Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: DAzNGhkMo3eXjrHucah2j4O+w+eJxEparHpx8h1bgzs=
Subject key identifier: 42:01:25:FE:39:3F:57:32:9C:6C:C3:64:8D:09:89:65:F1:80:32:46
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019FAC763B74706CF26FE852F0B90395000B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 06:00:57 +0000
Manifest this update: Wed 29 Jul 2026 06:00:57 +0000
Manifest next update: Thu 30 Jul 2026 06:00:57 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: bZ8vNZH8BCCWwEfbOhVByUaudz6eSZC0eWsFcUcfdeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:3b:74:70:6c:f2:6f:e8:52:f0:b9:03:95:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jul 29 06:00:57 2026 GMT
Not After : Jul 30 06:00:57 2026 GMT
Subject: CN=420125fe393f57329c6cc3648d098965f1803246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:af:b4:d7:19:f9:84:62:d4:31:5c:31:01:
58:fe:31:4e:c9:47:ad:66:fd:40:4c:0c:2e:fb:92:
78:45:3f:e8:68:8b:aa:b4:58:e0:c6:14:71:76:0b:
6a:a2:98:66:d8:63:e0:56:1a:86:6f:16:8a:98:04:
e3:c3:4c:ff:07:aa:7e:11:09:f7:82:9e:f4:3e:d2:
d7:3b:ab:82:fc:26:4c:67:2e:1a:ed:44:67:7e:32:
05:12:40:22:e9:9c:10:b6:4d:2d:78:0d:80:ce:31:
8d:e5:a4:97:ff:93:44:0e:df:e6:19:e3:ad:2b:0c:
b4:fd:0a:3a:88:30:15:ae:eb:ef:11:a3:82:90:e9:
fa:08:ae:b1:a5:a6:c5:a9:42:f5:01:9b:aa:78:31:
1d:b6:1b:66:7c:f4:36:3c:3e:88:c7:33:f0:d6:47:
0a:6a:96:03:a4:51:d2:28:3d:cc:ab:b3:3b:61:ca:
65:54:cc:e4:40:84:ab:10:3c:b6:ca:d7:34:78:3d:
fa:9c:91:69:a0:cf:ee:32:fe:e2:6c:6a:81:56:23:
23:09:3b:7e:7e:9d:3a:07:b7:b6:80:ea:6c:f2:8e:
a3:fc:dc:6d:08:4b:bd:4e:b1:93:a9:df:83:3e:31:
19:01:46:8f:7f:fc:7f:cd:36:08:dc:0c:24:62:c2:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:25:FE:39:3F:57:32:9C:6C:C3:64:8D:09:89:65:F1:80:32:46
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bd:fa:88:f9:41:17:f5:fe:fe:8c:21:6a:c6:48:70:33:a7:
07:65:75:ce:a5:4f:1a:c5:41:f0:98:cb:b1:9a:97:6e:94:cd:
81:d5:58:1b:c9:07:cc:a0:37:a4:04:7e:12:14:a4:57:13:8b:
aa:93:a2:44:f9:96:b3:35:f3:95:4c:d2:dd:c9:95:96:fb:84:
ba:e1:ea:5a:17:3b:34:1c:74:f0:7e:00:69:64:a1:b8:fa:45:
c2:c6:6a:5e:77:5b:1d:13:33:61:15:b9:4a:c2:2e:9d:73:2c:
82:e5:de:cd:46:81:7a:0f:06:7c:42:9a:09:53:9e:b1:68:dd:
68:d2:a6:94:30:81:3b:c3:ed:d1:30:7d:e3:92:ce:c3:85:16:
9f:7f:a2:c4:60:f0:44:7d:22:fc:fa:6e:ae:e2:4a:22:07:94:
7c:da:9c:ab:a3:01:3f:3c:7e:f3:83:5a:fe:a5:0d:8d:dc:1c:
34:da:79:7b:b2:7c:dc:b2:8e:3d:72:9e:87:ee:76:47:8f:77:
06:b0:f2:2f:da:16:78:41:21:cf:21:15:3e:7f:81:a6:96:59:
81:7e:c5:fe:30:a8:a2:ea:42:ba:aa:69:d8:92:1b:14:7a:ce:
49:43:95:dd:92:9c:57:f0:f5:9a:5c:74:75:a7:07:69:d9:d8:
12:78:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:20 2026 by rpki-client