Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File: TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier: tRmIPhcW4mKFwLLAaOrjuevoEGLoMQSwsmTkUXgOxyo=
Subject key identifier: 69:B0:85:0A:F4:AF:82:FE:55:35:0A:61:14:65:59:AB:6B:E9:CB:8D
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 019FAD1A5F9294CB2E4C80983EB06289A0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number: 16
Signing time: Wed 29 Jul 2026 09:00:14 +0000
Manifest this update: Wed 29 Jul 2026 09:00:14 +0000
Manifest next update: Thu 30 Jul 2026 09:00:14 +0000
Files and hashes: 1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: 0WFdgRJuOe8vTJ0hyw/a5XIiQrN33kVO75BtXtC1mbc=)
4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:5f:92:94:cb:2e:4c:80:98:3e:b0:62:89:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Jul 29 09:00:14 2026 GMT
Not After : Jul 30 09:00:14 2026 GMT
Subject: CN=69b0850af4af82fe55350a61146559ab6be9cb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:36:f1:6d:d8:1e:ce:65:09:d7:a5:6c:cb:
59:58:80:15:b1:9b:d0:54:ee:d9:cb:3a:c4:ad:f7:
94:85:47:f4:4d:8f:3a:05:99:1b:f7:14:48:e1:14:
09:89:d1:ee:64:d1:de:fb:c5:fb:57:88:b6:b1:57:
b3:ca:a0:14:dc:7d:15:2a:ce:3f:37:97:19:5f:94:
d1:ab:71:2a:bd:0f:f8:90:df:2d:4a:b2:4d:68:ba:
30:9f:1b:c7:61:db:de:8c:2d:a5:0a:7d:19:cc:b7:
8e:e7:0a:5d:a8:42:e6:d7:87:18:73:4b:76:81:65:
0e:ec:97:f0:18:49:ee:87:a8:f6:ca:c3:6d:f3:0c:
d8:12:8d:6a:3e:a7:0d:19:f9:84:3f:a7:80:87:2c:
a2:cb:4e:e5:4d:28:97:c8:ef:f6:90:ef:96:cb:01:
96:05:4d:dc:85:d0:67:cb:d8:b2:43:16:c5:13:65:
2a:58:ae:62:9d:52:16:32:09:42:4c:da:37:fc:56:
2b:49:25:36:03:a1:81:00:b0:7c:98:46:0c:48:e3:
81:cc:3f:7b:1e:52:46:e2:e5:7a:16:cb:59:56:99:
a8:8c:53:eb:ed:a6:19:0e:e5:c4:f4:2e:72:a1:80:
93:38:cd:b8:97:72:4a:93:85:a9:01:54:f0:18:91:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:85:0A:F4:AF:82:FE:55:35:0A:61:14:65:59:AB:6B:E9:CB:8D
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:dc:8d:c2:21:11:bf:66:db:f6:f5:dc:9f:43:95:94:2f:
72:c0:da:b0:17:fa:3d:a5:34:18:c8:a1:69:af:54:9b:4c:b6:
ea:e2:58:af:20:3f:a3:c2:ca:e9:40:13:d2:d2:b3:3c:62:2a:
7a:83:b5:7e:b8:01:2b:25:24:3d:58:70:74:94:88:cb:69:e4:
f3:86:ec:a7:1e:2d:30:2b:a6:b5:2e:f0:4f:b1:12:99:14:bd:
35:91:80:ad:7e:7c:f6:ce:eb:12:cf:0a:4d:0c:a6:3a:5f:49:
5a:02:d2:36:63:39:98:1f:4a:a0:74:3a:fd:60:39:25:13:76:
c8:af:6b:e8:8a:48:58:90:84:91:87:27:0b:21:f8:30:23:2f:
f7:58:ae:f4:fe:4f:58:92:6c:5f:9d:b6:1c:0e:4f:aa:36:2c:
90:09:59:e1:77:e7:6b:f8:b4:8f:25:c4:5d:80:c1:6b:43:48:
8a:e0:1d:05:6c:60:69:63:98:62:62:2b:b8:c3:2d:01:4c:b1:
95:27:00:d9:b7:f3:77:4a:4a:f0:b0:2f:60:76:a1:d2:c4:a6:
44:d7:76:cd:e6:03:9a:cf:0e:b1:c7:18:2d:d8:11:c7:cb:97:
16:da:a0:bd:62:db:1c:5c:d3:36:4b:ac:d3:f3:f2:9f:92:04:
11:32:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:00 2026 by rpki-client