Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: JgFZ45XDsziGpcGNKrpxrBhKQBtXXtd2qkOhg2ET2JE=
Subject key identifier: 43:7F:82:12:37:AF:FF:0A:B3:D5:F9:C1:3D:26:AF:46:96:27:F9:7F
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019F189EF134A7069941CBC1F4A80B3CE28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 13:01:37 +0000
Manifest this update: Tue 30 Jun 2026 13:01:37 +0000
Manifest next update: Wed 01 Jul 2026 13:01:37 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: VVhO57dLLCUJ+3eOhkdAmGiMXM2H2YBud3lGUzMZ6Fo=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:f1:34:a7:06:99:41:cb:c1:f4:a8:0b:3c:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jun 30 13:01:37 2026 GMT
Not After : Jul 1 13:01:37 2026 GMT
Subject: CN=437f821237afff0ab3d5f9c13d26af469627f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:ea:4e:38:d5:eb:d3:49:bc:0d:a5:e5:06:
05:48:e0:c9:e2:4e:31:89:27:78:92:f5:b7:eb:48:
9f:87:b1:b8:41:4d:e3:eb:ed:c7:af:c3:a9:a0:74:
2a:55:96:bd:87:bd:b5:63:4f:96:87:3f:11:b9:a4:
ff:19:6f:1c:dc:44:49:90:06:0f:95:f4:5d:94:8d:
e6:32:8d:18:41:26:67:b5:a8:43:22:cf:7e:4b:72:
0b:78:de:25:66:10:88:ea:7b:22:a6:5a:48:62:e9:
3c:27:a0:a2:42:ba:f1:25:db:bb:cb:7f:e5:5b:a6:
1c:56:e0:b2:58:37:a8:55:ba:dd:07:7e:57:3b:a4:
6c:8c:ce:31:0f:05:0f:34:ce:ba:6f:50:4a:14:94:
94:90:a7:e8:b9:dd:8b:77:fe:96:39:24:a4:b8:2e:
20:fb:13:24:ad:30:33:f9:09:f4:bb:b6:d8:59:5a:
6d:0e:52:17:f3:b0:4b:b9:bd:9a:ba:b8:6d:b0:ed:
d5:26:d7:bb:b2:cd:81:35:85:11:ec:80:8b:85:d3:
93:89:ef:40:cf:58:28:98:25:3a:a7:fc:25:f7:79:
da:ae:12:c1:02:b5:84:7c:0f:ae:a0:94:d9:13:a2:
14:f3:98:ea:9a:f7:7c:d1:a6:f6:05:e6:17:54:dd:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:82:12:37:AF:FF:0A:B3:D5:F9:C1:3D:26:AF:46:96:27:F9:7F
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7d:c4:60:91:14:ec:8e:c1:66:53:b4:3e:2a:be:9d:de:d1:
88:88:c0:9c:a0:78:e4:42:12:6c:7c:74:86:0e:12:e1:ff:4e:
4b:3b:ff:84:27:e0:1d:cf:2d:c1:f9:5b:86:73:2c:49:6b:6f:
9d:3f:b5:bf:55:d4:81:de:8e:0a:7b:c6:37:e1:7a:5d:9e:b3:
a3:59:e9:ef:9f:b5:69:2f:f5:22:1d:48:09:c0:75:f9:47:f5:
b2:b0:e7:f8:2f:7f:8f:a5:84:26:4e:76:ef:af:32:e7:60:b7:
85:64:35:80:e5:da:83:00:2a:63:2f:c5:ff:00:93:21:9d:2e:
93:17:7c:48:cb:f8:d9:a3:62:28:38:40:aa:b9:39:61:61:75:
31:74:bd:3d:bc:58:20:fe:fb:cf:c5:60:ec:b7:f8:6e:46:12:
86:8a:98:b7:f4:40:6a:3a:f8:0b:ab:af:5f:8e:47:28:c8:74:
dc:b6:43:6e:37:01:c6:dd:55:e0:b6:65:ea:3a:e6:25:17:1a:
b5:7e:e5:77:55:bd:e1:0c:8c:60:eb:d0:cc:11:74:f4:70:26:
13:b5:b3:8f:70:c2:54:c4:21:fd:50:20:b5:d0:61:19:23:a7:
8b:34:56:b4:91:60:56:58:84:8e:66:77:23:e0:64:67:19:d8:
99:aa:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:00 2026 by rpki-client