Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: 2R9YcGqgXI8HGIqpLrvH+gJ6zRorgCzgKelHVEDNb6U=
Subject key identifier: 21:5B:09:78:F9:84:7D:4F:01:02:72:7D:E6:E7:05:B8:4E:D6:72:AF
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 019FA7BD43B499373252A841CF3DE0DBB3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 08:00:26 +0000
Manifest this update: Tue 28 Jul 2026 08:00:26 +0000
Manifest next update: Wed 29 Jul 2026 08:00:26 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: t/EPiHStg3N1DVk1bTwjXI+N7fvp/k6ZXCvrs6mqVa0=)
3: Xb_xBMYO16QsavZuo57UMH_pTFY.asa (hash: pTF5yNZXnsPsUoT0zDPJu+l24+9PSGN9YfP8M+7/BDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:43:b4:99:37:32:52:a8:41:cf:3d:e0:db:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Jul 28 08:00:26 2026 GMT
Not After : Jul 29 08:00:26 2026 GMT
Subject: CN=215b0978f9847d4f0102727de6e705b84ed672af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:0a:b3:40:ab:fe:b6:db:c8:d0:cf:6e:a4:
87:6e:64:c6:a5:77:22:c3:91:6b:a4:87:88:c1:32:
a6:90:cb:42:28:ca:3d:0b:fb:76:d6:94:4b:46:d6:
e4:e8:e7:7d:7a:d0:b9:f4:78:35:dd:fd:9b:fe:35:
d7:4e:e1:fc:78:f9:40:09:3e:96:24:a4:ae:d9:cb:
d0:c4:85:23:5f:5e:9a:fd:ea:fc:c3:e4:69:3f:ba:
9c:7e:a7:13:ba:b0:70:e6:5e:f0:aa:f5:9e:2a:a4:
07:79:0a:72:85:85:06:67:81:9f:1a:73:cb:79:90:
a9:42:a5:e1:27:c5:35:e8:07:e5:4e:8b:bc:28:06:
73:ea:c1:7b:f3:cf:69:ff:50:b5:86:9d:ba:3a:66:
21:66:25:ec:c3:1b:6b:7e:1c:66:61:30:0b:a9:46:
11:92:ff:6b:e6:52:d7:71:ac:c2:87:0f:0d:03:97:
47:f4:51:2a:fc:a4:37:82:81:93:e9:7a:60:3f:a5:
d6:aa:f3:ba:97:96:3d:20:eb:f4:aa:7b:cf:2a:0b:
c8:3c:81:bf:64:d2:3a:1c:83:f9:00:40:d5:e1:23:
5b:c5:a3:2d:c6:36:86:63:e1:88:39:b8:0d:41:9d:
a3:fa:a9:0a:ab:c2:1f:61:4c:f9:54:cf:2c:3f:a4:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:09:78:F9:84:7D:4F:01:02:72:7D:E6:E7:05:B8:4E:D6:72:AF
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:18:2f:27:6c:80:25:06:87:53:d0:65:09:0c:7b:a4:f8:
26:33:40:73:2d:86:00:d9:44:3a:bc:5d:38:c1:51:b5:a3:ea:
f8:97:7b:b9:93:9d:a4:1f:f8:5c:90:2a:bb:73:86:84:72:ce:
f8:3a:90:8d:45:42:41:78:67:7b:d7:3f:00:b0:f8:be:7f:dd:
9b:de:1d:c4:c7:57:c0:2a:ce:4a:6c:39:db:27:9d:c4:ca:3c:
58:7a:fa:aa:67:58:78:4f:4d:b1:6d:80:96:38:90:0d:7b:5c:
bc:2e:de:9f:7a:c4:08:ce:58:16:ea:a9:af:8b:b2:2d:e9:1e:
97:83:74:5f:ec:e1:95:f1:03:1e:4d:61:95:93:b6:99:84:6c:
c2:e8:bf:be:d9:a5:f2:ea:5f:fc:b0:c8:d2:1b:1b:cc:b3:38:
17:20:d2:09:18:21:ab:f0:d2:ad:99:7f:ea:86:20:f0:d4:0b:
ed:2b:83:21:40:2f:7e:d1:bc:71:00:f3:46:d0:34:8d:d8:e7:
76:bf:5b:aa:77:58:9b:d1:d9:7e:15:1f:71:81:f2:1c:3d:95:
60:e4:5f:5d:ca:c7:38:23:d8:0e:99:b4:6c:73:36:25:c2:de:
44:99:2e:e2:1e:6a:af:d9:45:43:32:42:f9:46:d4:f9:40:18:
c4:0f:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:39 2026 by rpki-client