Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
File: TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft (raw, json)
Hash identifier: VJMrlBsLd7AKyyVmTX7nrv4OCYOkuNYXG7Kojx6HRN0=
Subject key identifier: 7B:66:55:37:F1:D2:66:AB:95:F2:5E:21:6E:AC:9C:2D:98:09:EF:3A
Authority key identifier: 4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
Certificate issuer: /CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Certificate serial: 019FF9112E4E050D3FF0FD2408B8DA5D417D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
Manifest number: 28
Signing time: Thu 13 Aug 2026 03:01:20 +0000
Manifest this update: Thu 13 Aug 2026 03:01:20 +0000
Manifest next update: Fri 14 Aug 2026 03:01:20 +0000
Files and hashes: 1: 03isWsmaGVRk9tqcdmDKk9uA_-I.roa (hash: ScrT5FCc9rPEYk5wCLCQ97IXUmvu4SWDxXf7fq4zp6c=)
2: 226OYCKUmdi1S_3Pe-3PZ-iCAAs.asa (hash: X+ewLeQEwgG8XlmiwNHRk1JnO20h3xlra7zQCCYsiQo=)
3: TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl (hash: tVAp/WUZmhIgF/vfPb2pTwV+zWZ5RBnMDqujzNCdrCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:2e:4e:05:0d:3f:f0:fd:24:08:b8:da:5d:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Validity
Not Before: Aug 13 03:01:20 2026 GMT
Not After : Aug 14 03:01:20 2026 GMT
Subject: CN=7b665537f1d266ab95f25e216eac9c2d9809ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:31:4b:d0:2c:8f:3c:02:40:2f:e0:d1:60:
8a:92:4f:e8:b7:55:56:c4:b6:8a:26:72:5e:da:ab:
55:59:79:32:93:b1:80:97:7a:af:c3:e8:f3:4b:d9:
ee:6e:14:60:ac:49:06:5d:dd:4b:56:49:ac:bc:08:
e7:fa:42:30:73:ad:7b:fd:46:5b:ee:e5:5d:e7:76:
26:56:93:13:45:19:b9:46:11:f1:d6:75:8c:a3:a2:
66:b1:f7:c5:51:95:1a:6f:7c:e0:cc:3f:9b:eb:bf:
17:d1:dd:41:1b:69:75:44:d4:09:31:c0:57:1a:ce:
1a:71:2e:81:ba:d8:0d:a4:88:a3:0d:2f:3f:e9:f5:
1f:48:d3:a7:59:a7:1b:48:1a:e0:97:1c:09:7e:80:
76:f8:2a:a0:0a:22:59:25:fa:69:6f:20:99:9a:d6:
24:cb:97:f1:f6:de:9b:19:0a:09:d7:af:c0:f7:42:
39:c3:73:65:0e:b9:c6:83:00:6e:84:5e:53:54:48:
fc:3b:e3:61:1f:9f:e3:b5:c2:13:2f:66:78:3e:34:
c7:93:62:2b:e1:a9:de:88:3f:42:d9:b8:0a:9b:28:
db:ba:ae:a4:f8:e4:4c:86:54:d9:f2:db:21:cc:49:
4a:b7:4b:92:e7:b6:f5:fd:a3:29:00:56:c4:c0:ce:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:55:37:F1:D2:66:AB:95:F2:5E:21:6E:AC:9C:2D:98:09:EF:3A
X509v3 Authority Key Identifier:
keyid:4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:4b:34:9c:29:f6:46:c7:7b:76:e0:b8:1c:61:84:58:0f:
f7:54:b7:a9:d7:80:7e:ba:7e:00:e0:17:2e:40:6e:0d:fd:c4:
c2:04:48:b6:72:f9:e1:eb:69:2e:f4:bc:b8:de:b1:f8:20:3a:
c1:ac:d3:fe:64:30:54:77:7e:95:5b:4a:1d:85:e4:1e:09:18:
1e:9a:c0:e4:69:fe:3a:e8:9f:d9:2d:0b:f7:90:e1:eb:80:f3:
34:45:26:34:31:db:19:b3:cb:4d:42:f5:7d:f8:15:bc:1b:1b:
62:8e:eb:77:fb:66:df:70:61:d9:f7:15:f1:84:8c:db:2e:d1:
51:83:7a:9d:68:b0:7a:d7:f9:45:be:6f:1a:ac:ec:cb:f5:5b:
8f:72:4f:26:af:1d:30:6a:30:45:60:19:d4:f3:d3:1f:a0:63:
15:e8:a3:c7:1d:06:fa:ae:68:1f:77:b3:f1:8c:57:fc:25:ce:
40:03:c8:56:2f:92:2c:94:54:73:b6:f7:81:63:4d:bb:9d:06:
0d:d7:39:a7:b3:2c:ca:d3:0d:e7:0b:60:0a:a4:8f:ea:f4:c8:
22:1d:81:3b:93:ac:99:d0:6d:e9:0f:c6:67:99:6f:4f:26:29:
38:77:67:10:fb:56:3f:df:9d:3c:31:1a:93:9a:57:d6:f1:0f:
20:e4:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:32 2026 by rpki-client