Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: /sBuKmqzuexw8FEGREuxYSSKP2IkSNmwyjoteDIB4t4=
Subject key identifier: A0:37:50:90:8B:64:B1:71:11:9A:B7:95:F0:47:A8:B7:2A:AF:B0:5D
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019FAAF57C67C2335190E05C2BB7CAC055EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0BCE
Signing time: Tue 28 Jul 2026 23:00:42 +0000
Manifest this update: Tue 28 Jul 2026 23:00:42 +0000
Manifest next update: Wed 29 Jul 2026 23:00:42 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 5EbRXYwTb72z7XiANYsXEKidEY5WQBApvJhmtf07b3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:7c:67:c2:33:51:90:e0:5c:2b:b7:ca:c0:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 28 23:00:42 2026 GMT
Not After : Jul 29 23:00:42 2026 GMT
Subject: CN=a03750908b64b171119ab795f047a8b72aafb05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:5f:ec:77:e9:22:c5:87:35:94:e7:7c:69:
4e:d9:09:97:6e:57:6c:e3:9c:af:f0:08:6f:c8:8d:
6b:2a:9c:38:b3:97:ee:1f:98:a6:6e:43:b6:81:b1:
9d:8c:07:24:c9:ba:71:20:e4:e0:b7:73:02:e5:73:
e0:de:46:01:01:be:60:71:e2:d0:79:7b:d3:38:d1:
7e:d3:a0:a5:13:01:09:27:99:d1:f9:28:38:85:03:
b2:5b:ad:45:ae:76:66:cc:d1:10:30:dd:10:13:be:
71:4f:79:88:c6:27:4a:73:40:1f:88:0c:b0:e2:b6:
89:d4:83:a6:15:a2:fc:91:f4:f4:5d:24:9f:94:e7:
8f:b3:9c:8a:c9:7c:90:e3:ea:bc:ba:61:1b:15:9a:
56:0d:5c:71:8a:11:70:3d:63:e7:cd:7c:e9:96:8e:
50:29:7d:90:1c:5b:87:0a:e7:29:45:e6:6a:38:a4:
c2:45:05:0b:91:77:10:0e:73:8a:04:41:97:ce:73:
d8:71:24:0c:fc:03:b8:fd:62:30:b6:12:82:f2:da:
58:61:3c:68:06:9d:ea:e9:ec:5f:fe:69:88:de:f6:
43:4b:66:8e:fc:27:f7:18:50:99:8e:b8:87:a7:c4:
29:84:e0:1a:a1:a1:a9:e1:8f:b2:0d:97:71:69:15:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:50:90:8B:64:B1:71:11:9A:B7:95:F0:47:A8:B7:2A:AF:B0:5D
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:8c:5a:12:8d:ee:b6:06:02:d4:71:fb:3e:51:6c:59:c8:
b9:dd:57:56:87:4b:b3:15:77:d5:01:60:cb:1d:a9:74:4f:e2:
a4:af:6e:19:63:77:e7:e5:f3:eb:73:19:a7:c1:b4:d4:c3:87:
f9:77:4e:39:ab:02:32:1e:a9:fe:86:0a:b2:16:82:f7:90:ec:
0c:a7:86:dc:40:18:fd:4a:64:88:19:6d:c0:89:8e:78:58:12:
ab:6a:3a:d3:d4:97:83:a0:12:0c:c6:6d:f0:69:28:62:36:02:
33:91:29:b0:80:89:9f:e9:98:03:7f:3e:b3:80:32:c7:24:06:
e8:3d:3f:aa:6a:f7:4b:4c:1b:c8:fc:b3:33:62:03:63:b8:37:
93:b5:bc:96:a0:b6:98:48:a0:e2:41:2c:86:7e:22:2d:7c:df:
1d:2a:a8:83:24:5a:f5:70:f1:07:76:f5:93:97:19:1c:15:60:
b1:9d:95:a7:9e:e6:b3:6e:63:9c:9d:97:b6:f9:f4:b1:7c:30:
56:99:6d:66:b9:8b:92:1b:44:5d:b6:74:2e:4b:57:cc:c2:3b:
7a:e5:fa:52:dc:25:d8:8a:e4:fe:12:6c:f0:26:7a:bf:fe:d7:
2d:bb:41:13:23:d0:cc:5b:a5:e1:86:69:1a:1e:a9:3c:9b:da:
8b:d4:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:30 2026 by rpki-client