Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: 1dejUsfEQlyUPQTlmxvgAqVfO4724qCU4fO0NYdZrEw=
Subject key identifier: 00:50:D2:9A:BA:7C:E8:71:35:01:78:1F:B3:84:D6:57:3F:A7:23:C9
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 019FAB63CE3252B81DF55FB46DDE79BB632B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 01:01:12 +0000
Manifest this update: Wed 29 Jul 2026 01:01:12 +0000
Manifest next update: Thu 30 Jul 2026 01:01:12 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: PYjtLMC/iPzHiyyCTQnKPCSpO+Sz6AeXDGdZ6VUpb5Y=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ce:32:52:b8:1d:f5:5f:b4:6d:de:79:bb:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jul 29 01:01:12 2026 GMT
Not After : Jul 30 01:01:12 2026 GMT
Subject: CN=0050d29aba7ce8713501781fb384d6573fa723c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:d0:04:45:cd:82:8c:6e:d0:b5:d8:7c:d6:
10:19:95:ed:e4:84:b0:a4:21:a6:ef:87:8e:d7:d9:
d5:20:61:bd:b0:31:b9:7d:eb:b4:7d:85:d3:65:6c:
a0:a2:e4:66:df:36:55:1c:38:5f:e9:88:4c:1f:07:
1c:f6:c3:31:ff:18:b2:ba:0c:f7:20:be:74:fd:bd:
33:c2:bc:49:25:c8:49:51:2a:c2:70:c1:58:25:a5:
0b:99:ff:40:a1:0a:eb:f2:94:32:ad:b5:f6:7d:ea:
74:ad:da:3a:92:26:7b:bd:8d:cf:72:70:9a:89:11:
4e:77:a8:e8:e4:a0:2c:a1:bc:c8:7c:99:ca:27:b8:
91:94:d7:31:d6:49:2f:3f:97:ee:01:bf:05:48:78:
ba:02:e2:a7:ec:fa:d1:a4:4e:db:a4:48:08:5f:8d:
15:74:e9:a6:c3:d3:dc:9a:32:73:25:a2:45:1b:5c:
20:ea:5a:bf:6d:41:d9:e5:d7:5b:5b:3c:06:59:05:
ce:bc:78:ec:ad:94:f1:84:1d:86:10:03:83:9d:45:
2d:d4:b0:b5:44:d0:5d:e5:e4:2a:04:10:24:ab:f3:
1f:81:13:1d:a8:21:16:98:d8:e9:85:09:ec:eb:87:
94:8d:d6:60:b0:f1:b7:3f:30:af:83:89:84:03:a3:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:50:D2:9A:BA:7C:E8:71:35:01:78:1F:B3:84:D6:57:3F:A7:23:C9
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e1:be:7e:10:26:7e:b2:64:b9:d5:6d:cb:c2:d8:8f:28:27:
09:e7:00:d9:99:6c:c6:68:24:95:90:0f:fd:8d:5d:1f:0d:e8:
d9:99:71:b1:ab:a6:23:4a:e2:1e:a2:ff:85:68:37:f0:e4:bd:
d2:a6:89:cd:12:6d:41:77:1c:9d:dd:ac:fd:55:60:cd:c7:7e:
41:c3:63:70:23:56:72:fa:66:0f:5d:37:8d:c4:d1:91:7e:66:
86:55:df:01:74:32:0d:24:48:c6:99:5f:65:1e:2f:68:a0:b6:
5a:7c:f7:fa:c1:a3:e9:bc:dc:2e:2f:93:41:fb:94:b1:0f:a2:
81:d9:59:12:68:8b:00:f5:b0:85:bb:83:be:71:26:6f:9c:8d:
56:cf:6a:d8:2e:18:a7:ac:51:99:d5:a4:78:cb:95:ba:1f:21:
0e:a3:77:2e:33:cf:1d:4d:0f:9f:16:ac:c0:85:7b:f1:52:04:
13:0d:04:76:19:76:94:4a:84:78:5d:3f:07:cf:4d:87:10:13:
b0:fd:7c:5e:1a:8a:31:3b:f4:a1:ce:f1:4c:5d:9b:77:24:03:
4f:bc:fe:a3:aa:e3:05:01:2b:b7:bb:03:db:55:42:27:4f:b6:
6e:ce:00:24:18:8b:36:bb:24:7a:46:bb:b3:00:a0:ab:0a:7c:
be:e7:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:42 2026 by rpki-client