Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: Q6/h0CmKngutmeAN7bV0T/P7ZK5fOrhcajQxt5uLaRA=
Subject key identifier: 81:4D:27:22:3D:A7:36:1C:2C:B6:B0:51:70:C6:43:44:14:AC:F4:4C
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019F111BDEA853936E727FD24353AE428926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 01D0
Signing time: Mon 29 Jun 2026 02:01:06 +0000
Manifest this update: Mon 29 Jun 2026 02:01:06 +0000
Manifest next update: Tue 30 Jun 2026 02:01:06 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: 5053DcCySrrR/djZUUxfmBRfdnJhATFHnHJcBvX707g=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:de:a8:53:93:6e:72:7f:d2:43:53:ae:42:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Jun 29 02:01:06 2026 GMT
Not After : Jun 30 02:01:06 2026 GMT
Subject: CN=814d27223da7361c2cb6b05170c6434414acf44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:4f:3e:dc:0e:61:66:9d:22:5a:f6:69:58:
9e:47:21:31:54:c4:0f:68:38:66:d6:91:31:51:9c:
a2:f2:d7:4c:ef:3d:c6:14:17:5e:8b:7b:1f:b6:2a:
29:9b:ca:6b:44:12:c3:80:a9:be:1f:a0:a8:eb:8f:
09:e3:21:ef:e4:27:52:65:5d:33:b9:3d:4c:b4:4c:
f8:1c:c2:ee:05:0c:9f:67:dd:12:0e:42:a0:94:01:
ca:29:d5:d7:71:3a:9b:f7:32:3a:ef:dd:75:dc:22:
66:20:ba:db:6f:81:28:0f:03:49:1f:21:79:a7:32:
b6:ed:7d:54:c5:c3:ec:6b:17:85:41:2d:41:ee:b4:
b2:7e:37:b6:f5:b8:2b:f4:2f:92:f1:78:aa:78:d3:
24:f1:5d:c2:fb:03:6e:59:34:fb:9e:6f:bb:12:24:
9d:3d:43:0a:bb:ec:0c:c6:f5:8c:9a:0b:7d:1b:e3:
e3:45:ed:c0:e4:5c:87:ff:46:04:d4:7e:67:3f:e2:
28:4c:a1:08:e1:fd:be:a1:27:30:ae:9d:03:7c:43:
ed:aa:12:6b:96:a1:c7:57:93:58:00:5f:09:8d:e7:
13:9f:70:ca:54:c6:1a:c8:3f:52:3b:8c:a7:95:b1:
d6:c8:88:22:71:9e:21:fc:84:c6:91:8d:a5:3b:a1:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4D:27:22:3D:A7:36:1C:2C:B6:B0:51:70:C6:43:44:14:AC:F4:4C
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:d9:d4:ac:3b:9a:8c:73:8f:3a:29:11:66:9e:12:a9:2b:
55:58:d3:3e:d8:1a:24:23:b2:72:bd:31:28:7b:3b:76:7a:df:
3a:cc:7e:26:99:88:38:bd:17:33:b3:6e:ba:be:29:b2:21:8f:
39:df:c7:61:cd:d0:0e:3d:ec:29:9f:ef:22:19:66:7c:61:da:
b7:14:be:12:78:1d:35:88:9b:1c:4b:79:47:4a:37:a1:f8:c8:
b3:dc:77:1e:79:98:ff:7c:4c:5a:e5:e7:1e:92:94:bf:5b:ca:
53:5e:9a:e0:7e:ca:a2:17:da:c7:bd:84:d1:15:b4:37:26:37:
a8:69:44:7d:f4:37:af:99:c3:d4:ff:e5:60:ec:b6:e4:05:c1:
7a:e7:8f:a9:15:03:71:e3:89:65:9a:6c:d4:2b:c7:ca:76:b7:
8a:0a:ca:35:95:3c:59:60:b0:a8:b4:4e:67:c5:b1:f0:a8:db:
12:ea:ca:1c:ff:98:58:4f:f0:5c:b9:28:0f:5b:cc:49:cc:80:
ba:f4:58:53:a1:3a:a1:4d:1c:69:20:66:ed:67:f0:2c:6d:c4:
d0:4d:99:d6:e3:5d:b9:92:3f:3d:6e:bf:e3:2c:9c:a3:03:81:
84:00:90:95:5c:b5:0c:1a:95:04:05:f0:27:6c:b4:c1:21:65:
cf:9e:bf:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RG96oU5Nucn/SQ1OuQokmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2E1MjYxMGM3N2MyNDA2OWM2YTY1OWY1Zjc1ODYyNDQ0
ZDIxZDEwHhcNMjYwNjI5MDIwMTA2WhcNMjYwNjMwMDIwMTA2WjAzMTEwLwYDVQQD
Eyg4MTRkMjcyMjNkYTczNjFjMmNiNmIwNTE3MGM2NDM0NDE0YWNmNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn9PPtwOYWadIlr2aVieRyExVMQP
aDhm1pExUZyi8tdM7z3GFBdei3sftiopm8prRBLDgKm+H6Co648J4yHv5CdSZV0z
uT1MtEz4HMLuBQyfZ90SDkKglAHKKdXXcTqb9zI679113CJmILrbb4EoDwNJHyF5
pzK27X1UxcPsaxeFQS1B7rSyfje29bgr9C+S8XiqeNMk8V3C+wNuWTT7nm+7EiSd
PUMKu+wMxvWMmgt9G+PjRe3A5FyH/0YE1H5nP+IoTKEI4f2+oScwrp0DfEPtqhJr
lqHHV5NYAF8JjecTn3DKVMYayD9SO4ynlbHWyIgicZ4h/ITGkY2lO6Hp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFNJyI9pzYcLLawUXDGQ0QUrPRMMB8GA1UdIwQY
MBaAFEzKUmEMd8JAacamWfX3WGJETSHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQt
MWIwM2U1ODk0ZTA1LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQtMWIwM2U1ODk0ZTA1
LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM//Z1Kw7
moxzjzopEWaeEqkrVVjTPtgaJCOycr0xKHs7dnrfOsx+JpmIOL0XM7Nuur4psiGP
Od/HYc3QDj3sKZ/vIhlmfGHatxS+EngdNYibHEt5R0o3ofjIs9x3HnmY/3xMWuXn
HpKUv1vKU16a4H7Kohfax72E0RW0NyY3qGlEffQ3r5nD1P/lYOy25AXBeuePqRUD
ceOJZZps1CvHyna3igrKNZU8WWCwqLROZ8Wx8KjbEurKHP+YWE/wXLkoD1vMScyA
uvRYU6E6oU0caSBm7WfwLG3E0E2Z1uNduZI/PW6/4yycowOBhACQlVy1DBqVBAXw
J2y0wSFlz56/Fg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:57 2026 by rpki-client