Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: 7YiSecBsZvzI1gjTY6aZwn6ZbUQhazwXGCfCFFfD9rY=
Subject key identifier: AA:7B:1D:45:42:16:CB:98:EF:4A:B7:0A:AB:20:0E:B9:1F:03:84:E7
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019F1152CF43E696201538F3F3E8F7C36B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0FB6
Signing time: Mon 29 Jun 2026 03:01:07 +0000
Manifest this update: Mon 29 Jun 2026 03:01:07 +0000
Manifest next update: Tue 30 Jun 2026 03:01:07 +0000
Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=)
2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: fSYG7ftZwOKDehNU21KrVofERw1PGFqsuZrWwJCSTmw=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:cf:43:e6:96:20:15:38:f3:f3:e8:f7:c3:6b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Jun 29 03:01:07 2026 GMT
Not After : Jun 30 03:01:07 2026 GMT
Subject: CN=aa7b1d454216cb98ef4ab70aab200eb91f0384e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:21:a2:3b:aa:6e:43:db:d6:e6:a3:0f:43:
82:8d:72:0e:2c:aa:f3:15:59:62:df:dd:17:40:a6:
86:0e:c2:ba:2a:0f:51:52:6e:7f:e7:26:e1:c3:7c:
b9:0a:84:10:83:d0:c8:fc:b5:f4:98:6d:e4:5e:70:
80:e5:1d:66:c5:63:ad:fc:ab:42:96:c1:84:aa:13:
df:bb:4b:8e:82:57:10:a8:56:2f:da:57:f3:07:27:
4a:59:d8:d7:73:99:91:71:87:fa:7a:a3:08:dd:4f:
3b:b4:5b:87:a5:d1:bd:fd:b3:ef:30:26:48:db:dd:
47:18:42:b8:ed:50:de:23:d2:90:cf:81:57:08:42:
7c:35:60:21:96:d3:ac:02:1a:17:db:c5:03:62:c5:
ef:c0:58:66:b8:fa:2b:b3:5b:a7:e2:a1:a0:df:0c:
a3:f5:d9:1d:16:55:38:8f:18:5a:e2:69:9b:fa:32:
0f:68:08:36:58:82:e7:bc:85:0b:d0:96:1a:76:d3:
fe:5c:8f:96:db:b8:13:41:23:df:11:fd:35:dd:f9:
7f:67:48:11:3a:29:02:e6:01:f6:78:7d:56:0a:04:
08:c3:91:5f:46:91:a9:02:8e:dd:bb:bc:de:89:dd:
c0:f3:d0:a6:5e:c3:f6:0b:d2:01:3b:2b:10:4e:f9:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:1D:45:42:16:CB:98:EF:4A:B7:0A:AB:20:0E:B9:1F:03:84:E7
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:64:67:3a:ce:ef:de:f8:ad:07:17:11:c4:d5:49:76:6e:
21:f5:9d:ef:c2:21:d6:b8:9b:4f:27:20:9c:54:75:e5:1c:21:
e1:6a:e6:be:89:9b:ad:7e:14:9d:fb:cd:30:c4:83:9d:f2:8f:
fd:00:d4:ed:f8:56:c6:2d:5b:0f:de:41:2d:28:60:a3:f2:fe:
ac:76:0a:93:4c:73:e1:cc:6f:fc:27:24:6a:db:4c:87:a3:bd:
52:da:d9:f8:2e:52:8a:6a:53:e8:c7:5b:a5:b9:2e:e8:ca:50:
5e:ef:60:cd:70:df:f9:a4:cb:26:00:e6:36:a1:7c:aa:ef:fb:
bc:91:94:c3:3d:73:a4:12:86:2d:75:55:1b:34:2f:77:f7:ae:
ba:7b:4a:00:0b:dc:34:5c:d3:69:a4:bc:bf:61:22:a4:da:a0:
73:d1:64:42:e0:f3:2a:87:9f:f1:9b:48:fc:2c:0e:f9:7f:b6:
0c:19:47:7d:be:5b:9b:0b:fa:f7:93:3a:cc:0e:b9:e2:3a:cf:
31:35:c2:5e:06:60:d5:e3:38:b3:43:6b:6d:d6:af:ae:66:ed:
17:12:e6:7d:3d:47:c2:19:b4:5e:11:19:b9:8a:a5:e6:51:e1:
88:86:d4:34:b9:cb:e6:bd:77:6f:50:c0:4b:45:2e:a5:7e:8e:
9c:4a:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:08 2026 by rpki-client