Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: P7WVOS2UC0QG59OE/CHsKDFrvBstzCKbL+TqBRHg6pc=
Subject key identifier: CB:3C:37:D9:D1:C9:38:88:F4:8C:2B:6D:6B:B3:F4:96:9F:C3:2B:9D
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 019FAC3F15397CBBED6B4C88FF2912CCCF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 0830
Signing time: Wed 29 Jul 2026 05:00:43 +0000
Manifest this update: Wed 29 Jul 2026 05:00:43 +0000
Manifest next update: Thu 30 Jul 2026 05:00:43 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: HDBuMp/suWJxr1HoGE769UplRQ6q6/SAiriuliBgzOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:15:39:7c:bb:ed:6b:4c:88:ff:29:12:cc:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Jul 29 05:00:43 2026 GMT
Not After : Jul 30 05:00:43 2026 GMT
Subject: CN=cb3c37d9d1c93888f48c2b6d6bb3f4969fc32b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:1c:8e:cf:89:99:be:30:5b:af:11:fd:ee:
45:42:37:3e:8a:39:39:71:5b:f4:6f:c0:02:a6:c3:
a0:96:1a:26:1c:53:0f:1c:77:b2:c9:3a:2b:ad:67:
5d:61:9e:14:96:3a:54:ce:ab:88:7c:c7:27:7c:1e:
46:73:8d:f2:4d:99:2b:37:10:d4:72:90:b4:64:09:
df:62:0f:74:08:c4:cd:16:bf:30:51:69:c3:59:99:
ae:a4:1b:5b:6e:a8:68:45:35:95:1d:60:46:ed:44:
dc:d1:d7:d1:3c:50:55:7c:00:70:ae:11:a7:48:8e:
2a:02:07:83:49:94:c5:d7:ac:7b:7b:bb:fb:ab:6e:
64:e2:97:31:c9:91:ec:7c:1b:a1:ee:5c:11:db:2f:
41:69:08:3d:3b:b7:92:29:a1:15:cc:06:af:8c:60:
4c:4a:65:34:d8:f6:cc:5e:1b:b6:17:74:8a:41:38:
5b:ff:14:68:5e:09:34:ee:7e:38:57:32:bf:68:79:
ba:7d:6c:fd:a8:bd:bb:1e:db:c8:df:72:6a:30:2d:
12:01:69:59:9c:23:ee:2f:6c:11:96:90:e5:78:dd:
d5:ab:9a:af:cc:7d:53:0c:e3:35:ba:e6:8a:50:f6:
3a:f0:95:bd:e9:d5:13:04:ad:34:55:05:28:42:53:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:37:D9:D1:C9:38:88:F4:8C:2B:6D:6B:B3:F4:96:9F:C3:2B:9D
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:aa:d9:79:e3:58:4c:0f:6f:ef:e9:b9:e3:6a:4b:4a:c5:
bd:c6:37:97:67:ab:04:e8:12:eb:25:a0:25:df:a0:22:57:86:
2a:a5:07:10:5f:cf:4e:5c:5b:3e:9a:06:d7:23:29:22:3b:d1:
41:b1:84:60:89:65:82:06:26:f9:82:3b:13:04:20:32:dc:26:
4d:d0:28:24:50:64:c0:f3:4e:9c:62:26:0a:92:5a:99:28:b5:
99:dc:0c:5a:ff:da:db:45:0a:ad:9f:dc:58:e8:ce:85:b2:88:
41:b1:9b:51:f2:77:45:55:fa:e2:c2:07:d2:08:ff:bf:d4:8b:
ae:7e:94:56:16:af:30:fb:3d:8c:94:28:b7:e2:6a:37:45:7f:
65:e4:cd:9c:1a:52:79:84:f1:9e:da:fd:c4:5a:0e:af:0e:52:
5f:16:44:a6:9c:87:87:62:17:63:d3:b0:33:8b:b2:b2:73:db:
b4:2c:c6:e0:50:4f:ff:06:b2:61:37:ac:e2:46:ba:9e:51:e6:
63:36:fc:3d:7c:dd:c4:38:4f:b8:c0:25:58:b1:0b:71:67:34:
32:d7:98:27:3d:b9:2b:27:c1:d7:a6:34:a4:80:a7:72:9d:fd:
e1:1c:af:aa:65:6b:c9:09:4b:f7:6a:64:d4:6b:0b:ab:7a:67:
5c:51:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:41 2026 by rpki-client