Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: t9SOTJa8C/lfReUzHgDBEmkkzohauUYZN4L54v93csc=
Subject key identifier: 11:E0:1B:CD:13:01:37:D4:B3:18:09:4E:D5:F6:86:5E:ED:93:89:59
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019FF6B530DECEAC8A0DEACE10B3D2BB5CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0EB1
Signing time: Wed 12 Aug 2026 16:01:37 +0000
Manifest this update: Wed 12 Aug 2026 16:01:37 +0000
Manifest next update: Thu 13 Aug 2026 16:01:37 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: qWa5DQQ2tZ1ScqWjI/O7M5yGUkYTBvcFfvvNGqvhS08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b5:30:de:ce:ac:8a:0d:ea:ce:10:b3:d2:bb:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Aug 12 16:01:37 2026 GMT
Not After : Aug 13 16:01:37 2026 GMT
Subject: CN=11e01bcd130137d4b318094ed5f6865eed938959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:fe:5f:1e:61:5c:db:b4:d1:97:93:3e:7c:
c0:1b:97:f2:69:4f:38:9a:74:ec:62:ca:2b:70:c1:
99:2e:a1:3b:cb:e8:60:eb:ab:77:66:eb:78:10:9c:
f5:8f:a3:ce:79:d5:71:02:61:bd:0c:61:5c:ca:b1:
76:00:0c:57:2d:7a:81:83:3b:d6:bb:35:6f:41:2e:
23:48:13:62:a7:48:bf:67:c1:bb:0d:c3:6a:5e:e5:
ed:50:e3:cc:04:c2:0e:46:86:6c:a8:8b:48:d6:2b:
ef:46:69:d6:d7:6e:9f:72:0c:d0:68:7a:82:ed:97:
0f:c4:b5:68:83:51:ec:ca:31:60:54:60:28:80:45:
33:aa:ad:6d:0b:ac:01:80:6d:07:55:9c:07:68:5b:
f1:bd:d8:76:90:66:e4:40:ec:03:eb:69:1b:11:0f:
92:cd:09:ec:3a:97:45:01:6d:19:6a:72:0f:f3:91:
40:20:cf:22:b4:15:de:72:1f:17:09:e2:20:aa:cd:
35:70:69:ec:6f:b8:99:4a:3e:6e:08:66:e7:66:2b:
45:bd:4e:10:de:68:68:29:2e:e8:e8:90:35:f5:11:
9b:54:bc:9c:04:95:73:38:4b:48:38:59:b6:ee:c0:
6f:84:e6:01:ba:6b:f7:72:64:59:23:f8:04:95:02:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:1B:CD:13:01:37:D4:B3:18:09:4E:D5:F6:86:5E:ED:93:89:59
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b7:da:cb:82:ae:24:ee:9c:be:57:f6:2a:ae:12:1a:66:65:
cf:de:b4:c6:f0:b4:3e:04:e7:ba:2b:22:53:32:90:07:a6:7f:
77:37:45:b1:ba:68:b8:dd:a3:5c:0b:60:d0:9d:25:ac:a3:22:
5d:a9:51:48:f9:75:94:17:27:b3:68:94:2d:c7:f3:c9:70:37:
b6:aa:8a:9b:9b:85:c1:d0:a0:84:0f:af:f2:b0:98:d9:d1:34:
05:91:d7:35:d6:ed:a6:f4:09:bf:42:bc:d6:8f:5c:5c:8c:67:
80:c3:ad:2a:42:3f:a3:8a:6a:0e:86:8b:03:cb:ca:07:85:22:
94:b7:5f:ec:41:6e:a8:61:10:1a:87:4f:c4:e7:fa:2a:ba:65:
cf:09:02:57:0d:6f:91:81:1f:4f:c2:3a:91:be:0e:ac:de:75:
bb:55:ea:4e:fb:50:27:47:1f:65:9f:5b:20:6e:c4:a6:cd:c9:
b1:b0:a8:f6:d1:41:78:a0:44:45:25:eb:99:01:f4:77:4f:5d:
0e:3d:0c:5b:1f:ff:76:1d:03:82:35:78:0e:54:36:6d:ec:a8:
61:06:94:33:3a:c8:71:9c:75:db:87:bb:aa:34:a7:84:24:24:
59:66:9b:17:11:a6:dc:db:b4:2c:78:74:bf:08:f9:6b:10:37:
b7:4e:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:33:48 2026 by rpki-client