Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: a3y8My2LqDy5CWdlV0yYNcnEdZpyGBO195c6E71ctYQ=
Subject key identifier: 21:76:49:D8:BA:76:0F:79:E1:01:15:8D:B6:2F:04:EB:16:98:36:B7
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019FAB640234FF727A16E60C1AAA030F0F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0E8A
Signing time: Wed 29 Jul 2026 01:01:25 +0000
Manifest this update: Wed 29 Jul 2026 01:01:25 +0000
Manifest next update: Thu 30 Jul 2026 01:01:25 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: FKWsBIO2M7ezysWP908gK1rbkWvqbdfqs0/RzDTG1/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:02:34:ff:72:7a:16:e6:0c:1a:aa:03:0f:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jul 29 01:01:25 2026 GMT
Not After : Jul 30 01:01:25 2026 GMT
Subject: CN=217649d8ba760f79e101158db62f04eb169836b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:15:fb:ee:9a:96:3e:86:84:44:b6:4e:e8:
f8:17:f6:bc:f1:1d:5c:d3:40:ec:e6:d5:80:16:2c:
1f:66:90:8a:9a:49:33:1a:09:fe:4a:31:61:cb:69:
3e:4d:c3:dd:9c:c9:94:b8:19:03:98:9b:64:bf:16:
da:15:ab:54:bc:56:7f:81:19:4d:2d:01:83:ab:95:
66:cb:b5:fd:e6:98:9a:53:32:08:75:7d:eb:fe:42:
1d:ce:65:c0:2b:49:78:dc:7a:82:71:2a:23:3b:d7:
f8:4b:48:70:da:f4:cb:3f:74:d2:0e:60:60:ee:3e:
77:b8:70:e8:c4:ae:c7:3d:c6:d6:b2:25:78:46:56:
1c:9e:16:96:be:af:9e:cb:ad:5d:6d:24:ae:44:17:
26:b1:f2:4c:ec:8e:bf:6b:16:85:8a:55:82:c5:18:
a9:33:22:65:24:12:e0:61:4d:3d:64:7b:e8:1b:1e:
99:50:33:d7:e4:2a:12:58:fd:35:40:03:8e:84:00:
88:65:9b:54:0d:29:6c:84:d0:5c:ac:e3:43:fa:57:
dc:9e:2a:f1:80:33:dc:08:16:80:20:62:0d:5d:7f:
8f:af:ae:61:0f:da:06:22:22:d7:b2:88:45:b9:73:
d4:95:3d:14:ec:50:86:7c:f1:9c:ce:37:be:50:77:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:49:D8:BA:76:0F:79:E1:01:15:8D:B6:2F:04:EB:16:98:36:B7
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:10:22:4c:85:0d:17:17:c9:6b:8f:bb:40:3b:28:ec:b2:df:
99:97:69:b1:6d:52:61:20:ff:ca:ec:b5:bd:d3:44:20:15:33:
12:cb:4b:db:90:bf:38:78:1c:03:5b:49:28:8b:1d:29:2e:47:
11:39:80:7a:d8:6c:9b:21:8b:b6:07:a1:e7:7e:2e:b1:e0:aa:
fb:3a:4b:40:67:b2:87:98:5b:8c:d0:48:e7:07:e3:e4:cd:a1:
f4:5d:ca:c1:7f:e0:6a:43:c7:02:82:10:1c:de:25:ab:ec:4c:
2c:9f:6e:89:0d:03:8a:4c:fa:3e:48:f5:c4:67:f1:3e:be:23:
72:fb:0d:c9:41:79:ca:27:59:bc:0d:28:97:28:b3:ab:c2:cd:
92:b3:9d:68:53:b9:84:94:67:8b:ea:b0:5e:90:64:5c:5d:8a:
7b:df:f1:12:a8:f0:a1:b9:f8:b4:f2:de:9d:4f:b1:c1:56:5e:
1f:dc:19:81:e8:8f:bc:0f:9e:04:ee:69:d7:a9:0f:03:b5:5e:
1e:6f:ae:cb:c7:d1:a1:0a:60:a2:a8:07:d8:f3:e6:80:9a:23:
54:26:d2:49:cb:ff:33:10:4b:fa:2e:7c:9a:9f:12:71:f5:73:
27:6b:56:f7:45:74:b1:0e:9b:d9:e2:e4:d4:f7:75:45:b1:70:
83:33:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:30 2026 by rpki-client