Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: IxWfdWDyIxDE2hirIlkCbh4go7SpchV/G0+LHnaqSgA=
Subject key identifier: FA:48:F3:CC:9D:1B:D1:C4:F2:CF:00:BC:A6:95:7B:9F:AA:04:D2:A8
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 019FF61055C60A4AF1209CF62A1186961DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 04C1
Signing time: Wed 12 Aug 2026 13:01:33 +0000
Manifest this update: Wed 12 Aug 2026 13:01:33 +0000
Manifest next update: Thu 13 Aug 2026 13:01:33 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: ubTmmlA+Lx4lYVAA4OXJQgKkodG/E6g+P3RaX1KLB8w=)
2: YPqShABfeYxe85XZwgPP-D5hAs0.asa (hash: lSybZ49LJX9Yd/+rtoHHH2KWxEldGY3pzCrhf0jSSpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:10:55:c6:0a:4a:f1:20:9c:f6:2a:11:86:96:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Aug 12 13:01:33 2026 GMT
Not After : Aug 13 13:01:33 2026 GMT
Subject: CN=fa48f3cc9d1bd1c4f2cf00bca6957b9faa04d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:48:d2:3d:40:f8:55:72:b3:96:5e:28:3b:
fd:d5:03:ec:f2:44:1a:ad:e0:75:1e:1e:7f:fe:17:
a5:05:fe:f6:e3:96:d2:22:d8:a1:57:36:ab:d7:23:
b6:e5:32:bf:f7:d5:bb:04:4a:c1:ff:c6:c2:ed:86:
43:5d:36:ad:95:e1:d9:33:75:26:4b:29:e1:75:4f:
62:63:08:15:3a:49:ff:45:05:ed:70:6b:8f:91:5d:
2e:48:87:7f:29:ab:e9:43:3e:4d:2c:13:a1:03:13:
e0:28:d0:25:ee:0a:05:a7:5e:1f:ef:ca:50:1b:cb:
0e:eb:8c:bd:02:26:23:8c:66:bf:2b:27:79:b3:bb:
f2:ec:b4:b5:26:e7:24:88:14:0f:28:9f:3a:8c:02:
58:20:53:3b:73:96:14:48:27:85:1b:35:a3:82:81:
4f:35:e6:fa:95:18:cf:8a:74:d5:29:e9:f6:bc:71:
d8:00:4e:9c:a7:ff:ce:d3:5d:e4:d4:1d:31:3b:8c:
03:66:c8:9e:2a:0b:c8:03:f6:f7:d8:f5:6a:d6:52:
97:0a:45:5f:6e:9f:ec:c5:fd:12:a2:71:cc:65:4e:
4f:04:ab:01:91:5d:74:d2:e0:2e:34:a1:5a:dd:e0:
19:d4:c7:c5:21:4e:4a:09:04:1a:85:d2:5f:ad:87:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:48:F3:CC:9D:1B:D1:C4:F2:CF:00:BC:A6:95:7B:9F:AA:04:D2:A8
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:03:24:11:f2:bb:39:c6:38:15:f9:6c:c7:53:1c:1f:9d:
91:88:85:31:61:23:17:b5:6b:38:a9:92:24:97:23:07:fc:b9:
eb:01:fa:96:c9:41:76:ea:9e:3a:f3:a7:90:32:7d:26:be:11:
74:9b:02:1d:a2:c9:6c:35:a8:bb:3c:45:a1:c4:de:95:45:c1:
bc:f2:a8:31:9d:11:ce:de:69:c3:72:5f:25:65:6d:cd:fd:5e:
12:18:20:2d:0b:73:fe:3b:3f:4c:12:8e:33:00:2e:6c:e8:e9:
0e:d8:26:12:80:41:ee:5b:71:41:2a:e5:52:dc:26:82:34:1c:
38:37:78:1c:b9:8a:44:c5:37:8b:5d:6d:ce:3e:04:84:ca:45:
60:17:48:b0:10:bb:98:4d:a3:dd:ff:2b:11:e5:c6:3f:5b:b7:
77:c9:99:a8:21:0b:11:b3:38:25:04:c1:db:cf:75:b2:b1:90:
1d:f7:e6:b6:9e:22:8d:ff:73:cf:8d:75:16:5b:b1:71:46:ff:
9f:44:89:03:3e:18:b9:de:ea:d3:7c:aa:73:26:21:98:35:69:
21:a7:d7:5b:a8:57:9b:ce:7e:8a:e7:99:29:4f:8d:88:45:62:
ff:d3:03:72:ca:16:88:b0:9f:91:34:fc:a2:b3:8b:4c:50:9e:
5d:3d:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:42:47 2026 by rpki-client