Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: p6Gl40BhTX0fqV1+zIp/zO1x1yZpVcW6vX9rgHbBUZA=
Subject key identifier: 61:29:C8:7A:64:BD:0F:C9:BE:B5:1B:24:B4:42:69:E0:FF:C6:ED:9C
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 019FA003EAF2B1C79E91E390219D4108D97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 20:00:39 +0000
Manifest this update: Sun 26 Jul 2026 20:00:39 +0000
Manifest next update: Mon 27 Jul 2026 20:00:39 +0000
Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: fkHnXAfIjHc4Fl8gKXj+FgRQEAzVRNYnQW+Tb/anXCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:ea:f2:b1:c7:9e:91:e3:90:21:9d:41:08:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jul 26 20:00:39 2026 GMT
Not After : Jul 27 20:00:39 2026 GMT
Subject: CN=6129c87a64bd0fc9beb51b24b44269e0ffc6ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:6a:97:8c:97:a8:27:af:26:98:0b:84:f7:
12:ea:d7:0c:15:51:db:6a:52:31:2a:1b:79:3d:a7:
ee:d8:65:42:7b:ab:55:85:a4:f1:2e:57:1d:a5:f3:
dc:1c:00:d6:b6:77:63:b1:32:c9:48:8c:85:de:cc:
76:e4:95:83:16:6d:89:ee:47:a6:b0:ef:b1:75:05:
80:19:19:e3:4f:a8:c3:f6:34:bd:f1:0d:74:76:76:
ec:66:ce:d4:c1:14:3a:82:80:cb:05:f2:88:5d:36:
9a:3a:f8:ce:6d:ed:aa:58:bb:1b:67:c3:fe:10:bb:
36:30:15:9e:ec:70:06:35:49:eb:98:3e:80:a3:f3:
59:c0:2d:d5:35:38:22:a1:0c:67:f1:19:88:a0:55:
ca:6d:f2:91:f0:55:87:75:20:45:5b:8f:0b:76:2c:
42:e4:6b:ac:bb:7b:4d:bb:cc:10:1c:3b:54:d6:93:
2e:d2:3d:c1:08:bf:35:1a:cb:cf:bb:7a:66:5a:b9:
66:e3:69:46:9c:97:5b:5f:d7:52:a3:ee:ca:2c:13:
d5:b5:4d:32:aa:79:1c:69:ca:18:f1:35:03:59:00:
92:e6:9a:af:e1:62:11:f5:d4:d9:eb:45:40:39:52:
d4:44:91:c1:9e:e2:7b:a8:25:f8:94:54:9a:53:52:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:C8:7A:64:BD:0F:C9:BE:B5:1B:24:B4:42:69:E0:FF:C6:ED:9C
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:1f:b6:d9:8f:4c:c9:87:c1:f1:d3:8a:49:17:67:19:62:
93:fc:54:61:b6:b7:70:49:a7:93:99:21:a3:ab:8d:75:6f:0b:
32:f8:cc:21:38:f9:29:23:4f:a5:0f:ef:7b:56:2b:cf:59:c1:
76:b7:5b:7a:c5:db:88:1e:0e:c7:8a:5b:55:56:6a:d7:27:15:
32:95:e1:3f:0e:ee:64:1e:c9:90:65:c9:f9:ec:d3:36:9f:21:
e8:13:a2:26:ba:b7:69:78:ee:96:4f:93:11:43:65:37:87:27:
2c:5b:bf:e2:be:81:67:11:f3:d1:cf:c7:41:2d:b0:e0:b8:ca:
6c:f7:43:00:9f:7f:2f:b2:8a:9f:d2:fa:34:f8:10:13:1a:48:
22:15:ce:a9:ca:14:08:91:92:4e:7a:f8:33:7a:10:cf:00:f1:
51:fd:55:f3:bd:f0:21:15:e7:40:3e:5e:58:88:32:d6:4c:20:
7a:01:73:a6:fb:e4:90:92:fb:9a:87:a4:9d:40:cc:d2:88:c4:
66:c8:38:21:3f:36:ec:57:6c:21:42:24:be:3d:f1:e4:f9:18:
05:cd:8f:e0:09:fa:38:03:ee:3f:98:4e:a4:ae:d4:0a:17:2d:
f6:43:f3:86:c3:25:79:5b:86:43:95:02:5f:e0:20:67:bf:7e:
93:55:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:34:06 2026 by rpki-client