Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: DD9dZyIV3F2nCUePv7gHfTZgMwXr67ftVxmAmHKakM4=
Subject key identifier: 71:DB:8C:E8:95:3A:20:C6:49:20:78:B0:20:F5:0A:A0:E8:05:B6:B5
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019FA7873C9E751B6E71DE9AD8DF0613E447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0C42
Signing time: Tue 28 Jul 2026 07:01:25 +0000
Manifest this update: Tue 28 Jul 2026 07:01:25 +0000
Manifest next update: Wed 29 Jul 2026 07:01:25 +0000
Files and hashes: 1: TT7AxVwRgLIDSeadKvoi71E8vK0.asa (hash: o3OsuB0V5ph9dQ1ef1EOSm9Ca3120WnHHtR+xfhJuI4=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: 4hEwHP2TU3QsV2bVc7IilFlh+JJh8hRMQOoKL5HXS7A=)
3: vkkRAkl-IwQNmrBge38zIHM1u4s.roa (hash: ww7yIGrhLBt5cEWEEdI9G55jx6vHqfpMgzLOawUYyek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:3c:9e:75:1b:6e:71:de:9a:d8:df:06:13:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jul 28 07:01:25 2026 GMT
Not After : Jul 29 07:01:25 2026 GMT
Subject: CN=71db8ce8953a20c6492078b020f50aa0e805b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:99:12:48:68:69:cf:8b:8f:fa:b1:8a:10:
b5:57:16:14:6f:3c:4c:05:28:ac:a8:64:45:19:97:
7b:24:7c:6a:30:44:13:b6:f6:56:2f:9c:67:f9:49:
6a:f6:47:19:60:da:a1:60:83:61:c1:b2:55:e7:71:
8e:ac:25:13:23:5c:c5:48:e5:57:6c:da:56:be:ce:
e1:8e:73:61:2f:fe:e0:7b:3f:a5:d4:36:a1:64:9c:
86:07:cf:b8:0e:be:ac:31:59:15:ba:5d:06:6a:fb:
2c:41:e1:2c:35:31:2a:df:3a:db:c8:3d:0f:ba:5d:
93:70:c6:cc:40:27:30:8b:83:d9:8e:50:12:42:f0:
3f:87:20:aa:ad:78:ad:80:82:ea:1a:73:43:08:f1:
f6:ae:f8:28:ce:90:c7:f0:f4:b8:dd:84:e0:00:ff:
10:32:50:57:c1:73:b8:18:2a:00:9d:ea:82:b5:ed:
d4:21:5c:33:74:dd:56:94:08:a3:a1:2c:a5:cb:38:
cf:6a:a0:3a:e7:4b:45:0f:bc:65:0c:d4:24:74:3f:
17:1c:c8:56:69:49:d1:22:21:c4:2b:6a:e7:b7:6f:
96:97:ac:90:ca:b3:e5:6a:cb:24:d8:25:1b:b2:0d:
46:f1:f3:f8:23:8b:97:82:c7:51:8d:4c:4f:35:56:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:8C:E8:95:3A:20:C6:49:20:78:B0:20:F5:0A:A0:E8:05:B6:B5
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0b:27:59:93:46:11:97:f4:4b:d8:ca:3f:3f:89:bc:79:4f:
c6:5a:4b:28:a1:7a:24:f7:d6:ed:93:50:e6:b3:20:9c:95:c6:
57:f7:12:8e:a4:77:ce:ea:b5:c8:73:a9:2f:3b:af:0a:58:e4:
76:54:00:9d:60:a4:cf:41:c1:c7:ec:47:e5:dd:97:a7:e5:66:
ca:db:f7:2d:87:97:21:7e:bf:05:ba:e5:5e:9c:ba:b8:b9:3e:
4c:bb:db:2e:cf:16:ac:32:1f:f7:94:15:af:6a:62:c2:18:0b:
c7:8c:07:a8:46:ac:92:7a:d9:ec:9f:1e:37:e2:86:8d:d6:91:
51:7a:48:ee:14:47:0b:b5:3a:22:50:5e:1d:4a:b1:da:f8:67:
ba:7e:d2:48:f7:f4:89:8e:4c:d9:67:24:f5:09:9c:34:fe:0c:
e4:21:d5:36:55:ec:a3:be:14:3a:d0:79:ea:23:f8:70:25:f2:
44:7d:68:86:5a:c1:11:00:b2:de:06:03:b6:b0:82:1f:31:50:
b7:1c:59:80:9d:8b:da:09:43:78:d8:ba:84:76:73:09:c5:63:
d5:2d:b9:6d:74:47:d7:82:66:ac:99:1a:ae:e9:61:06:e0:21:
67:bd:fc:22:a3:f8:73:f2:8b:b5:74:7d:10:b6:51:27:8c:27:
7f:76:0f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:44 2026 by rpki-client