Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: ke6A1TQBMuFMBquMKiiebuJ+1bKNOA8wyjqMoWuM01s=
Subject key identifier: 32:3A:BA:1D:16:E6:A8:16:F5:1F:61:1F:4F:B1:19:D1:A8:30:BF:27
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019FA8D01CD7DB864FBD6300894D722E8039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:38 +0000
Manifest this update: Tue 28 Jul 2026 13:00:38 +0000
Manifest next update: Wed 29 Jul 2026 13:00:38 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: zWfeNnDWgPUpbBk7S7EufiVwZCXoXb5MFOajm+56CjM=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:1c:d7:db:86:4f:bd:63:00:89:4d:72:2e:80:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jul 28 13:00:38 2026 GMT
Not After : Jul 29 13:00:38 2026 GMT
Subject: CN=323aba1d16e6a816f51f611f4fb119d1a830bf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:65:08:5f:d4:ea:f0:88:1d:f0:d3:30:26:
64:70:ce:1d:ce:c7:7e:98:04:46:16:4c:87:bc:2d:
11:fe:1e:07:bb:05:40:96:17:ed:03:99:00:26:14:
b8:c0:83:7b:e4:89:63:0f:c8:eb:8c:13:64:5c:0e:
66:e4:0e:98:77:df:d8:fc:c6:4c:89:f9:b1:47:5e:
45:e1:8a:fc:40:0c:65:6b:e7:00:c8:70:03:3e:04:
83:7a:b3:9d:8f:63:5d:28:8d:8c:fd:3b:b5:be:38:
7f:d2:12:b8:90:6e:99:64:8a:49:59:c8:9d:51:29:
67:53:94:c6:40:fa:a1:56:69:cf:bd:81:b8:2d:35:
78:cd:dd:4d:64:55:da:09:c4:c6:b8:39:fa:b7:f7:
34:67:ed:d7:c2:c3:c3:a8:4e:af:f2:d3:72:ac:ae:
1c:e8:c7:d6:e9:43:fc:69:3b:4c:e0:e4:bf:90:eb:
9c:7e:c1:2c:32:88:66:26:f2:ee:3c:31:b3:f4:c2:
49:02:bc:57:27:d4:a8:ba:7c:38:98:58:66:22:14:
3f:09:16:d9:d7:6d:54:38:f3:f6:88:55:3a:c4:62:
fb:61:f3:55:e2:fc:9c:33:1d:6e:f1:e9:bb:54:60:
f9:55:d9:8f:27:c7:d8:8f:ce:30:eb:cc:a2:29:de:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:BA:1D:16:E6:A8:16:F5:1F:61:1F:4F:B1:19:D1:A8:30:BF:27
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:6d:b4:58:63:54:52:78:6a:ab:bb:82:f9:48:de:35:50:
a2:fa:f5:f3:b9:25:47:d3:08:17:09:89:4a:b8:f0:8b:cd:04:
cd:93:1b:fb:21:f0:e8:ab:d6:af:4a:4d:5c:7d:8b:9b:a7:cc:
2b:b3:9e:c0:c1:6e:7b:fd:1a:2b:54:f3:b7:68:95:75:84:a0:
45:ff:54:f8:a3:74:03:b1:eb:eb:d2:d7:a3:91:21:d0:8d:9b:
f0:44:e8:cf:79:1f:17:3c:38:8f:18:d7:27:bf:fd:a2:06:0c:
2d:42:68:e7:8d:71:37:26:5b:41:24:33:8d:0c:aa:4b:94:84:
c0:9a:33:f2:88:28:00:b7:a0:0c:13:ee:e0:84:2a:0b:47:c7:
27:e3:63:39:9f:b1:99:02:32:5f:f6:28:49:f9:7e:66:26:72:
a1:ac:be:89:b9:53:79:13:20:4f:0b:b4:37:e1:1d:a3:2c:7c:
95:ce:ce:2b:a2:57:b9:81:fb:dd:7b:8c:c3:bf:e7:c0:36:15:
17:de:92:5a:a8:49:26:e3:b9:18:56:da:d9:fc:1d:9a:03:46:
36:3b:2a:b5:80:f1:93:1d:90:ef:d9:c3:14:d7:88:25:61:6a:
cb:a7:f2:ef:a0:8d:52:c5:8d:60:13:43:5e:32:8f:8e:a4:62:
66:3b:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:42 2026 by rpki-client