Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: z7caKM4Z4S3hxa+iZQ994ySCmSOKPYyz5ATecp1hgPY=
Subject key identifier: 6B:DE:3E:DD:D3:64:E3:94:8E:62:AD:03:39:BA:FF:2F:B8:86:97:8B
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019F848D00E73912DDA3CD325F2382B7DAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0648
Signing time: Tue 21 Jul 2026 12:01:00 +0000
Manifest this update: Tue 21 Jul 2026 12:01:00 +0000
Manifest next update: Wed 22 Jul 2026 12:01:00 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: GwvGNopOVdCuFA7l43eBqpOM+jIIyB92vtN/mVDnBQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8d:00:e7:39:12:dd:a3:cd:32:5f:23:82:b7:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jul 21 12:01:00 2026 GMT
Not After : Jul 22 12:01:00 2026 GMT
Subject: CN=6bde3eddd364e3948e62ad0339baff2fb886978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:59:3c:41:64:8e:1e:ff:50:0a:97:36:67:
61:df:4f:6c:93:b2:2e:58:4e:51:54:13:5b:bb:74:
44:23:0b:85:01:9c:0d:32:37:8b:4e:61:78:73:cb:
4f:aa:e7:1b:f9:e0:ea:8a:ae:cd:ca:33:70:3a:ae:
f0:11:c7:bb:1c:cf:71:ee:f9:eb:44:5e:5f:af:93:
23:16:18:8c:ca:b0:47:f0:98:ea:ca:49:36:4d:f4:
77:52:f8:e6:0d:e7:f7:8e:98:b6:e3:fb:39:c3:3b:
d4:d3:13:87:e4:95:05:4d:bf:07:81:90:4f:5d:50:
bf:0e:6c:75:35:e7:02:93:e8:63:ee:0e:ff:d9:40:
d0:d7:a5:8a:42:2c:85:88:ed:24:59:b9:f9:90:86:
00:c0:ce:33:db:e6:84:59:e5:9a:a9:53:60:62:57:
d8:98:2c:99:46:35:a1:85:e6:c7:98:ab:63:9c:14:
4e:d1:6c:1e:4a:97:0c:0b:5d:10:d9:58:29:ad:30:
82:13:c0:c1:dc:68:d6:71:d3:15:45:4a:a3:52:60:
36:f0:9d:02:8f:e2:ff:d4:d9:58:d5:04:b3:a3:ac:
42:ca:b9:39:f0:9f:42:fb:c7:5d:37:4a:2c:7b:8d:
13:09:a6:39:2f:4c:68:48:40:cf:0d:28:88:ff:e2:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:3E:DD:D3:64:E3:94:8E:62:AD:03:39:BA:FF:2F:B8:86:97:8B
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:12:19:ef:84:c4:fa:1f:e2:a5:1a:a5:55:ea:c0:9b:a7:
d9:41:e7:72:2d:52:28:47:1c:40:21:5e:9d:b5:4d:7f:76:63:
ec:42:c2:c9:54:f2:c8:d6:cd:ab:34:3c:75:13:df:56:8e:04:
b4:59:85:b8:5c:ed:6f:e7:1e:cd:aa:65:72:e4:1b:2a:c1:0b:
82:9e:fe:af:ad:d4:dc:10:8a:4c:35:06:93:eb:9b:46:db:3a:
c0:84:9c:e4:1c:3e:c8:ab:7f:20:02:2f:13:7c:bc:84:ac:21:
5e:47:18:fc:9f:51:d3:ec:94:4f:17:b2:37:95:e6:1a:8c:eb:
7c:a8:15:a4:2c:dd:bb:90:b8:22:cf:11:47:c3:09:c3:33:5b:
20:49:dd:88:b4:01:27:08:30:07:24:ba:af:5d:53:31:3b:28:
b8:39:97:77:69:fc:44:8e:d7:14:a4:2a:bf:41:77:ab:45:2c:
33:c3:50:d3:ce:4e:72:6a:41:25:23:b3:57:0d:a4:0b:30:c5:
51:26:0f:5b:e5:cd:89:14:63:fc:45:9b:1d:da:bb:48:b0:8d:
07:cf:cb:62:ab:16:89:48:bb:67:66:01:7e:63:dc:3d:67:92:
09:b8:b9:58:53:90:3e:54:dd:7e:e3:78:b7:e6:1a:da:c6:cd:
1f:2a:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:26:44 2026 by rpki-client