Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File: TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier: lh/wyGF1up+gEmwZhvrL4N4x23vD2T4p2G0xBuZMNpQ=
Subject key identifier: 32:BE:EB:56:A1:BA:CA:15:41:48:E1:2D:0A:A9:29:78:2C:D5:62:AF
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019FCFDE7E96ADE6E3C685E2148D39050643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number: 28
Signing time: Wed 05 Aug 2026 03:01:32 +0000
Manifest this update: Wed 05 Aug 2026 03:01:32 +0000
Manifest next update: Thu 06 Aug 2026 03:01:32 +0000
Files and hashes: 1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: jragVFi+6jO6EasP0WwSva/ECngOQDqXxiXiJYfDXoc=)
4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:de:7e:96:ad:e6:e3:c6:85:e2:14:8d:39:05:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Aug 5 03:01:32 2026 GMT
Not After : Aug 6 03:01:32 2026 GMT
Subject: CN=32beeb56a1baca154148e12d0aa929782cd562af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:f0:60:9a:df:bd:80:03:e8:50:9b:34:a1:
9d:6a:9e:02:28:ef:1a:b0:cc:3c:68:9c:2c:46:f5:
f1:f9:f3:5f:f3:1c:f5:f4:b7:3e:1a:3a:aa:13:18:
77:e3:0c:26:5f:46:72:fa:de:f3:6d:42:6b:be:a2:
14:61:9f:05:81:b7:51:cc:55:6e:a4:06:c5:f1:89:
11:e7:c7:cd:4b:8d:31:35:8e:d2:61:1d:27:67:a4:
ec:6e:de:d3:2a:66:17:a8:d3:dd:50:b1:93:00:be:
02:3a:8e:32:7d:73:6e:88:a4:28:83:c9:40:58:42:
cd:3b:8b:6f:db:b7:bb:bc:79:26:b6:09:92:39:56:
c3:08:e1:a1:8e:1c:bd:95:74:6b:e1:19:17:8b:ff:
48:9f:17:d3:af:65:ba:a9:70:7e:c7:8f:8f:a3:0a:
dd:be:ed:81:61:92:22:c6:b6:19:21:77:2a:fc:78:
2e:c2:90:3f:5d:d3:39:18:f3:14:d2:2b:d4:fc:dc:
22:7d:5f:06:29:32:ff:5d:c2:c0:e9:91:2d:d6:34:
30:aa:48:b7:1c:8c:c8:73:1a:d7:b7:a9:0e:30:fc:
5b:32:c5:4c:6d:eb:0e:f7:38:86:8d:5b:14:06:6b:
e4:0c:84:86:6a:c6:78:cb:48:f5:b1:7b:47:15:5b:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:EB:56:A1:BA:CA:15:41:48:E1:2D:0A:A9:29:78:2C:D5:62:AF
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:54:d3:8c:8e:48:cf:f3:e8:dc:b8:7b:e2:6a:5c:95:b4:
d2:bc:1d:d5:8f:66:b1:21:ce:a0:0c:b9:1f:4d:11:d9:29:dd:
52:28:08:c4:1a:f6:d4:91:81:e1:d1:b0:85:10:d5:27:a5:9e:
e1:0c:17:1b:a4:55:1d:17:75:e8:e9:11:49:62:13:ae:d4:77:
ae:13:5c:25:92:ef:ef:f4:78:a3:1d:bd:83:85:2c:7f:28:d7:
a1:10:ef:72:f0:6c:f5:b7:9d:eb:10:94:7f:f4:b6:3d:74:1e:
f0:c3:f1:12:52:96:8d:81:e6:bc:16:d6:39:2e:b8:8c:15:ec:
a4:a3:d5:af:2e:5e:aa:9d:71:ce:62:a3:df:73:9f:44:90:eb:
9f:27:16:99:5e:40:0a:72:f2:37:ec:29:a7:b0:96:8e:75:1a:
7d:ff:59:56:29:cf:f2:10:b7:e5:3c:0d:e6:cd:38:58:4f:42:
f2:b2:47:b3:fd:90:69:0d:3e:de:78:26:6c:bc:44:5f:2a:58:
c1:6b:a2:95:cd:3e:28:7a:7e:ad:2d:8c:33:a3:e8:fa:95:5c:
82:bb:b9:5b:6d:3f:21:50:b4:55:e8:7b:a4:db:4a:b4:bb:01:
9c:53:d2:a7:af:4e:07:8b:f9:22:0e:85:4f:f8:25:56:58:68:
24:4d:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:30:14 2026 by rpki-client