
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: snsHCyx9CgBWY1Q6hcIscR6QlZ6f/KnHK1ArHyRwXZw=
Subject key identifier: 07:19:46:DB:5C:B2:92:E4:9A:17:E3:67:74:C4:7A:AE:44:18:F7:93
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 019FA3E06B1832552344BF485D2FD923B7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 19E3
Signing time: Mon 27 Jul 2026 14:00:21 +0000
Manifest this update: Mon 27 Jul 2026 14:00:21 +0000
Manifest next update: Tue 28 Jul 2026 14:00:21 +0000
Files and hashes: 1: KFywMW4737-JPpo7ntDdVjcljY0.roa (hash: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=)
2: K_yCMW3gEKPx-UvDR4vcUDQfi04.asa (hash: 5ltTYL5p8Fw8k0ASnDZeUNbyyXbm27rjjhji8a6UNc0=)
3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: UOb0GHf98tSZSc+jWQXEQX1pQyU2oSrTbdTVaRsPNhg=)
4: fhNDpez0tEXT55T0FQuT3YRDXos.roa (hash: +VEaHjpilB4sNBhuKG3GgrFbP8VWjeNr6HEMkdwaBYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:6b:18:32:55:23:44:bf:48:5d:2f:d9:23:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jul 27 14:00:21 2026 GMT
Not After : Jul 28 14:00:21 2026 GMT
Subject: CN=071946db5cb292e49a17e36774c47aae4418f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:9f:ae:13:2a:56:99:74:ae:e5:9e:dc:89:
6c:4c:3f:64:5c:90:71:17:1f:13:c6:a4:03:78:31:
fb:db:42:c7:5c:6c:22:2e:3a:cd:81:4d:88:37:65:
26:d4:a6:c0:0f:b0:77:4e:08:62:43:9b:70:9a:35:
43:90:3e:6c:3a:25:1b:23:34:04:9d:91:f7:87:ea:
82:ac:6a:33:51:54:66:d8:cb:c4:57:ca:07:13:3f:
5e:4a:a7:e9:4f:79:d6:1a:11:63:4f:dc:a1:8c:34:
05:db:bc:24:89:a1:c4:6c:58:8f:f2:f9:45:98:2a:
e0:78:59:5b:1d:67:74:d8:bf:6e:31:2b:4c:58:a9:
d1:34:11:4f:34:4d:95:35:42:a6:c2:99:19:60:72:
00:74:81:b1:36:3e:e3:df:a5:85:63:c7:0d:4f:ad:
9c:53:9b:71:9f:3c:a9:8d:a6:42:ff:76:0e:a0:62:
b8:89:1f:28:d9:f4:47:f9:01:78:c7:41:97:44:39:
40:fc:a1:d3:64:3c:a8:57:bd:e0:32:07:4b:a8:05:
bf:d3:c9:31:2f:01:56:f4:c1:23:ce:3b:f5:e8:e4:
50:73:9e:af:e0:6a:8d:ab:d7:c0:52:ec:0b:9e:6a:
7b:68:c0:ae:9b:fc:55:9e:6a:5c:3c:69:a2:62:0c:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:46:DB:5C:B2:92:E4:9A:17:E3:67:74:C4:7A:AE:44:18:F7:93
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:66:b7:5b:05:5e:a6:44:f8:41:bf:91:02:6e:bf:d0:5b:b3:
9e:16:4e:e3:07:c7:a6:b5:60:e4:a1:17:aa:66:62:6e:1b:5a:
65:4e:39:71:59:9c:3b:aa:1c:e7:ec:6d:c0:bc:ad:22:fa:b1:
14:fe:f1:47:1c:5d:37:d3:aa:c4:70:7b:24:a6:bc:2b:85:9f:
a0:75:f1:c6:9c:ff:e6:36:4d:ce:2d:b0:ae:fb:51:c4:10:07:
80:4d:82:68:20:58:da:26:6a:ba:a0:ce:01:b6:17:3b:2b:b3:
91:d3:a1:46:ef:35:75:92:58:3b:df:41:b1:f6:0f:a3:a0:d4:
ca:b1:f5:8a:ff:ec:27:bc:2b:40:fb:03:a9:ea:71:08:fb:74:
46:99:8e:81:8d:1e:f9:7d:94:c8:70:65:15:07:3c:5d:99:12:
f5:79:18:97:fd:23:b0:09:2b:04:ae:2f:13:a7:40:21:56:d4:
1f:02:41:85:c5:cc:02:c2:d8:b5:ae:a3:df:c0:59:6a:21:ee:
f0:b3:57:01:62:9c:78:40:1c:86:60:ed:53:4c:39:25:03:49:
f9:b9:ae:0c:82:33:26:75:00:b0:e6:40:e6:40:47:42:1c:05:
d9:2d:0c:4c:81:94:49:4a:97:bc:88:ca:3a:77:35:53:86:4f:
e9:58:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:59:13 2026 by rpki-client