Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
File: TsTzl1j2BWug1JKloEudaGbGApI.mft (raw, json)
Hash identifier: zAQBU94NpRYcPL8oEtnOtEKa8F2+vSp5eUSQlr5OhzM=
Subject key identifier: F8:94:D6:7B:97:30:02:ED:5F:CE:33:21:D9:81:45:58:2E:45:F2:F2
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 019FAA87C37994D4906FC154D2387D1EADCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:51 +0000
Manifest this update: Tue 28 Jul 2026 21:00:51 +0000
Manifest next update: Wed 29 Jul 2026 21:00:51 +0000
Files and hashes: 1: HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa (hash: m3qcvytC4O+9pABPedPudw1QdoZyvWEqd2L9LP+DeoM=)
2: S8ku3gf4vWkmxFBDkBkEiAy9So4.roa (hash: DxiREQgQfDk48dsaRbdhgiH4PUmwi+B75L8QRMAKRYY=)
3: TsTzl1j2BWug1JKloEudaGbGApI.crl (hash: jC1wu7jFeYCmORBscZ5Fji6o+ME38nneV9rrySAz71U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c3:79:94:d4:90:6f:c1:54:d2:38:7d:1e:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Jul 28 21:00:51 2026 GMT
Not After : Jul 29 21:00:51 2026 GMT
Subject: CN=f894d67b973002ed5fce3321d98145582e45f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:93:b4:2d:7a:0f:18:04:da:6d:78:32:6b:
75:de:f0:0c:40:63:67:d5:cf:68:c9:fa:29:89:09:
b4:bb:2b:90:73:36:ae:82:ae:d1:96:6b:d8:0a:15:
4d:10:7a:1f:9d:e9:81:93:a5:ce:c9:e2:68:b5:9a:
a2:d2:db:9a:57:bc:ff:5b:3b:13:81:10:db:ce:41:
97:bc:fd:d2:8e:b7:ea:0c:85:97:bb:62:6c:db:0b:
3f:99:c2:e1:16:74:d0:02:ba:73:bb:fb:e7:be:b2:
06:3c:c3:c9:7f:70:ab:af:23:63:5a:ed:75:cc:77:
f7:6f:56:f4:34:67:24:06:43:8f:24:d4:cd:25:db:
63:35:87:af:21:5d:35:9f:09:2f:9b:96:4b:ae:c8:
1a:5f:4f:08:05:65:8d:94:98:7b:fa:a4:08:15:50:
9c:f0:31:59:d7:1d:bb:af:f6:0b:93:44:61:6a:fe:
c9:fa:0f:49:a3:ef:b2:e0:c9:7e:32:c6:0f:ad:89:
55:9c:fb:d6:1a:20:75:dc:05:f5:ca:00:df:df:a5:
7e:76:f0:bb:32:9d:ef:c1:24:b4:f7:b4:09:4a:d7:
79:84:c4:e3:bf:c8:8a:68:ec:8e:9a:43:68:be:fb:
49:af:58:0b:73:ca:26:9c:65:8b:90:9f:40:d9:06:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:D6:7B:97:30:02:ED:5F:CE:33:21:D9:81:45:58:2E:45:F2:F2
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e3:20:c9:92:68:03:e0:bc:05:01:aa:e4:d3:33:ce:aa:d8:
43:78:3e:07:ee:87:be:fd:93:61:a3:61:c4:12:7b:32:56:59:
b9:27:97:ec:c2:d0:39:87:18:dc:0a:e5:1a:82:05:2d:93:8d:
fd:75:2f:98:9a:38:b4:0a:31:0f:2f:9a:70:ea:5c:16:b1:2a:
ce:3f:89:37:e8:23:01:87:fc:d4:2a:b6:f9:53:bf:96:90:33:
f6:35:bc:95:5f:fc:ba:3d:89:da:0a:aa:45:ef:e0:bb:64:54:
2f:98:96:2a:a7:5f:1b:73:4b:d5:be:25:17:e9:24:f8:4f:9a:
0e:b8:f5:5e:58:77:a3:38:f9:9a:5a:f3:0c:d6:74:9e:ac:9c:
6a:06:cb:7f:d9:b8:65:32:d1:39:4e:98:3c:91:61:83:10:8f:
d9:a1:13:1c:32:85:2a:21:d5:79:5a:12:b7:9c:ac:08:78:35:
92:c2:0d:b1:72:54:97:3d:9d:b2:bd:40:f8:1e:87:76:80:5d:
1c:77:7f:00:e3:d4:db:d5:83:b4:f9:7e:23:b9:38:05:6a:f9:
f7:f1:09:fa:7e:25:7d:9a:92:09:1d:00:37:ee:f7:a7:90:a1:
ef:23:3c:0c:4b:eb:81:99:28:91:b3:81:45:f5:22:7e:53:7b:
c2:aa:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:23 2026 by rpki-client