Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
File: TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft (raw, json)
Hash identifier: 7fOrtzaz2RzGtUj7qFRPVZHEFSLGEYq/Sq4hUgU7EPY=
Subject key identifier: B9:47:18:BC:5B:0E:2A:8B:9C:52:3D:27:47:C0:83:C4:34:14:88:67
Authority key identifier: 4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
Certificate issuer: /CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Certificate serial: 019FA372F7DA6E77C952D88809E5C5071275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
Manifest number: 22
Signing time: Mon 27 Jul 2026 12:00:48 +0000
Manifest this update: Mon 27 Jul 2026 12:00:48 +0000
Manifest next update: Tue 28 Jul 2026 12:00:48 +0000
Files and hashes: 1: J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa (hash: 9rcHA6YsVht5FpBD34N2HuiPufLi4hvOJBRxEbLFAAk=)
2: TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl (hash: MKtMWFxAwykcLBbY1qQBiM57HRKwy1uCNHSc+nGNMuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:f7:da:6e:77:c9:52:d8:88:09:e5:c5:07:12:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Validity
Not Before: Jul 27 12:00:48 2026 GMT
Not After : Jul 28 12:00:48 2026 GMT
Subject: CN=b94718bc5b0e2a8b9c523d2747c083c434148867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:2a:a2:f4:27:bc:7c:c0:71:64:07:66:70:
c8:7d:53:34:2d:f0:79:f0:73:7e:65:8b:c4:2b:1a:
c5:c6:df:36:2c:e2:88:96:59:24:71:27:c5:73:64:
23:a3:2f:d5:21:89:23:2f:17:86:f4:32:69:70:bc:
e9:f3:e1:32:a1:81:4f:80:ea:fb:c7:d5:3c:f9:fc:
70:0c:36:10:9d:ef:dd:c1:be:2f:ee:d6:84:a3:a8:
ff:78:56:36:a5:fe:ba:27:de:16:23:ab:18:a7:ed:
0f:71:0d:be:e6:33:cd:13:e6:05:3d:47:c2:3e:e7:
2f:84:52:bf:46:21:a6:f0:e6:64:5b:26:5d:a3:b2:
e6:b3:46:33:84:c0:21:aa:8e:5f:39:98:34:b6:d6:
ae:0a:78:97:8d:5e:b1:7c:4c:d5:9f:48:cc:1b:de:
90:d6:da:89:b9:cd:5e:22:8f:9c:ee:f3:38:08:c2:
52:35:cf:b6:c9:23:ea:f4:8e:55:58:c7:4e:99:78:
16:55:5d:e3:a2:eb:ac:97:5a:d7:f5:fa:d4:da:1c:
21:0d:c8:3f:13:7f:1a:f5:22:73:72:c4:d6:fc:a8:
7a:51:1f:72:15:82:84:f2:eb:2a:0d:f6:09:de:9b:
4a:d0:68:b5:4a:ca:dc:20:f7:b2:2d:00:59:2c:f6:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:18:BC:5B:0E:2A:8B:9C:52:3D:27:47:C0:83:C4:34:14:88:67
X509v3 Authority Key Identifier:
keyid:4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:ba:08:30:95:77:76:c7:89:3d:72:5d:49:54:d5:af:05:
70:3c:cc:11:8f:f5:e9:06:16:21:30:2c:3d:90:f7:99:59:47:
48:a1:68:8d:e9:2a:be:7b:68:26:db:1c:be:c1:b3:b1:7d:52:
04:ba:ae:fb:59:4d:e0:73:d4:f0:32:50:be:e6:ac:76:76:2c:
81:eb:c0:4d:c2:59:f6:f6:cb:87:99:5e:69:6f:5a:dd:45:69:
53:b9:72:23:e8:2d:87:60:96:ec:d3:7e:0a:20:15:ad:1c:e8:
93:d0:96:0a:5c:e7:31:1e:d3:9e:73:d8:22:38:ba:6d:ae:ee:
ba:13:ae:0f:5a:b9:6a:a3:f1:16:58:37:57:c8:b6:1f:20:20:
0e:8e:1c:44:4d:32:f7:bb:46:e5:38:07:b2:bd:f6:fa:c7:62:
c2:32:c2:b9:5a:b6:b7:43:40:70:01:74:52:45:5b:38:57:9c:
b1:35:8d:4a:1e:39:a9:51:44:fc:14:db:ee:6e:95:f9:6b:7d:
c9:26:b3:0b:73:52:5e:67:d5:3c:59:62:d7:a4:55:66:90:42:
34:90:ee:c1:76:2e:ae:54:5a:68:d2:e2:5b:7a:57:e3:95:ea:
ab:66:f9:35:4b:8c:06:ce:11:54:18:69:e1:ff:bd:17:b0:e7:
80:cb:66:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:25 2026 by rpki-client