Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: izSawnIUaSnd7jmrVASUB2SIaikLqicnFyCStXOXLyU=
Subject key identifier: 9E:22:67:DC:A7:E8:B5:85:34:78:38:43:E7:1F:D6:07:27:27:B9:37
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019F86B1B74F68EE24DFE74D2D7B4AEF574A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0910
Signing time: Tue 21 Jul 2026 22:00:21 +0000
Manifest this update: Tue 21 Jul 2026 22:00:21 +0000
Manifest next update: Wed 22 Jul 2026 22:00:21 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: Zt54twQKjhteis+pcZKIPr65KjHCwbg2h4tDMUOf+CA=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:b7:4f:68:ee:24:df:e7:4d:2d:7b:4a:ef:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Jul 21 22:00:21 2026 GMT
Not After : Jul 22 22:00:21 2026 GMT
Subject: CN=9e2267dca7e8b58534783843e71fd6072727b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:5f:ce:6d:e3:36:2e:87:3b:ad:5e:0c:5d:
41:21:ae:05:53:a6:57:e0:27:46:26:f1:f4:c8:3b:
10:8e:1e:75:dd:2e:f7:f6:91:5f:20:93:03:f7:34:
a5:ae:ba:52:e8:48:29:ab:02:0c:b5:31:42:da:86:
dc:31:d2:08:18:5a:1d:65:eb:5f:02:7e:e0:45:65:
bf:43:81:b4:68:7b:a0:b0:98:04:d2:31:97:7d:5f:
ac:21:b1:2f:ef:74:12:48:bc:50:59:71:6d:a6:49:
24:c5:a6:2b:73:82:a6:96:08:e1:cc:22:3a:55:d6:
38:06:28:aa:ee:94:06:38:bb:8f:04:cb:e7:2c:33:
92:bf:d7:30:37:e7:2e:ad:a0:73:45:08:6b:7c:8b:
fd:d1:7c:06:ea:27:d7:15:6a:99:c4:83:8c:47:0d:
80:d0:92:84:df:92:3d:ef:4d:39:35:69:ca:5f:3f:
f6:f4:f6:a1:bc:1c:f0:ea:22:0b:e0:20:e6:4d:04:
96:36:7a:ad:2e:96:cd:13:13:30:a0:3f:78:a1:23:
a6:ee:0d:2d:f4:f4:1d:23:fb:9a:be:a6:e2:20:1a:
37:2e:8a:ee:2f:8c:0b:b2:57:51:e1:a9:98:9d:7c:
c8:73:4b:30:88:97:85:02:d2:76:58:2a:2e:5c:7d:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:67:DC:A7:E8:B5:85:34:78:38:43:E7:1F:D6:07:27:27:B9:37
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:30:c1:1a:82:a2:ec:90:41:3d:ac:48:54:0f:89:3e:53:59:
ae:87:d7:a3:5b:28:ce:77:d0:dc:be:ce:c8:72:5a:78:73:89:
aa:8d:68:68:b6:5a:a2:86:b7:7e:5f:28:57:10:fc:03:a1:ae:
c1:ba:6c:29:5c:a0:89:63:2d:64:91:2a:02:85:65:ba:8d:b5:
e5:c4:a8:34:7b:fc:e8:a0:ee:92:66:cf:ff:1e:7c:ea:96:42:
83:ba:ef:4c:66:69:08:38:65:1b:78:d7:d1:3a:4e:8d:ba:6b:
a3:cc:51:54:03:28:ed:05:76:95:27:68:41:5c:83:24:63:4c:
86:ee:27:9c:32:7d:aa:a6:0d:04:da:63:7d:79:47:0e:3d:6a:
6c:2f:43:89:b7:48:f4:c8:00:2b:d2:a9:61:ba:0c:10:19:b3:
29:16:d8:77:40:38:b0:e9:50:b3:c0:28:4b:46:97:1b:07:a2:
e7:e7:ed:3b:b5:8f:7f:ad:ae:1e:af:39:04:02:9c:9d:fa:0e:
2a:b9:b2:8f:41:4d:38:11:f9:f8:9c:81:34:e0:b3:79:b5:ff:
8d:66:55:fa:34:a1:fe:53:53:16:a9:81:c1:42:a7:7d:9c:fc:
61:d2:6c:02:f4:87:2a:fd:4c:e7:0a:b0:28:13:13:b5:1c:d0:
fe:d1:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:57 2026 by rpki-client