Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: SGYo5/xvaXLGAEBVEPJx6TxuNjFFAPE81G4bLLoBZ04=
Subject key identifier: 58:C7:CA:60:41:6B:86:D4:49:46:D5:D3:AA:15:9E:75:22:EE:50:24
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 019EFCF208CEB6D69C2FB0ED8795840DFC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 0440
Signing time: Thu 25 Jun 2026 04:03:00 +0000
Manifest this update: Thu 25 Jun 2026 04:03:00 +0000
Manifest next update: Fri 26 Jun 2026 04:03:00 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: ulWAgjpSxBRqLESXuhT0nSj99b+1seBbCcgxg0rFiRM=)
2: YPqShABfeYxe85XZwgPP-D5hAs0.asa (hash: lSybZ49LJX9Yd/+rtoHHH2KWxEldGY3pzCrhf0jSSpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:08:ce:b6:d6:9c:2f:b0:ed:87:95:84:0d:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Jun 25 04:03:00 2026 GMT
Not After : Jun 26 04:03:00 2026 GMT
Subject: CN=58c7ca60416b86d44946d5d3aa159e7522ee5024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:62:26:f9:e6:90:09:4e:88:82:eb:05:95:
35:e8:77:81:aa:7c:db:97:c3:f0:62:61:dd:90:89:
a7:c9:27:bd:2d:13:ce:3f:d7:1b:80:7c:47:f5:bc:
f5:e6:70:aa:26:ab:97:fd:27:81:70:79:67:03:69:
88:68:9d:c6:89:62:f6:27:ea:78:45:0f:e5:48:d9:
9d:33:19:e9:20:91:dd:b8:e7:1c:9b:1e:73:e3:8c:
20:0b:6e:e0:a5:33:bd:59:16:88:84:cd:d6:21:04:
43:b6:90:6c:ee:e3:5f:5d:1a:de:7c:6d:c5:f7:8c:
57:2c:71:50:3e:95:29:99:4e:4c:a4:79:78:e2:2e:
0d:c4:a1:03:64:9a:3f:2b:57:a2:ab:d2:83:b8:c5:
d4:b7:3b:8d:49:f2:fd:82:a9:cd:a4:01:23:68:98:
03:02:ef:9f:da:a5:6b:b9:38:cf:bd:16:f7:f5:73:
b4:a2:c9:0b:77:1c:70:9f:fb:66:c9:22:37:30:05:
c8:7b:d8:63:f6:e7:ef:3f:9e:9c:28:d6:4f:d6:8b:
72:a3:66:9c:5d:d2:21:38:be:33:bd:7d:8c:7c:42:
47:03:ac:42:b4:ea:68:1f:4b:cd:a8:d0:fc:68:d2:
ae:b4:56:87:95:95:97:92:d9:73:6f:b4:b2:71:c0:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:CA:60:41:6B:86:D4:49:46:D5:D3:AA:15:9E:75:22:EE:50:24
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:67:10:fa:ce:22:6c:79:5e:ed:61:f5:ac:b8:ee:f0:f0:3c:
16:60:0a:c5:a3:a8:15:9f:55:b6:bc:b4:9c:16:dd:58:08:11:
b3:75:3d:84:34:71:98:19:a8:0b:19:9b:61:fa:f2:44:7e:cc:
30:a9:0c:33:6e:13:27:c7:b0:b4:cb:31:14:8a:75:1d:74:c6:
de:1e:04:af:23:d9:ee:42:8c:3e:83:c2:3f:b5:dd:86:d9:cf:
f6:dc:97:d2:8b:ae:df:7a:0f:79:13:74:ed:fa:f3:aa:eb:9f:
c1:9b:97:a7:25:a0:77:41:b1:50:85:0e:e1:96:7d:89:8b:a7:
3e:47:54:cc:90:f1:40:36:50:13:a5:9b:b0:99:27:df:79:9a:
f0:ad:0b:98:eb:51:74:9d:ce:88:bb:62:38:f3:47:09:cd:af:
08:ed:f1:04:d3:c5:ee:95:cd:a8:ae:98:ba:94:aa:2e:5a:ce:
3c:df:bd:2f:e9:3f:05:b4:fe:69:89:36:94:80:c2:16:03:3a:
a4:41:02:e7:64:4c:4e:bc:f4:ca:cd:38:2e:bb:2f:86:d3:d4:
03:38:54:50:2c:88:a6:3f:32:6a:36:6d:cb:6d:b8:86:bb:f8:
e5:d9:69:35:e2:87:f7:77:dd:d3:03:af:7a:7f:77:9c:e4:4d:
5c:c9:af:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ788gjOttacL7Dth5WEDfwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzAyMzBjZDQxNWQ4NmU4NmZkODg5MzEzNDI4N2NlNTRh
Njg3ZDcwHhcNMjYwNjI1MDQwMzAwWhcNMjYwNjI2MDQwMzAwWjAzMTEwLwYDVQQD
Eyg1OGM3Y2E2MDQxNmI4NmQ0NDk0NmQ1ZDNhYTE1OWU3NTIyZWU1MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFiJvnmkAlOiILrBZU16HeBqnzb
l8PwYmHdkImnySe9LRPOP9cbgHxH9bz15nCqJquX/SeBcHlnA2mIaJ3GiWL2J+p4
RQ/lSNmdMxnpIJHduOccmx5z44wgC27gpTO9WRaIhM3WIQRDtpBs7uNfXRrefG3F
94xXLHFQPpUpmU5MpHl44i4NxKEDZJo/K1eiq9KDuMXUtzuNSfL9gqnNpAEjaJgD
Au+f2qVruTjPvRb39XO0oskLdxxwn/tmySI3MAXIe9hj9ufvP56cKNZP1otyo2ac
XdIhOL4zvX2MfEJHA6xCtOpoH0vNqND8aNKutFaHlZWXktlzb7SyccAkBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjHymBBa4bUSUbV06oVnnUi7lAkMB8GA1UdIwQY
MBaAFE3AIwzUFdhuhv2IkxNCh85UpofXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMt
ODMyYWI4NDQxNzJiLzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNTZmYTktZjlmZS00MGY1LWE4NTMtODMyYWI4NDQxNzJi
LzEvVGNBakROUVYyRzZHX1lpVEUwS0h6bFNtaDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWcQ+s4i
bHle7WH1rLju8PA8FmAKxaOoFZ9Vtry0nBbdWAgRs3U9hDRxmBmoCxmbYfryRH7M
MKkMM24TJ8ewtMsxFIp1HXTG3h4EryPZ7kKMPoPCP7XdhtnP9tyX0ouu33oPeRN0
7frzquufwZuXpyWgd0GxUIUO4ZZ9iYunPkdUzJDxQDZQE6WbsJkn33ma8K0LmOtR
dJ3OiLtiOPNHCc2vCO3xBNPF7pXNqK6YupSqLlrOPN+9L+k/BbT+aYk2lIDCFgM6
pEEC52RMTrz0ys04LrsvhtPUAzhUUCyIpj8yajZty224hrv45dlpNeKH93fd0wOv
en93nORNXMmv/g==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:42:19 2026 by rpki-client