:da:21:9f:c2:64:94:b2:6e:9b:27:e0:
7e:46:aa:4c:0c:cf:9c:0a:63:1e:a1:bd:9f:cf:a9:
74:43:b7:cb:2f:17:42:08:7e:e9:06:c1:cb:83:ea:
4f:cf:ae:1f:dc:6d:e7:dd:18:1e:ee:cf:29:12:6e:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:D5:32:6B:1D:F1:5A:39:8F:97:08:97:B4:18:F8:D8:09:B9:30
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:41:53:05:51:04:d4:87:cb:ee:5a:6c:6f:d1:e8:b1:56:
31:35:cd:68:f2:00:9d:b9:e2:64:1c:fd:94:26:0b:f4:68:3d:
81:18:35:09:a8:21:f1:54:90:5f:69:df:21:58:8d:f5:33:99:
8a:b6:16:dd:b2:46:ff:4c:ff:6a:5c:e9:c8:79:5c:dd:df:89:
cb:83:01:e5:d4:2e:21:35:c3:8b:52:85:c2:15:ba:fd:be:89:
e2:78:27:29:9f:0f:cd:bc:4a:6b:ca:c6:08:ae:9e:2f:e6:36:
f5:ef:ac:eb:66:a3:48:c5:52:b3:26:90:f1:61:27:63:61:19:
3d:08:84:59:1e:b4:80:db:01:e7:af:be:f7:d0:52:1d:cd:e7:
f5:6d:bf:b9:d4:73:40:da:e0:12:f6:08:c4:18:ca:aa:7a:7e:
e4:63:9b:66:f8:d7:bc:e6:1e:d9:07:40:79:9f:e6:80:d6:d8:
cf:3a:ae:53:94:7c:1e:72:4d:6a:27:18:4d:19:5f:5e:33:9b:
53:91:5c:54:0d:1f:a5:2c:47:2e:ea:29:bd:97:52:e0:5b:ab:
26:d3:c3:c1:c9:33:56:35:96:a2:df:c3:fe:3f:39:1b:8d:76:
34:81:21:51:f8:1e:f7:42:e0:bd:5f:42:d1:98:46:62:35:b9:
93:c5:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:37 2026 by rpki-client