Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: /FYZMOi3cwn1ch9C8mx6pG7azzpDziirVZFXS+j7uP8=
Subject key identifier: 67:CE:38:E9:F6:08:5F:AA:7D:07:7A:1F:51:EE:19:94:B4:85:8D:E3
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019FAC07E32A65A77AB1B29BFC850DFA09F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 04:00:25 +0000
Manifest this update: Wed 29 Jul 2026 04:00:25 +0000
Manifest next update: Thu 30 Jul 2026 04:00:25 +0000
Files and hashes: 1: 5IRwRfh8Fym_BtVi99L5BSoQylk.roa (hash: zVO1DYlBvdQtHAVcl2WpceQxT4SVa8kf2zP0TMDOH1A=)
2: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: HnBoNgpKV2jzMZMIV+0sr3ehGq7J3WINVpDy1I5Ea1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:e3:2a:65:a7:7a:b1:b2:9b:fc:85:0d:fa:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jul 29 04:00:25 2026 GMT
Not After : Jul 30 04:00:25 2026 GMT
Subject: CN=67ce38e9f6085faa7d077a1f51ee1994b4858de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:fd:5a:d7:a8:5a:dd:c5:93:cf:7f:d5:cc:
4d:29:d8:1c:f9:a8:61:a4:f3:59:c7:dc:1b:3d:4a:
52:98:6e:bb:8f:5f:d6:7c:e7:6c:0a:96:86:38:6e:
28:43:c1:4f:75:a9:33:1b:fb:c7:0f:fe:56:5b:b4:
1e:1e:38:c4:64:f8:49:41:3a:94:c3:4d:3a:ab:5a:
3e:7f:39:b8:16:f6:49:9b:a3:35:ad:87:56:b8:94:
d0:12:7d:ca:9a:c6:08:8c:fe:cc:59:95:9a:58:d2:
eb:58:ab:a7:b6:43:a6:61:29:23:7d:94:02:f9:4d:
62:90:c2:9f:49:74:ab:0c:bc:9a:5a:fd:50:7b:b4:
55:8c:3b:59:05:16:b5:82:35:d5:d1:b2:58:0a:f3:
81:b4:1a:a1:2d:0c:92:00:ec:c3:d8:58:fd:aa:1b:
67:ec:d2:c6:9e:33:aa:dc:4a:91:28:23:79:1a:4f:
a9:31:e1:aa:7e:77:65:42:31:73:76:ac:6d:f7:5e:
71:22:9b:7e:07:ae:03:bf:65:7d:7d:0d:0c:c3:db:
f5:04:1b:2f:92:e0:73:c0:04:a7:c3:ad:03:c0:ee:
6e:c5:e6:98:37:4b:76:47:d8:0f:e4:65:ad:1d:64:
a4:72:0f:4f:14:ed:9f:26:ec:e6:05:c6:07:25:0c:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CE:38:E9:F6:08:5F:AA:7D:07:7A:1F:51:EE:19:94:B4:85:8D:E3
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:71:1c:b5:e9:75:35:9b:10:91:0d:fc:83:69:9c:c6:52:
64:d9:7e:34:a1:53:59:77:16:27:e1:4a:8a:b7:66:72:c1:7c:
04:c4:4f:a8:5a:0c:57:83:91:7b:7c:d0:af:25:de:2b:0b:84:
d2:50:ed:cb:0f:0f:19:c3:3e:f8:3c:bb:a1:3f:b6:fc:a2:c6:
25:d6:d6:94:7f:11:06:39:3b:35:3a:91:d1:58:f9:6d:44:e5:
81:6c:6c:a7:4a:99:b0:5c:35:6a:31:c1:9c:67:c7:74:67:64:
8f:46:f4:ac:31:b6:db:2a:07:bd:67:a7:fe:05:6a:18:80:bf:
f4:98:38:56:7c:0d:9f:5c:95:44:aa:a9:ed:6e:62:95:db:b4:
c7:cb:e5:da:3d:75:30:d4:b4:64:a1:f3:b6:a1:7b:ef:07:a8:
e0:90:e5:29:b3:6e:97:fa:b1:36:22:38:d9:91:87:66:80:02:
e9:8b:73:8d:ec:df:a6:37:98:fa:58:fa:c8:9c:5d:b0:44:3a:
f7:f1:35:29:14:8b:16:df:2f:85:29:ae:3c:81:78:14:ab:66:
0f:6c:56:2c:78:57:72:c5:42:16:b9:0b:21:0a:4a:7b:18:fb:
b3:4b:8f:87:98:74:fa:fd:12:5b:c2:53:27:17:c8:ee:a5:e9:
a4:7d:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:22:38 2026 by rpki-client