Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: 47P5LCCouPC86mCgc1wRmR4VAS4ImO44IuWec1DUuZU=
Subject key identifier: 58:A9:CF:74:8C:11:D9:16:D3:6E:BF:B8:6B:2A:A0:04:84:D7:D6:BF
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019E5146CF1BBCC107FFC96B54084C75A45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0C7B
Signing time: Fri 22 May 2026 20:00:55 +0000
Manifest this update: Fri 22 May 2026 20:00:55 +0000
Manifest next update: Sat 23 May 2026 20:00:55 +0000
Files and hashes: 1: BOgwaBfeVQSIIpapc527zkUmHqU.roa (hash: nrw7ZZfH7PdSf3N6nWnSJG5fTiZauLCGIT/x1kU9vbo=)
2: iMohY32XGfMe49GauUZuk8wSe_o.roa (hash: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw=)
3: taAXT03F3M3JAGdGzCZ9PUX6syw.roa (hash: fgpH3fuH0sJY/Yp9V/TwIQ+R+Yd9bAUVli6dhikUJko=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: mrZjG+eF5u+Aa2oarxGmtasdM08nHIDqjOCyuv+a+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:46:cf:1b:bc:c1:07:ff:c9:6b:54:08:4c:75:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: May 22 20:00:55 2026 GMT
Not After : May 23 20:00:55 2026 GMT
Subject: CN=58a9cf748c11d916d36ebfb86b2aa00484d7d6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:a0:12:09:b2:0d:44:2f:94:ca:75:d9:46:
3f:90:98:d8:1f:17:6d:24:a2:29:e8:b7:07:4e:42:
56:2c:03:08:6f:de:3a:de:61:e5:e6:f6:da:02:e3:
1e:9e:9e:7f:9f:37:41:6e:6d:8b:cb:6f:fd:b1:79:
ed:b3:73:0a:85:88:45:7b:7f:53:fd:b3:7f:61:99:
d1:43:dd:58:a3:c9:d9:d0:63:a7:dd:60:91:58:6b:
da:d4:75:b5:ad:42:b9:37:67:2b:2e:b9:c4:b5:27:
07:2e:20:70:79:49:fe:ec:fe:2b:48:2d:dd:13:e2:
45:8e:88:3d:4e:30:7c:13:54:7d:81:8f:a5:73:6d:
c5:d4:63:2f:e7:b2:89:a8:b1:39:0e:70:91:60:13:
91:0d:22:06:6f:f8:1c:47:ee:22:02:3c:ae:f3:27:
a3:7e:d2:c3:5f:71:95:1f:43:de:73:cc:4b:26:a4:
ed:aa:4a:e3:d0:2f:c9:fa:c8:a6:67:1f:cc:dd:89:
2c:2a:36:75:ad:3f:ad:b7:d4:4d:62:64:40:9f:54:
89:e1:96:30:e7:8f:76:0b:88:12:07:22:76:c6:f4:
51:3c:85:58:2b:7a:da:e4:c0:bd:22:de:f9:5f:a3:
6f:5f:cb:2e:03:5d:90:a8:09:9e:13:4b:a1:06:39:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:CF:74:8C:11:D9:16:D3:6E:BF:B8:6B:2A:A0:04:84:D7:D6:BF
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3f:76:9d:6e:6b:e5:db:4f:02:2f:31:c2:b8:77:9c:de:1e:
bc:95:e0:a8:2f:36:09:7d:38:cb:8a:b2:d6:39:42:22:dd:6b:
0f:98:dd:75:fd:4a:02:66:a0:7f:79:74:78:98:aa:4e:7c:24:
51:3d:2f:3f:e5:fe:90:36:f7:fa:31:3e:5a:0b:d7:bf:8a:15:
0a:97:36:80:1d:4d:b2:56:1c:29:9f:28:76:01:18:51:f9:65:
ee:c0:dd:a3:a7:92:c1:23:82:09:55:eb:73:c6:4a:b0:60:95:
3c:56:ef:b6:20:b0:1b:9b:e3:df:27:2e:5c:54:97:b0:c1:8b:
1e:15:8a:2c:82:29:6e:65:41:af:f0:3c:50:7c:aa:c7:74:c2:
a8:13:ef:45:56:e9:e5:6d:9a:24:68:d0:13:23:32:69:6e:a5:
cb:a5:9a:f6:a3:99:05:ee:18:02:a2:96:af:ed:e0:51:1f:91:
ae:f9:a4:30:b6:32:75:21:43:e8:0d:79:18:f7:fa:b5:3f:79:
0d:28:6a:c3:a6:72:6a:3e:42:b6:39:cc:dc:33:23:61:b8:ec:
53:d5:3c:7c:20:ca:1f:60:c8:12:91:1d:35:71:d1:1f:f4:1d:
4e:da:19:a8:5f:25:86:37:f0:b6:34:63:e9:ec:61:6e:22:b3:
f3:8e:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:12 2026 by rpki-client