Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
File: TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft (raw, json)
Hash identifier: GX1QNMJkQvHgkFL1LK0waRoYt94TPaM6X81H80pgxjI=
Subject key identifier: 3B:21:BB:94:33:65:A5:F3:8F:9F:04:1E:4B:05:6A:88:AE:17:FF:06
Authority key identifier: 4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
Certificate issuer: /CN=4c90bf56078074828256675949a0c23a251784b1
Certificate serial: 019FA2CDB72CF418DD2BFD45D2CC434044B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:18 +0000
Manifest this update: Mon 27 Jul 2026 09:00:18 +0000
Manifest next update: Tue 28 Jul 2026 09:00:18 +0000
Files and hashes: 1: 1-MEg0XAw5pVYz_fPmpp6Y1VAsmY.roa (hash: +zgnm4jzSLgxYSGkTEvtJIxphWArUy18/MkBB2r0Kyk=)
2: TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl (hash: T/WyK/Gppj1tbSgM5IDIImZLRcNmH6ikdUh0D9DTSd0=)
3: btl4GN8vztirW4WSg5aCV4PRy5s.roa (hash: TmhxDCmAzWn47wjYNPJYsjzmopIz6nDoUhl3u7q0O6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:b7:2c:f4:18:dd:2b:fd:45:d2:cc:43:40:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c90bf56078074828256675949a0c23a251784b1
Validity
Not Before: Jul 27 09:00:18 2026 GMT
Not After : Jul 28 09:00:18 2026 GMT
Subject: CN=3b21bb943365a5f38f9f041e4b056a88ae17ff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:46:f1:83:91:10:f4:21:37:2a:c1:1a:28:
39:a3:e1:4e:53:1c:cb:34:47:74:67:f6:57:24:9c:
f9:29:92:64:41:6c:b1:d3:3d:60:8f:45:4c:d4:aa:
79:f3:7c:9a:4b:75:30:66:82:c9:f3:02:5a:b1:fb:
2e:f6:c1:f5:6c:a0:ad:1e:e0:f4:f9:f7:1f:bc:3c:
a0:9b:41:1d:54:f6:89:ca:8e:14:d4:94:9c:e4:b9:
12:8f:d4:d8:6a:12:5f:11:5f:ee:44:be:d1:b7:6e:
54:c3:35:32:d0:56:9a:61:44:51:fb:03:1e:09:b0:
0a:5a:0c:2f:16:47:73:67:85:3c:d4:ad:c7:5c:48:
4b:4d:9b:9a:ef:c2:99:5f:45:74:82:1d:57:36:12:
ee:38:7a:1c:73:2b:8d:bb:70:2b:a8:31:e2:59:fe:
38:bc:d7:5b:22:c5:b9:16:14:80:2a:b2:cc:a5:89:
0c:31:8c:f8:9a:27:1a:84:c3:a3:c4:7e:51:b1:bf:
89:8f:db:b5:80:0d:75:0a:d1:1e:0e:49:ed:24:47:
21:0d:fe:10:40:06:fe:bb:c2:b7:4d:c8:c7:a3:ab:
c8:77:95:98:96:dc:a6:6f:13:23:66:a6:ae:fa:69:
39:d7:74:1b:cb:eb:20:7b:47:ca:6c:dd:81:84:fa:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:BB:94:33:65:A5:F3:8F:9F:04:1E:4B:05:6A:88:AE:17:FF:06
X509v3 Authority Key Identifier:
keyid:4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:a3:81:db:2d:b8:56:6c:53:ee:12:40:de:4d:ac:99:79:
e7:1b:5e:13:31:ea:6c:fb:8e:30:03:9b:95:f7:30:76:5e:06:
9c:44:be:c0:07:95:c6:c2:5f:6d:77:87:b3:ca:8c:4e:15:b7:
71:ad:d8:31:9d:65:40:cf:96:39:82:2b:cd:10:7a:cf:61:55:
1c:37:0e:17:7f:16:ac:ba:f7:ea:15:16:34:54:5b:a0:85:c4:
99:46:0b:21:40:76:eb:ad:2f:67:79:c6:8d:0b:3a:96:7f:e0:
de:4e:7e:f1:ec:59:b3:7f:64:45:f0:cd:63:0b:df:8f:8e:c4:
c5:0d:ac:68:05:09:0e:d3:d9:78:15:43:47:00:47:e2:a1:09:
2c:37:9f:b0:ba:fc:21:aa:4b:de:99:a4:12:be:30:0d:05:87:
5c:05:ed:fa:7d:8c:5a:47:83:4a:99:bb:5e:91:99:c6:6b:3f:
7c:28:29:71:a7:00:99:c7:16:4a:29:a6:9b:49:1b:91:70:66:
ea:5c:c8:76:2f:37:e8:a8:c7:67:0c:0f:42:0b:a9:b3:3a:8e:
f9:23:87:0e:a7:5b:6a:49:69:d0:64:4e:f0:c5:4c:b3:21:7f:
df:dd:7c:3b:b8:f9:6c:ce:0f:23:3f:58:16:58:ba:05:c7:22:
26:25:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:58:27 2026 by rpki-client