Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: +I55ZpHsVYxbpgDv5b059Sa9bTZvqh8SKlXALFLHUQQ=
Subject key identifier: CF:5F:91:36:86:C9:CE:F3:5D:9F:65:46:CB:E1:80:63:AF:88:AA:56
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019FF8A412D3F422F2BD2E9000D3E620E215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0C6C
Signing time: Thu 13 Aug 2026 01:02:10 +0000
Manifest this update: Thu 13 Aug 2026 01:02:10 +0000
Manifest next update: Fri 14 Aug 2026 01:02:10 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: D9qXnhx7IAM4fCTkkfYGO2vTHtoxMwVHNgDgyxz/X7w=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a4:12:d3:f4:22:f2:bd:2e:90:00:d3:e6:20:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Aug 13 01:02:10 2026 GMT
Not After : Aug 14 01:02:10 2026 GMT
Subject: CN=cf5f913686c9cef35d9f6546cbe18063af88aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:06:40:de:3d:e1:1f:b5:70:bf:27:97:26:
1f:4c:0f:33:0b:e3:e0:7f:e1:aa:24:3c:e0:11:3c:
34:31:0e:a4:2a:99:d5:ab:76:cb:79:7c:9f:ef:38:
7e:34:4c:58:5a:88:07:56:47:f7:77:5c:91:04:7b:
19:af:b5:49:01:68:2c:aa:9e:05:d8:69:6b:e8:f1:
16:55:97:63:1d:af:89:07:d3:33:40:00:6a:a8:d7:
08:07:78:53:4c:3f:31:29:cc:71:f3:74:05:8f:00:
f6:05:f1:70:5e:2a:b1:d5:d2:50:c5:1e:19:b2:a5:
e4:29:6e:67:c8:09:66:b6:3c:ed:3a:f5:20:75:75:
bc:40:a5:40:1c:8d:ce:1d:91:43:e3:91:7f:bf:57:
7a:53:3a:ae:85:fa:f7:ec:ba:0f:03:fb:5e:f8:f7:
69:bd:49:c5:33:c6:52:4b:fb:64:f9:77:1a:51:d1:
81:54:be:e7:83:d6:ac:28:5d:f2:56:85:2f:29:5c:
62:7c:de:4b:6e:97:69:ec:0b:42:98:7a:3e:e9:d9:
19:d3:c4:d7:de:8b:74:2d:8b:f7:40:dd:22:66:29:
19:47:4d:c5:a9:02:b1:4a:83:56:00:9f:31:9a:9b:
f4:18:24:34:ca:d6:20:47:9f:b6:2b:64:bb:e5:99:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5F:91:36:86:C9:CE:F3:5D:9F:65:46:CB:E1:80:63:AF:88:AA:56
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f6:38:8d:da:50:e7:22:e6:2d:c4:7c:80:00:34:f9:55:09:
6b:45:2f:f8:60:ca:09:d8:69:0e:c2:9b:89:73:6e:1b:6a:2f:
6a:63:2c:5f:9b:cb:38:e0:12:ff:c0:79:b0:38:5e:de:c6:9d:
28:78:7d:85:df:0a:06:8c:0a:a2:a8:84:83:a1:5c:37:03:d6:
05:dd:11:4f:5c:79:9c:41:7e:5f:ce:a7:88:fe:b2:26:63:91:
31:4d:1a:40:3a:af:40:03:0a:54:b2:49:e9:c4:8b:63:a6:28:
d4:4c:12:9e:40:3c:7c:37:20:94:ba:55:3e:5c:cb:4e:b7:6f:
ca:c9:e5:48:9a:2b:bc:b8:71:d9:24:1a:ef:f0:9e:3c:c5:70:
c5:a3:9a:06:ef:b6:dd:8c:2a:5d:b4:cb:eb:0a:21:2c:45:47:
2a:e1:00:0e:98:8f:66:b4:20:85:dc:7b:09:3c:05:66:d7:42:
d1:d1:27:55:d6:ce:b3:62:e5:c1:a1:1c:08:b0:90:0f:6b:58:
9a:3a:fb:ab:47:99:4f:47:34:2b:cd:25:a0:6b:01:3f:6e:17:
cd:ef:88:cb:58:0f:05:47:74:7d:73:7a:87:d7:b8:64:96:c5:
97:7b:f1:d9:67:0b:f6:b0:e9:ef:5f:c7:73:09:22:e1:3d:88:
9b:4c:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:04 2026 by rpki-client