Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: xXRXQWNAgg+RDNPxY0QlhByGThdMCuTjDIGwHbLJsFw=
Subject key identifier: D5:85:99:5E:A5:D2:51:7D:48:F4:2E:8A:D5:2E:83:6B:C7:05:01:9E
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 019FA9ABF1DF6CB362EE1F2C69F9B25142A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 1005
Signing time: Tue 28 Jul 2026 17:00:45 +0000
Manifest this update: Tue 28 Jul 2026 17:00:45 +0000
Manifest next update: Wed 29 Jul 2026 17:00:45 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: KLAHz4b8lkCbF6E7wQQGZldm/6hLGK5EinLH6lXH3BU=)
2: if79kuvwD_kMklv-rjGuATeymik.asa (hash: NqixgtAGzUBisDt8U3Oiw2PBnZVG/SzSQ5d4+iMf5Og=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:f1:df:6c:b3:62:ee:1f:2c:69:f9:b2:51:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Jul 28 17:00:45 2026 GMT
Not After : Jul 29 17:00:45 2026 GMT
Subject: CN=d585995ea5d2517d48f42e8ad52e836bc705019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:45:23:43:46:38:61:59:51:c5:cd:80:c2:
30:85:da:f3:23:fe:54:b6:ad:bd:db:d3:09:0b:ae:
2e:2f:03:1a:47:32:8e:d5:59:d5:21:68:07:ae:b4:
8a:b6:93:c0:02:5e:76:44:30:14:37:f6:69:3d:1d:
d0:87:67:30:fe:f6:29:92:70:8d:5b:fc:a5:90:14:
b6:42:b5:5b:73:88:78:c3:ae:a5:20:89:a5:b6:14:
a5:e1:e3:bb:b8:83:b9:7b:17:25:57:ff:18:61:52:
c3:93:d3:93:ad:57:bf:0a:1e:e1:0a:f3:fa:2a:26:
7a:2e:63:86:58:26:8a:e3:07:9e:a0:5f:b3:4c:1a:
73:79:d8:af:9d:6a:b4:a3:a1:64:ee:df:d5:56:81:
a5:6b:67:2f:cf:63:6f:71:47:3a:3d:2c:ad:2e:26:
18:df:ca:af:53:28:ed:a3:03:75:d4:7c:66:4f:ec:
22:96:1b:e3:0e:c8:93:42:17:66:1f:5f:a5:27:55:
72:3d:49:69:5e:c1:87:d3:8a:85:f8:23:8c:f5:3d:
02:39:79:a7:ae:bd:4f:a7:17:84:0b:b5:61:23:b6:
5c:14:a4:44:12:d6:22:6f:f4:5c:44:8e:9c:df:21:
a3:c1:72:a0:1a:c6:c7:89:7c:48:20:d8:3a:a3:f5:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:99:5E:A5:D2:51:7D:48:F4:2E:8A:D5:2E:83:6B:C7:05:01:9E
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:a5:5e:4e:0a:2f:0f:a6:ea:1d:8c:4f:dc:3c:a8:ac:42:
78:84:17:03:37:d9:00:3c:6d:74:42:19:12:11:a2:36:65:9a:
d7:5b:cf:dc:e1:89:95:35:d6:37:19:97:62:c9:d8:ff:ba:29:
03:03:37:d5:62:52:7b:68:ef:d1:e3:97:e6:db:c8:4d:80:83:
d7:db:b7:16:94:1f:a0:69:c0:bd:2a:6d:82:7e:21:29:90:68:
ac:89:dd:6e:3d:a4:23:2a:53:09:64:5d:ff:36:52:9e:80:3a:
56:e0:d4:0e:83:fa:e9:92:33:0d:b2:25:7d:69:3f:10:f8:aa:
68:e4:cf:ad:59:fa:1b:1a:25:f2:3f:6e:01:0d:38:83:44:ab:
0f:2d:76:0a:34:98:7d:4f:1c:2a:09:1d:43:04:1e:65:20:92:
a7:e6:23:9d:a0:bf:d2:4b:d0:54:7c:c1:25:bb:0c:90:7a:b4:
d0:b0:28:68:74:ac:8d:e1:12:73:9f:c8:dc:5d:c4:83:39:4a:
3e:28:d1:34:17:9c:bf:c8:c7:7b:89:fc:83:f6:5c:b8:ff:65:
cc:8f:d6:b3:9e:13:89:3d:77:97:32:a3:67:1e:c0:e3:f4:e6:
df:db:de:84:3f:f4:d7:85:c0:ef:b9:c6:43:79:40:6a:27:6c:
a4:d7:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:16 2026 by rpki-client