Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: aej2Rt3yKxSb2LteJEMCtdeccuUb41fOEuligiMDfyU=
Subject key identifier: 7C:D6:D0:BE:09:E2:07:5C:D9:CD:74:3D:F7:87:AF:3C:37:A1:79:AA
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 019EBE10A1C127C8D7E9E8817B73EC08A282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 01A5
Signing time: Fri 12 Jun 2026 23:00:21 +0000
Manifest this update: Fri 12 Jun 2026 23:00:21 +0000
Manifest next update: Sat 13 Jun 2026 23:00:21 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: xYCgaocKubF1scp8MJHb/YLE3rch0aeQ1L+HD18B35A=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:a1:c1:27:c8:d7:e9:e8:81:7b:73:ec:08:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Jun 12 23:00:21 2026 GMT
Not After : Jun 13 23:00:21 2026 GMT
Subject: CN=7cd6d0be09e2075cd9cd743df787af3c37a179aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:36:de:6e:9f:72:83:9a:0d:94:5d:c1:df:
96:33:a8:9a:af:bd:2a:2f:eb:cd:bf:a0:d3:1d:b9:
61:ff:c2:ad:0f:d9:6d:c7:71:02:1a:c5:fd:cf:d9:
56:6d:4b:02:38:06:65:c2:6d:81:83:22:f2:8d:cf:
4c:a6:c2:3e:e9:13:78:a6:62:65:ea:f4:ca:5a:28:
d2:09:33:43:e3:94:95:0f:95:e4:93:4b:73:62:46:
1d:17:60:aa:e8:66:b0:80:cc:b7:7f:38:fe:39:34:
d4:a6:5d:ea:90:f8:91:56:5d:31:bb:3e:2b:c3:f6:
73:84:23:59:dc:6e:aa:97:52:c7:e4:f1:65:ae:db:
ce:6b:b9:b8:8b:33:86:b9:bd:38:4c:70:c9:34:65:
17:6f:4a:dd:a4:1f:41:eb:cc:ac:f7:21:9e:03:3d:
f6:ef:34:f4:9c:25:c0:5f:f1:7f:af:74:69:69:cf:
29:e0:a5:8f:ca:bf:c1:be:64:c3:74:f7:38:0a:6c:
c3:99:88:ce:7f:8c:9b:be:9b:54:2d:e0:c2:65:be:
e6:e3:d0:80:c4:2a:74:c4:34:a7:4a:e0:45:03:c8:
08:94:51:f7:62:5b:fe:5e:38:b4:55:4e:3f:a2:ab:
70:c6:42:83:77:63:ee:fb:fa:6a:e2:77:d3:66:28:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:D0:BE:09:E2:07:5C:D9:CD:74:3D:F7:87:AF:3C:37:A1:79:AA
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:05:8c:1e:a3:da:8f:87:3e:95:74:62:2e:3c:5d:33:90:
a6:88:93:b5:3c:2b:0a:f5:96:8a:b6:6b:75:b3:a3:19:d8:f2:
c7:43:b9:6b:31:a9:5d:3c:4c:e7:ff:c6:3d:eb:e2:6d:a7:d9:
f5:db:47:a9:38:eb:4f:c7:45:a6:3f:e9:60:da:cc:03:7c:07:
7d:8a:85:ca:50:fb:35:8e:96:36:e1:07:d3:4e:5b:18:e9:ff:
99:1f:54:27:fa:29:8f:d2:1e:a9:1b:32:21:59:51:0f:b8:6b:
82:20:5b:71:c9:72:cc:ee:cc:da:02:c9:37:d7:70:19:84:52:
a6:bf:ad:b7:b1:0c:b7:af:b8:c6:95:e2:83:6e:a7:d3:49:12:
db:37:59:10:d4:19:bf:15:bf:bc:ca:1d:03:31:bf:b6:9c:38:
e0:7d:2a:84:c4:f6:87:10:a4:df:19:5e:88:50:6f:0b:f1:24:
aa:07:b8:16:f2:9f:04:71:e2:48:80:08:50:70:6a:0d:7f:62:
2d:0d:7a:dc:39:c2:2a:bb:51:fe:39:15:91:82:54:8a:36:15:
62:62:bf:97:8f:41:fa:fa:6b:99:07:63:7a:e7:09:0c:a2:18:
17:da:ec:ff:01:af:95:89:7e:6b:99:ea:3b:a0:26:ff:31:37:
4b:38:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:09 2026 by rpki-client