Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: BmuuBzBrJcV3vVG6AX+zweNwZESQd45P4hrXuSd5aLw=
Subject key identifier: AA:44:8B:D8:6D:C0:FE:A5:8A:C6:41:18:3F:E3:AD:BE:88:B2:95:5C
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019EB65779CA13A2D33159662042105A9774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 11:00:46 +0000
Manifest this update: Thu 11 Jun 2026 11:00:46 +0000
Manifest next update: Fri 12 Jun 2026 11:00:46 +0000
Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: cjjThl+pirQnzpvJoIOmrCK2z0GegaFNXTTFRlBY8JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:79:ca:13:a2:d3:31:59:66:20:42:10:5a:97:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jun 11 11:00:46 2026 GMT
Not After : Jun 12 11:00:46 2026 GMT
Subject: CN=aa448bd86dc0fea58ac641183fe3adbe88b2955c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:2d:6b:77:80:31:90:98:af:e2:7b:0a:20:
02:1d:19:28:db:5b:48:bc:27:1c:43:09:24:28:bb:
1a:3b:f3:eb:b3:31:5a:65:f7:77:7c:a6:15:13:aa:
a5:93:11:4c:21:71:f9:b1:71:24:d7:90:dd:b0:b8:
4d:f8:68:58:b0:31:38:fb:19:69:9b:95:4c:0b:b7:
76:b0:49:b5:e5:55:40:29:09:de:43:a0:4d:19:64:
83:f1:42:5b:3b:d7:ba:b4:55:36:25:cd:e9:ff:6c:
c4:fb:8b:8a:e0:3c:71:ec:e2:94:b0:e8:85:2a:4d:
87:a7:d0:41:6a:30:12:2e:26:f2:0e:b1:29:b7:3e:
78:e3:72:8e:c1:bb:e3:11:f3:87:d2:f6:42:c8:6e:
9f:54:09:37:b5:05:cd:2d:c5:96:90:77:ab:71:6b:
5b:8d:28:28:d6:74:5e:fd:2d:9f:2b:61:8a:c3:d6:
a6:17:af:de:0a:18:91:c2:d9:e9:86:00:05:49:88:
3d:6f:d4:b2:9a:f2:9e:8d:e5:9b:b9:7f:bf:cc:4c:
8c:a8:a4:49:d3:fd:35:7b:00:70:2b:e4:e8:b5:34:
b3:b4:4d:0c:29:0e:4e:55:db:05:68:a2:23:a0:5d:
8e:71:8f:7a:5e:81:5d:1b:d3:3e:02:c7:08:b6:ef:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:8B:D8:6D:C0:FE:A5:8A:C6:41:18:3F:E3:AD:BE:88:B2:95:5C
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e2:3a:16:bf:86:d1:8e:6b:7a:94:49:c7:38:d0:59:1e:cf:
9d:b1:ca:5f:73:7f:fb:ed:4c:9b:b7:e3:43:19:a8:f2:66:7f:
58:47:bd:86:55:fd:be:63:fb:b1:99:48:c4:01:ef:f9:83:90:
5d:28:15:4c:a9:cf:e1:46:0b:ba:e7:f1:66:16:52:49:01:25:
00:e9:e5:49:cd:b9:c3:98:68:ca:ee:dc:a7:ab:fa:18:0f:63:
41:a4:05:c5:92:35:60:2f:fb:21:05:7e:bb:b8:56:74:2a:ff:
ef:71:57:54:73:85:02:36:9d:59:23:0d:d9:ad:35:be:c0:31:
6d:28:7e:cb:31:b7:33:93:67:7e:3a:c9:2b:e2:cf:0d:a2:63:
10:29:55:01:55:94:7a:9d:ed:a1:0d:45:83:cc:12:15:47:4d:
e1:09:23:92:35:7e:88:db:f8:a0:20:9c:ed:5d:9c:41:52:16:
97:c7:5b:35:f7:38:a7:f8:62:2b:6b:f7:01:f7:97:c3:ff:5c:
a6:8b:9c:72:33:68:db:fd:27:af:91:7a:1d:cf:e4:66:99:58:
db:cc:e7:5c:d0:74:ce:79:16:91:f1:ab:9e:b7:4d:f4:e2:c4:
e3:e3:9b:63:b3:e0:d6:c8:6f:ec:d8:d5:78:ce:17:62:b4:e5:
bb:28:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:11:40 2026 by rpki-client