Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: C4T4i+AaoAAhGKn6iA9aBEZv2lhjXJ4ZjB5WfYawPdA=
Subject key identifier: 8D:0E:EB:A8:86:80:3A:27:1F:CE:EE:CC:29:8B:02:E0:E7:B1:65:A9
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 01A0D6826F5AC4F33BC031E371B6D6703C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 19C5
Signing time: Fri 25 Sep 2026 03:01:07 +0000
Manifest this update: Fri 25 Sep 2026 03:01:07 +0000
Manifest next update: Sat 26 Sep 2026 03:01:07 +0000
Files and hashes: 1: Js7glNIVHR31KzAH-Y9le6lg8Gc.roa (hash: 7RXrZN2yFu7MFj+qcU08ae6A+XIej9sHLn+Y/9HM9Vs=)
2: NXEJCiLPkkdBY9NTGhgdROtpXxc.roa (hash: UlDG/6GGWJgKzbG+s5oTy9rF68mX0nNsKBfB2sUaPZc=)
3: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: 1nr34kNzLHUcM/a3Cl7KI8Z0Mtfwy4JNVGaasRBevLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:6f:5a:c4:f3:3b:c0:31:e3:71:b6:d6:70:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Sep 25 03:01:07 2026 GMT
Not After : Sep 26 03:01:07 2026 GMT
Subject: CN=8d0eeba886803a271fceeecc298b02e0e7b165a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:96:4f:bf:14:a8:ca:2e:db:55:72:b9:9c:
22:e7:ed:c7:df:ec:5a:7d:c9:b1:51:8d:74:78:cb:
70:8b:a6:e2:6e:70:bb:43:d0:7a:37:b0:15:81:24:
f6:55:c7:31:a5:18:d1:2e:99:4e:f4:7b:06:fc:84:
ad:39:42:37:e4:a7:cd:d2:83:4e:af:b2:b4:cd:68:
97:27:5d:78:44:f5:88:90:c3:5a:a7:71:22:82:29:
d2:a3:25:f2:8e:f9:74:3b:71:6f:02:b1:12:77:f5:
61:8a:66:f0:00:60:4c:df:6a:8f:68:7f:e6:83:d6:
ff:3b:e4:24:59:0a:24:d4:fb:f3:4a:0f:b6:f1:3f:
a8:52:f3:3d:da:2c:ae:92:22:1c:c6:1e:eb:f5:4a:
6c:8a:3a:1c:18:7e:01:b0:d6:e3:25:da:4a:da:85:
99:66:d9:f8:e4:d8:c3:03:de:70:4b:ae:f8:af:21:
62:b1:bd:0a:e8:f8:92:09:f5:4e:08:1c:4a:ee:51:
d5:39:24:fa:ee:98:ee:f9:e8:80:2a:c6:75:a2:fb:
24:31:89:39:11:2b:d0:72:6d:4b:f1:3a:28:d9:2b:
bb:bc:71:cd:bd:df:c3:aa:d9:4d:8c:8c:6b:d6:99:
b3:bf:fa:3e:1d:52:e4:a7:1f:31:04:9c:f4:bd:e7:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:EB:A8:86:80:3A:27:1F:CE:EE:CC:29:8B:02:E0:E7:B1:65:A9
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:33:ef:3c:e1:18:a3:49:6a:9e:5b:78:8a:c4:e6:92:f7:
15:1e:38:6c:3f:3d:d4:99:7a:96:5c:61:dd:de:25:53:e6:e5:
4e:6b:84:91:ef:2b:b4:4d:9f:8b:21:36:4e:9a:7a:e2:af:49:
cd:59:65:38:87:0f:86:54:3f:76:da:1e:80:7f:77:f7:4f:4f:
1d:5e:0f:2c:f7:4c:1e:8b:ce:27:69:35:29:59:bc:d4:f6:55:
b9:0b:29:23:11:99:6e:17:9e:70:6b:97:38:94:76:29:ca:5a:
8f:41:a7:7d:c8:ca:40:9a:41:a3:ac:e2:1c:d6:ea:67:99:60:
25:e4:37:97:9f:90:89:a3:b9:59:23:60:96:0f:bd:de:0d:39:
34:6e:d5:c4:e7:7b:a5:cb:7b:b5:b7:ad:3b:5e:d3:b9:c6:9b:
9f:fb:53:9f:42:a4:59:4e:c6:1b:9f:a3:4b:57:51:90:d0:7e:
ba:6c:c1:45:ce:ef:d7:f2:4a:9b:19:35:0a:08:ac:97:64:dc:
fe:ed:4d:21:6b:7b:a8:f3:19:15:49:86:c4:59:0a:6a:30:e0:
8c:a9:b9:23:1f:3f:62:b9:23:c8:b3:b1:c7:e2:e0:b6:97:e4:
b7:b3:cd:89:37:1d:a2:d4:5d:9d:25:d6:b0:8f:35:da:1a:d1:
87:3a:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:26:11 2026 by rpki-client