Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: NMZrIBV/ugDAHQIXnZr7aB3vsBG3ZcT/qUQQ9Fb2zOQ=
Subject key identifier: 84:8A:EF:E8:FB:6B:F7:55:30:FF:31:74:BF:AB:AA:EA:B8:CF:94:53
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 019FAA886F3C6BED75D3AF3A43DCDD4B40A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:35 +0000
Manifest this update: Tue 28 Jul 2026 21:01:35 +0000
Manifest next update: Wed 29 Jul 2026 21:01:35 +0000
Files and hashes: 1: DaA_4Jlo0vCjiqyQ9Zy7aoC9TDs.roa (hash: xtXG2aAxB/H8VWm8zgz3IAcnfc0DerNKgS8NAIUzC58=)
2: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: qKCyjsvRwfaA5pRz9SAhYuWe9lzB4Cwh48d68TYRcZs=)
3: pYetnom_wA_ScRV12GudzaQxL8Q.roa (hash: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:6f:3c:6b:ed:75:d3:af:3a:43:dc:dd:4b:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Jul 28 21:01:35 2026 GMT
Not After : Jul 29 21:01:35 2026 GMT
Subject: CN=848aefe8fb6bf75530ff3174bfabaaeab8cf9453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:1f:c8:95:cf:c7:ef:f2:ab:bc:1b:a3:bd:
f5:d1:b3:fe:20:1d:2b:7c:bc:16:60:c1:12:c3:2f:
6a:be:0d:ea:41:2a:52:27:0f:a2:12:ce:1c:7a:ac:
52:c0:7c:c8:8e:d0:23:60:a9:cb:2e:d6:47:7a:e7:
ad:b1:06:a8:31:86:f9:bf:1b:26:4b:7f:16:42:72:
a6:66:1f:5d:2c:7c:1a:26:bc:be:dc:d7:e0:f7:cd:
97:8c:55:a9:d5:03:20:9d:ff:1f:41:d5:0f:6d:57:
fc:14:95:43:ba:01:10:2e:a8:65:4d:b8:5f:b6:7a:
ff:4c:e2:3a:2b:aa:39:ab:13:54:ef:14:48:ac:1c:
84:f2:f9:5b:f6:50:3c:c4:ed:3b:9f:0b:99:e0:f0:
d8:67:fa:27:82:00:2a:d8:b7:a1:e7:17:02:10:42:
3c:db:64:ab:23:76:57:b2:12:83:56:25:3c:e8:47:
89:d4:1a:63:45:9e:92:cc:d0:a0:10:ab:a9:3b:a8:
3b:8e:8f:cd:4d:f9:6a:7f:ff:1c:1d:12:55:04:ef:
d8:ef:bb:18:76:51:66:56:41:7f:55:db:8c:47:20:
1e:7f:25:54:17:32:0b:e4:50:53:d8:bf:eb:88:63:
0c:4a:71:82:55:f0:9c:dc:7e:ac:30:c4:ca:ba:65:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:EF:E8:FB:6B:F7:55:30:FF:31:74:BF:AB:AA:EA:B8:CF:94:53
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4d:97:75:15:2b:e7:98:5d:62:0b:52:86:a5:b3:8e:ed:98:
05:4a:c7:87:4f:c7:17:d5:bb:17:67:2b:39:fd:6b:d8:00:ce:
84:f4:0d:d1:c4:d9:45:e3:2b:7b:83:23:3a:d1:ab:3a:f1:83:
73:0e:19:d4:e0:b1:a8:dc:88:a9:2a:9e:d1:e6:9f:98:fe:93:
3c:93:cc:73:35:be:68:18:d8:2b:a0:af:95:e7:c1:40:eb:7e:
b6:5e:1d:f9:70:cd:d6:94:3f:97:97:39:da:52:6b:c8:b6:33:
c6:a2:a9:1a:ee:76:b9:2e:35:b3:f9:b1:f9:63:31:63:a5:9c:
2e:9d:06:db:96:3f:34:bd:2b:c5:8d:ad:03:e3:9d:5b:1f:47:
8f:e3:b0:ec:79:75:05:40:24:b0:58:8a:ac:99:6e:66:05:e1:
50:58:85:e4:c9:12:61:34:74:52:ce:04:73:dc:59:ad:72:d6:
c6:c8:ac:f9:3f:81:3c:c5:ee:f7:79:17:21:bf:dd:f9:62:d4:
2a:85:1e:e6:9a:8b:12:2d:58:57:35:23:14:26:b6:4c:c9:0d:
5b:2f:43:ee:49:be:6e:da:24:85:5e:c5:d6:b3:ef:2f:8c:db:
59:ac:03:12:d9:c9:60:c0:57:98:20:9f:85:db:c0:84:6b:c9:
38:ae:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:39 2026 by rpki-client