Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
File: TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft (raw, json)
Hash identifier: 6LKGKK8Gx9JkBn6ymJD8sYKqiX39V+Mhk5J4/u3mly0=
Subject key identifier: B6:E9:C0:5B:1E:DA:DC:8A:5E:FE:3A:97:36:5B:F8:5B:6B:68:DE:0B
Authority key identifier: 4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
Certificate issuer: /CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Certificate serial: 019FAB2C929173F22091503EDC880F9C86CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
Manifest number: 26
Signing time: Wed 29 Jul 2026 00:00:52 +0000
Manifest this update: Wed 29 Jul 2026 00:00:52 +0000
Manifest next update: Thu 30 Jul 2026 00:00:52 +0000
Files and hashes: 1: J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa (hash: 9rcHA6YsVht5FpBD34N2HuiPufLi4hvOJBRxEbLFAAk=)
2: TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl (hash: xoDzYDKQuI+jYurALpKoWRUNvxW2SStTEg4MZTvb/+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:92:91:73:f2:20:91:50:3e:dc:88:0f:9c:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Validity
Not Before: Jul 29 00:00:52 2026 GMT
Not After : Jul 30 00:00:52 2026 GMT
Subject: CN=b6e9c05b1edadc8a5efe3a97365bf85b6b68de0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:50:7c:07:b1:03:21:b6:19:fa:20:09:91:
ab:10:df:6d:80:75:a0:54:5b:b6:f5:12:f1:0b:16:
33:92:82:68:07:59:9f:da:dd:ea:8f:07:0e:5e:bb:
26:68:a3:1d:f7:18:03:04:67:22:9b:5d:4b:02:91:
ef:06:e6:8e:1d:e7:85:c6:ba:73:81:56:0f:9d:7e:
c0:16:a6:4d:61:3f:a7:9e:de:fc:db:41:20:c4:9b:
28:db:18:2f:df:72:21:7e:1f:15:bf:8e:a9:69:22:
da:d6:88:df:5e:fa:98:ab:01:f7:e4:23:c5:c5:2e:
c5:ed:a8:3c:27:2a:14:6e:4b:97:e2:79:6b:31:78:
b7:a8:3f:76:06:3b:77:c1:b9:22:0d:2c:62:80:a9:
63:6d:ee:11:cf:e1:99:fc:52:1c:bc:42:17:6e:e4:
b8:69:65:8c:57:17:8f:d6:79:66:ec:8f:e1:bd:8e:
cc:8e:8c:20:51:ff:f1:fc:e3:ab:40:34:40:77:44:
e3:32:15:87:c4:c9:1f:ec:98:68:4b:54:f3:be:1e:
43:c0:53:d7:4c:f1:1d:ab:7e:0d:e6:78:64:e8:29:
1b:43:bf:e3:be:72:f4:7f:4f:14:b9:2e:88:70:0c:
41:3a:66:87:ca:e1:f8:69:ae:8f:f5:40:21:e5:18:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:C0:5B:1E:DA:DC:8A:5E:FE:3A:97:36:5B:F8:5B:6B:68:DE:0B
X509v3 Authority Key Identifier:
keyid:4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5e:46:3b:dc:ec:19:0d:e8:ed:0e:1a:e4:42:1c:68:6b:04:
3e:81:25:dd:eb:ca:a7:75:52:fb:98:99:59:27:0c:bf:c1:ce:
41:22:fc:2d:35:d8:0b:7a:b8:6f:33:40:2d:88:e9:0b:7f:48:
ae:6e:ba:5f:22:c9:cb:50:85:b6:37:bb:f5:13:9e:44:89:cf:
04:53:c2:f2:45:55:df:82:31:4e:72:3d:92:c6:0b:14:96:a6:
9b:34:03:d9:49:39:09:b4:fd:3a:22:ff:1c:3d:a8:f0:68:f1:
77:99:a1:4a:85:72:19:89:2c:de:c2:91:fc:e1:a0:67:04:69:
e5:5a:26:7d:c6:79:ef:b7:02:3d:64:3d:38:6a:55:db:32:99:
be:4d:c8:02:38:02:58:15:0b:91:8d:9b:e5:ea:3e:87:7a:71:
9d:0e:f0:94:ce:4d:48:06:c3:55:29:af:61:43:30:67:23:df:
79:fc:ad:ba:6a:78:de:1d:99:76:d1:4e:3d:25:a7:52:d3:ef:
d2:98:52:df:99:31:2c:b7:00:b0:c8:0a:e4:4d:da:ca:58:8e:
9d:07:39:9c:9c:27:eb:0b:a9:43:c5:5c:a5:17:e0:55:c5:10:
4e:ef:ed:29:da:77:7d:c7:a8:8b:56:99:d2:c9:f5:3f:9f:ae:
9e:c8:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:04:06 2026 by rpki-client