Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: nB0AGAXEEHRQZYz9/VWCIziQknSTguXEx3ZJaklpHmU=
Subject key identifier: 85:2B:F7:00:2D:14:5B:CB:62:58:52:69:87:A7:30:9A:C0:CB:72:5C
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 019FAD888E75B123D1E78FC6BFE9F8940E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 11:00:35 +0000
Manifest this update: Wed 29 Jul 2026 11:00:35 +0000
Manifest next update: Thu 30 Jul 2026 11:00:35 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: nMcMzi0KcUuV4Jv8QITYRDNsZ/ABpja0SvK9hx4Cu1k=)
2: pBnqzIAytKpHQhX8QDpU_OY1RKw.roa (hash: pra/+hq5WQ/StXcBlep+m5KO06sTkTgn3LjOqqbBjzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:8e:75:b1:23:d1:e7:8f:c6:bf:e9:f8:94:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Jul 29 11:00:35 2026 GMT
Not After : Jul 30 11:00:35 2026 GMT
Subject: CN=852bf7002d145bcb6258526987a7309ac0cb725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:cc:10:49:56:f3:d5:8b:1d:ad:f9:fd:b2:
24:2a:3e:ac:bd:62:88:9d:ab:b3:40:53:d6:22:ff:
11:83:03:72:b8:56:9c:cc:0c:f3:a0:d9:37:11:df:
5c:f0:20:79:13:7f:ff:a5:fc:6b:4d:f9:d9:06:3b:
20:dd:bf:56:3b:85:bf:8f:5d:83:e3:01:d1:d6:40:
91:52:ce:b7:4d:da:71:a4:98:4c:aa:55:60:16:f4:
51:4a:11:bc:41:38:f8:cc:a0:36:54:e3:b3:24:57:
4c:92:81:9d:02:be:cf:04:b8:80:a3:05:34:f5:09:
eb:cb:9d:7b:bf:fc:3d:d7:d2:26:b8:04:8e:08:7a:
de:99:bc:b9:cb:e5:87:38:b4:fd:ed:fd:39:2e:f1:
17:b9:0c:e1:be:7d:e5:7c:3c:be:a9:97:4a:19:3a:
a8:c7:68:24:1c:e7:f0:02:fc:33:40:d4:0b:f5:5d:
15:7c:61:61:46:a8:1c:81:95:99:7f:7a:19:5b:b0:
60:de:e4:71:63:9f:91:7f:fd:d6:47:9a:0b:40:a1:
fe:e3:ef:27:d1:6a:6e:78:5e:ab:f2:2d:87:23:d6:
ae:90:41:51:41:24:d7:81:67:41:f7:d4:33:40:18:
2b:f1:49:ae:49:a3:df:10:e7:a5:49:f9:b4:1b:5b:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:F7:00:2D:14:5B:CB:62:58:52:69:87:A7:30:9A:C0:CB:72:5C
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:f0:c7:4c:3c:b0:8b:16:38:71:f8:dd:3d:aa:47:c3:b6:
c5:a8:dd:3a:f8:e4:7a:71:e1:f0:a6:51:c5:4c:59:1a:0d:dc:
73:4a:e7:37:98:33:df:8b:ca:5d:0d:bc:da:96:81:a7:6a:c1:
d6:da:d9:b0:ef:fc:14:7b:f8:af:01:d5:59:b8:99:a0:0a:54:
0e:f2:3a:6c:7c:34:50:7b:09:9e:fd:a5:86:cc:aa:21:d0:99:
0a:88:68:5e:cb:2b:f4:ae:47:1b:aa:cf:55:89:c6:20:29:cb:
71:01:ec:f0:41:83:b1:64:9c:0b:35:e2:ee:9d:5c:f5:fe:30:
7f:ad:08:d0:80:48:19:bf:f1:1b:68:eb:f8:fe:da:95:38:56:
3a:e5:a4:b3:b0:55:77:5e:f5:ef:2b:80:73:b0:5b:28:d7:17:
86:e0:d7:19:bd:99:7d:44:da:61:13:97:dd:39:af:58:c5:ba:
c7:2f:19:9b:51:6f:b3:06:0b:7f:9f:c9:2d:03:a8:20:ee:2e:
01:f3:2d:6a:15:1e:a6:7c:9f:e4:5d:7c:5f:a5:bb:bd:22:5b:
4b:95:81:d5:e7:da:62:b9:96:d5:0a:2f:2a:94:95:20:f1:f4:
da:ed:e3:75:48:b1:17:31:08:a4:09:78:aa:21:f7:b5:25:47:
f6:3a:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:16:36 2026 by rpki-client