
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: fi32c5Rrw1F5Lxi9FK3trhyCcmgf4kX4Lbcw+oAe5QE=
Subject key identifier: 46:4C:36:A0:45:55:97:BD:D2:83:CB:61:80:C4:2F:F1:1A:FE:14:A2
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019FAD52346F363EA145F858A819305027ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0A2A
Signing time: Wed 29 Jul 2026 10:01:13 +0000
Manifest this update: Wed 29 Jul 2026 10:01:13 +0000
Manifest next update: Thu 30 Jul 2026 10:01:13 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: M7iPJh/Wn6OjR6b/rS1wbxPLnTJ6xWj5UZPG5IW2UtE=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:34:6f:36:3e:a1:45:f8:58:a8:19:30:50:27:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jul 29 10:01:13 2026 GMT
Not After : Jul 30 10:01:13 2026 GMT
Subject: CN=464c36a0455597bdd283cb6180c42ff11afe14a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:33:68:6d:1a:5a:f5:5c:49:19:bb:0c:58:
19:c9:8e:23:c5:2b:9b:6e:1c:e0:c7:1e:e2:6c:dd:
c0:7a:9b:03:59:6b:b4:4f:25:d0:c3:b1:16:8a:71:
de:2f:ff:ab:88:fe:c4:db:2b:c5:63:6a:b9:0b:79:
c8:36:9e:d2:25:c7:69:ff:27:2e:4b:d5:e5:3c:80:
8b:f7:28:5b:2f:d6:11:0b:02:6d:b4:82:82:d3:63:
21:92:eb:4b:d9:d1:6a:89:d5:5a:1d:af:87:d7:5f:
9e:08:9f:87:f9:22:17:ab:37:0e:86:7e:cc:b3:03:
f1:76:7b:9d:f2:b8:99:de:4b:73:89:6e:67:74:b1:
64:d3:f9:cd:e5:fe:a3:06:8e:4d:1c:23:76:5f:e7:
be:8e:f4:d6:48:6d:9a:2e:a4:58:4f:40:16:d9:a6:
0c:82:cb:e8:ce:c3:cd:ed:f6:91:1d:e6:cb:40:12:
77:d7:91:27:21:18:be:0d:92:a5:26:ab:17:de:f4:
86:e3:bc:44:fb:68:22:50:0a:85:23:5a:a6:a6:7a:
2b:8e:08:a0:43:57:dc:25:8d:97:a5:3a:e5:88:27:
ff:fb:e4:63:fc:22:bb:40:0a:34:5e:09:43:8b:4a:
d2:d4:73:2a:41:26:8b:68:2f:a6:df:d8:92:bb:46:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:36:A0:45:55:97:BD:D2:83:CB:61:80:C4:2F:F1:1A:FE:14:A2
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:47:88:64:c4:af:cc:cb:c5:d9:e5:11:d2:ed:eb:aa:48:
df:71:88:c6:87:df:15:7b:a8:33:ef:7b:5a:21:eb:40:e2:10:
df:f6:a0:66:8a:7c:57:2e:88:7d:f5:b5:bb:2f:0c:89:da:22:
47:8e:d9:ef:b2:a0:af:d2:c2:07:e0:f7:f3:a2:e0:84:57:40:
72:b7:fc:43:90:5f:df:92:ce:df:fc:7e:9e:b1:e8:8f:d4:c9:
ba:7e:fc:98:be:9d:6a:55:f5:91:20:24:2a:80:dd:5d:dd:6d:
67:76:cd:5c:ee:7c:ac:1a:f9:89:01:c7:44:f1:2f:b1:99:5f:
a9:49:c7:f1:15:5b:f4:33:39:a9:d3:7f:81:4e:8a:28:93:57:
32:86:8f:6b:91:69:36:e1:6c:22:42:43:67:94:18:ae:02:64:
20:d5:82:03:8d:70:e1:8d:f3:a0:e5:e2:93:fa:ae:24:12:0f:
33:9b:fc:82:4b:4b:53:59:d2:c6:11:a4:28:4f:df:c5:21:3e:
87:11:58:60:83:2b:05:c0:4f:08:ea:33:5c:60:27:43:98:f1:
3c:97:77:c9:fe:b0:77:1e:ba:b1:eb:65:10:c5:d2:59:3e:b8:
ed:f7:52:50:f1:6a:76:3f:df:58:0f:d5:b8:c0:6f:41:0d:49:
50:a6:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:30 2026 by rpki-client