Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: 5Sw3oyM7khsBpCyGkLNPaZXfJz3786FDn+h7MxtByCc=
Subject key identifier: 93:07:E4:BC:93:EB:F9:DF:8D:F6:C0:51:13:32:E3:F4:A9:73:B2:AC
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 019FAABE3C0CDACEB8103C19E6DF88C705BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:21 +0000
Manifest this update: Tue 28 Jul 2026 22:00:21 +0000
Manifest next update: Wed 29 Jul 2026 22:00:21 +0000
Files and hashes: 1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: RVlu6IdFDqKOmV+DKveldZWlMt5ZMF2mB97S88QGUaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3c:0c:da:ce:b8:10:3c:19:e6:df:88:c7:05:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Jul 28 22:00:21 2026 GMT
Not After : Jul 29 22:00:21 2026 GMT
Subject: CN=9307e4bc93ebf9df8df6c0511332e3f4a973b2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:48:cb:55:70:66:bb:ab:79:0d:76:89:d2:
db:dd:21:69:da:44:4f:9a:60:c6:8f:68:6a:f3:0b:
b4:ef:2a:f4:a0:89:19:53:f9:6b:ba:2d:6d:d3:91:
19:13:9c:f8:c4:a6:6e:28:7b:0a:1c:3d:b6:92:0c:
ba:38:93:14:99:af:da:e4:84:c5:10:3e:8f:44:e0:
ad:92:bd:18:5e:17:93:5a:5a:f9:eb:31:f6:bd:79:
d7:42:41:dd:54:5b:12:88:a9:f0:6d:a7:62:64:7c:
1e:6e:19:2b:e2:c6:f0:ce:20:36:f1:09:ba:25:9b:
6d:28:82:29:f0:af:44:54:ec:a6:5e:10:d5:d0:e8:
41:88:db:52:de:14:b5:67:17:b8:6d:97:a0:8d:ec:
d3:ae:0e:13:29:57:f4:8a:f8:2e:b6:be:25:d0:79:
74:87:b2:be:06:0f:00:98:20:9e:fd:a1:d1:a8:cd:
23:fc:ad:30:09:60:9d:04:1c:6c:63:3f:28:8f:cb:
1e:11:f4:09:62:04:ff:db:b8:74:d0:fa:57:57:20:
01:91:85:8b:aa:4a:10:c4:4c:2c:33:71:b5:f4:9a:
87:ff:09:55:6d:92:20:95:0a:91:d3:d8:04:92:6a:
e5:10:2e:cb:5a:80:09:b6:97:3f:ec:36:a6:08:1d:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:E4:BC:93:EB:F9:DF:8D:F6:C0:51:13:32:E3:F4:A9:73:B2:AC
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:e4:16:19:38:04:88:b1:14:4d:9e:26:19:eb:ec:9b:ab:
ed:53:1c:7f:16:7b:5c:a3:15:f2:25:94:24:32:83:e6:08:4d:
d5:a6:2b:99:89:0b:f5:f4:06:47:c6:ab:64:b1:61:a2:64:f7:
52:f4:96:00:14:77:89:96:50:e5:e7:20:77:e7:db:eb:da:be:
24:45:20:18:8e:c8:96:51:56:92:22:89:65:97:b0:26:b9:cd:
e4:a9:1b:c2:dd:74:a0:31:fb:a8:8f:cc:33:e5:a3:8a:7e:cf:
9b:e9:2d:84:a0:7b:ca:4f:05:88:50:e9:a7:62:e0:cf:4f:7a:
ea:f8:a1:8e:da:ee:2d:df:fc:93:c1:9a:76:89:91:31:ca:ac:
4d:eb:51:25:6e:86:6f:e4:e8:51:94:99:13:19:eb:4f:e3:71:
8f:ec:56:86:86:0d:ca:d6:8b:5d:6d:59:76:bb:6b:2c:ad:45:
ef:6b:e5:67:bb:72:92:cd:58:1e:5b:55:56:40:2a:39:5a:a0:
4c:a4:42:34:e8:a5:b9:76:14:a1:db:43:7d:b9:9b:b2:8a:d5:
c7:a9:7a:dd:a7:b9:22:c0:2d:c3:a3:65:6c:f2:7b:08:55:e5:
6e:61:1e:37:00:45:1a:9c:71:d0:c8:9d:84:f6:00:99:00:1a:
06:bc:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:41 2026 by rpki-client