Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: L1dGqsJ2EvCyjQOYpNkxaq9Chdu9ePG4+n015P/iC20=
Subject key identifier: 16:2C:7A:72:BC:52:C3:6F:06:1E:B7:CE:99:50:9B:65:19:76:5D:CF
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019EFBA873463B3473E942460BAC42D4B40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0E2F
Signing time: Wed 24 Jun 2026 22:03:01 +0000
Manifest this update: Wed 24 Jun 2026 22:03:01 +0000
Manifest next update: Thu 25 Jun 2026 22:03:01 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: r+1gMt5xC8zD1GuFUod9vwF13kHw0gAi0G7savl8B+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:73:46:3b:34:73:e9:42:46:0b:ac:42:d4:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jun 24 22:03:01 2026 GMT
Not After : Jun 25 22:03:01 2026 GMT
Subject: CN=162c7a72bc52c36f061eb7ce99509b6519765dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:b4:a9:c7:e6:66:79:de:ad:f3:9f:fa:a2:
fe:92:aa:8e:67:01:cc:a6:9d:7e:92:b0:0f:52:fe:
48:cc:2c:cb:9d:c3:45:f5:71:42:35:4b:0b:ff:7f:
9c:e9:0c:4e:e1:a5:41:b2:80:af:6a:c2:48:bc:a4:
33:78:2f:49:3b:95:65:28:ef:b2:2a:2e:80:9b:21:
c9:63:d3:0c:17:13:dd:3f:e3:54:ae:be:aa:51:93:
cb:64:c8:2b:2d:8a:22:fd:97:c1:33:a7:62:90:21:
86:a5:f7:55:c1:ce:e6:37:07:ae:8b:b4:b2:0f:ce:
88:33:33:f8:b5:87:83:aa:f2:0f:82:d0:89:76:69:
02:a8:e4:d7:54:02:50:4f:b2:83:f1:47:8f:bb:57:
cd:05:51:ce:7f:80:1d:1a:76:0b:10:c2:75:cf:6e:
5f:92:25:88:f4:9e:d0:37:2a:d6:c1:14:20:bc:5b:
27:84:2a:92:89:8d:71:88:be:c3:5b:5e:47:91:1d:
2d:83:a0:5b:fa:2b:37:cf:4c:92:b9:56:7f:d9:8b:
e4:5e:1e:11:76:ac:52:c1:2b:50:40:22:fe:54:73:
bb:b9:31:6c:c5:b7:e1:3e:4f:ca:7d:75:c0:ad:0a:
5c:63:cc:99:2b:20:c6:4d:8b:3a:7e:00:4a:c7:bc:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:7A:72:BC:52:C3:6F:06:1E:B7:CE:99:50:9B:65:19:76:5D:CF
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:de:8c:62:2e:46:d5:aa:66:70:4d:27:44:29:5a:d5:8c:a7:
ed:fb:3c:7d:26:9a:e5:59:b2:a5:5b:1e:c1:bb:8f:d7:1b:ae:
e2:c4:56:5c:66:b1:e7:33:e9:31:ee:c6:2c:ea:65:79:24:cb:
1b:95:fa:2e:bb:35:18:9a:88:6a:9c:b7:d1:b9:09:59:1d:7b:
4a:c0:82:02:67:ee:13:9f:44:17:c2:30:be:47:b9:9b:22:3f:
1b:1e:be:91:af:b5:1a:f0:17:16:c3:2f:bb:2d:5a:ba:63:5d:
ee:9d:8b:57:f2:57:0e:53:29:e0:93:86:0f:68:e4:05:b2:f6:
d0:94:f3:1b:3d:2c:72:ce:3c:b5:01:55:5d:44:a9:46:87:03:
05:d8:a2:cb:f9:32:c0:3c:93:93:0c:93:34:06:f9:31:d2:21:
74:1e:d9:89:87:2f:33:62:58:28:c6:1b:4e:a1:1e:08:ac:16:
af:8d:26:7b:17:ce:6b:84:20:fd:2c:18:b6:a3:ed:79:80:f5:
07:85:c2:65:7a:8d:e9:8e:1f:d9:b8:db:16:13:a5:2b:66:3c:
3b:1b:87:a0:55:f2:14:02:b1:e6:3f:bf:58:79:e3:2d:13:69:
c1:7e:3e:5f:7b:2e:73:d2:c9:20:c2:06:f1:94:48:78:b0:0f:
b3:72:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 02:26:57 2026 by rpki-client