Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier: 7JbX6Nt+WIgYFCvPQQoCC5SU9wA88qI2XPb/+/4zXo8=
Subject key identifier: 42:8F:98:5A:1D:8E:F3:DE:CC:70:9B:27:6B:28:9F:D1:B1:60:C7:81
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019FAD885673771DBB914978A6BAEEF276A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 11:00:21 +0000
Manifest this update: Wed 29 Jul 2026 11:00:21 +0000
Manifest next update: Thu 30 Jul 2026 11:00:21 +0000
Files and hashes: 1: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: iO8J+E6hW9KmAQndaqiflSW2CGRbHQ6xrtJu5jjnBc0=)
3: TSaE9jnfmLsajED341YmImmueVE.roa (hash: z0vfj620Yifp7/Nyavqj/unas8uGjv3sCaFHadIyLYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:56:73:77:1d:bb:91:49:78:a6:ba:ee:f2:76:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Jul 29 11:00:21 2026 GMT
Not After : Jul 30 11:00:21 2026 GMT
Subject: CN=428f985a1d8ef3decc709b276b289fd1b160c781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:cf:ab:93:3a:85:4a:aa:c3:09:32:49:64:
25:b2:b6:43:44:9e:ab:80:65:2f:a6:46:e2:bb:e0:
22:fa:d2:dd:f2:c1:71:06:7c:d9:6b:c0:5c:12:4d:
c8:c4:fd:ef:32:96:23:f1:50:1b:c6:f4:d7:01:4d:
1e:6c:ac:8c:58:d1:c1:bb:59:f4:13:8e:da:8c:37:
ad:49:e3:67:48:3a:22:66:ad:3d:78:1b:cd:ef:d3:
78:2e:ec:d0:23:f0:0a:3c:a9:eb:99:5b:10:e5:d1:
97:85:44:d5:ca:1e:e7:3a:7b:c0:ea:e5:b2:a0:0f:
50:e7:58:8b:2f:cc:0f:89:f2:51:75:65:c8:69:96:
ab:b6:59:d6:d4:af:b0:30:49:e4:fd:72:f2:d2:19:
52:9b:b7:6a:8d:1e:d7:52:dd:b6:59:ed:07:95:79:
8a:a7:9d:05:18:05:82:f7:f8:da:1e:04:88:ef:21:
b4:52:72:5f:80:43:23:2c:8b:20:13:a8:6b:5b:72:
8f:c3:dd:37:04:d1:08:f7:e8:37:07:b1:4d:0a:f8:
4c:a1:47:4b:8f:4d:e6:85:47:89:48:bb:ed:d7:57:
63:7d:cc:62:92:67:27:b1:8f:4f:16:c9:ac:d8:7d:
4a:46:74:09:4e:3b:29:9d:45:d8:a9:53:d0:85:12:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:98:5A:1D:8E:F3:DE:CC:70:9B:27:6B:28:9F:D1:B1:60:C7:81
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8b:b0:90:ba:0f:22:05:dd:91:a0:94:8f:88:a8:75:13:e5:
21:3b:50:ee:b7:59:92:22:12:f9:1f:2a:91:8b:45:d8:eb:7f:
16:51:bc:7a:3b:c1:f8:a8:89:4c:6c:14:3d:40:99:35:7a:8f:
02:dc:b5:f3:ea:59:96:59:cb:0b:54:99:64:63:a1:a9:00:81:
d1:db:f3:b7:5b:72:01:59:cc:34:5c:e8:4c:4a:b4:d9:eb:2d:
f4:a8:1e:7e:19:86:e7:91:35:0e:11:fa:3e:31:bb:a8:cb:fb:
e0:81:3b:32:df:d8:29:96:0b:c7:8c:39:70:ee:36:76:03:02:
ae:39:f1:03:52:3b:5e:55:c4:60:36:fd:e0:ab:35:c0:a7:39:
05:8a:3e:98:1c:b3:a4:2c:bf:cc:2e:26:61:b7:53:41:2e:12:
80:a5:a4:61:f0:61:ec:d7:27:ed:0b:74:88:bc:80:05:90:90:
1f:27:01:6e:c0:7d:4d:73:01:1c:fc:c6:63:53:93:0b:e4:50:
d9:47:a0:4b:d2:54:81:f1:35:12:e0:4d:59:dd:53:4a:26:5e:
5d:be:3f:b2:78:02:8c:35:99:61:0d:d6:49:b2:28:15:fc:9b:
ef:e9:48:e4:79:e8:c6:02:2b:b6:6e:6a:37:6c:0e:df:a9:57:
75:cc:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:59 2026 by rpki-client