Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: knw+/dEzShDE2huyUnF5zP1sikL6aBJQlYy+oW/c9MI=
Subject key identifier: D5:6D:86:43:E3:83:77:DB:34:0F:C3:C1:38:9A:83:59:B8:E1:68:5E
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019FAC3F13DE2FD09B854F5C9125CA3E864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 195D
Signing time: Wed 29 Jul 2026 05:00:42 +0000
Manifest this update: Wed 29 Jul 2026 05:00:42 +0000
Manifest next update: Thu 30 Jul 2026 05:00:42 +0000
Files and hashes: 1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: +/dOeUdQ9p6nYLjD98MtEte7CR9e1ZLmFV8K5yYNUms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:13:de:2f:d0:9b:85:4f:5c:91:25:ca:3e:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Jul 29 05:00:42 2026 GMT
Not After : Jul 30 05:00:42 2026 GMT
Subject: CN=d56d8643e38377db340fc3c1389a8359b8e1685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:3e:ae:a1:1a:46:13:ca:5f:9f:cb:cc:aa:
91:dc:70:6e:51:fd:cc:7d:6f:20:0b:5c:14:b3:0e:
cb:6f:a3:7e:00:9d:ee:46:c4:55:1f:12:53:49:c1:
78:45:b7:61:27:ee:f9:18:3c:e8:e4:2c:ff:77:07:
cb:9a:c1:94:eb:3d:0e:49:43:c3:75:0b:12:98:86:
64:65:16:25:98:1d:ae:b3:ee:8d:52:8f:ac:9f:9e:
64:88:d0:ea:8a:cb:93:dd:86:d8:7b:55:37:95:3e:
54:0f:19:05:84:e6:f4:e3:f6:6c:ee:09:ab:42:ed:
d5:c2:08:b9:d6:96:45:62:71:38:d4:da:ed:2e:21:
d1:a7:f8:2b:af:f4:3a:07:fd:44:85:b8:54:ff:54:
26:e6:bb:b7:cf:df:4f:2a:39:88:c7:70:f8:b8:54:
74:00:1a:c4:e9:10:30:e0:7c:c5:8b:43:e6:19:64:
9b:ef:fc:a9:27:a7:c8:ae:5e:e2:c2:71:66:b1:61:
37:c1:6e:ce:ce:8b:95:8e:3b:39:c8:2b:ba:a5:12:
21:5d:70:cd:af:a5:a6:3a:b6:59:f8:20:1b:63:65:
30:a3:8c:08:59:79:c1:b5:32:e5:c8:70:b1:21:f6:
ef:4a:c9:6e:d5:9a:d9:30:f4:49:11:45:f4:41:5e:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:86:43:E3:83:77:DB:34:0F:C3:C1:38:9A:83:59:B8:E1:68:5E
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:42:75:75:28:7f:f7:32:4c:d3:6c:56:50:38:a8:e3:27:
d7:d0:4e:14:74:00:6f:c8:24:65:36:5e:57:4e:87:db:48:84:
77:7f:27:0a:f4:90:84:44:8b:ab:29:aa:1d:bc:86:c2:ce:ee:
a5:2b:19:b2:1b:0f:14:ae:cc:2d:79:81:29:fe:be:e8:10:38:
8c:51:a4:9c:cd:65:df:b6:25:50:05:77:f2:89:00:74:ea:a2:
14:30:c6:cc:93:8f:73:69:08:dc:5f:f0:3b:ac:3c:32:d0:90:
19:2b:4c:25:f6:4f:77:b8:0e:69:92:fc:ea:8d:49:ee:52:0d:
33:75:90:81:58:3b:57:5c:a2:c3:a3:7a:21:65:ee:bd:be:51:
49:11:3d:13:92:0a:26:a1:7c:c9:27:cb:f5:44:72:e8:c1:37:
2a:3f:5c:d4:92:77:85:12:bd:0c:50:21:6c:04:b4:ac:88:13:
63:ce:26:d7:9c:fb:f0:e8:d1:67:14:3a:f2:01:a4:06:40:70:
9c:ed:7b:91:61:23:ac:4e:45:bd:91:e4:fa:05:d9:01:95:de:
05:00:18:80:cd:a6:c6:98:82:34:04:e8:68:10:22:26:95:97:
8a:a7:61:51:9e:27:ea:5c:4a:6e:80:a2:29:34:1e:bd:1d:4e:
c9:bb:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:30 2026 by rpki-client