Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: 2RtkD0JJHmrOn49FqHN9p9zQlX2YdsCwzSDvw8mGcbo=
Subject key identifier: DF:7D:C2:7A:EC:61:4B:92:6F:A6:9F:C5:C3:99:7D:CE:35:15:C3:DA
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 019F91DAD40B5CFB6D30B5A18A14741A4D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0BC1
Signing time: Fri 24 Jul 2026 02:01:05 +0000
Manifest this update: Fri 24 Jul 2026 02:01:05 +0000
Manifest next update: Sat 25 Jul 2026 02:01:05 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: ck59Rx3wYJWSkIamHzRuPV9QbFzQ8RQd52Ew0N+vUJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d4:0b:5c:fb:6d:30:b5:a1:8a:14:74:1a:4d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 24 02:01:05 2026 GMT
Not After : Jul 25 02:01:05 2026 GMT
Subject: CN=df7dc27aec614b926fa69fc5c3997dce3515c3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:3f:62:c3:71:ee:6b:09:3e:bd:c0:42:29:
62:dd:73:be:ba:e0:cd:79:3f:16:39:cf:1f:f1:6c:
b0:fa:11:b3:31:f1:67:3c:be:09:29:8e:91:e0:6e:
f6:90:5d:9c:67:f5:ac:3c:62:73:f1:69:e5:59:14:
44:50:19:1f:28:3a:c4:bc:4e:bc:db:37:6e:8e:22:
5c:5f:ba:9c:9b:64:a5:d3:3d:44:c7:2a:f8:db:71:
8c:bd:91:a3:17:23:d3:4e:63:8d:54:7c:4d:66:90:
00:32:cc:ce:0e:fe:78:47:bb:34:e5:10:f6:ea:05:
5c:79:8a:b7:62:3b:7b:9e:61:29:68:ef:5e:be:6d:
57:85:20:47:e2:fe:2a:57:10:19:18:ff:1c:4b:ed:
70:7d:ef:e1:94:b5:cd:ee:a3:20:11:2d:4e:23:76:
0d:c3:90:33:05:36:b3:eb:b2:55:d3:3f:3b:8b:1e:
12:be:c2:5e:64:90:99:64:e0:28:ef:a4:59:53:97:
63:98:c9:ba:b1:8b:b2:ca:0b:43:fa:ee:26:86:bf:
57:f2:b5:19:c2:05:05:a1:7b:20:6a:e6:e8:9f:06:
55:22:16:dc:d2:29:5d:1e:17:d6:13:e8:ba:f9:fe:
19:44:ae:9b:60:f3:59:40:fa:29:50:9b:94:dd:55:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:C2:7A:EC:61:4B:92:6F:A6:9F:C5:C3:99:7D:CE:35:15:C3:DA
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:b2:95:c2:c1:1f:2b:60:b9:48:6c:e8:95:a9:36:f2:36:
2b:76:c9:57:96:5d:f8:b7:b2:9f:1a:f9:01:4e:41:c9:2e:c8:
7f:81:ed:97:eb:52:fd:38:f1:a1:e2:36:bb:c5:86:5d:af:62:
8a:ea:3f:bc:42:25:00:ff:90:af:68:35:e3:5e:1c:28:be:21:
6d:5b:fb:6b:4f:25:f5:36:8b:39:bc:37:3e:a3:9a:5c:2f:26:
c3:a1:97:61:76:99:ef:19:55:a9:cd:af:73:21:69:27:57:d2:
9e:5e:a2:59:86:36:c9:28:f1:35:1d:f1:a1:58:4b:19:ce:71:
f2:45:40:5a:bd:76:87:66:f5:b4:06:b7:a7:a3:b9:06:9e:e0:
8f:cb:93:77:b7:d0:80:d0:0c:32:9d:4e:05:f0:4d:11:c3:b3:
50:4a:0c:c8:19:6d:fa:7a:9e:73:ea:c0:01:c8:89:9b:82:e4:
f1:03:a8:95:dc:c0:c7:62:5a:fb:94:43:60:f5:ba:3d:80:0a:
be:c2:70:be:7d:4a:0f:41:0d:9f:e2:5a:2d:e2:51:39:d8:35:
7e:4c:0e:60:d0:c6:38:2f:69:61:b5:bc:74:72:cd:48:c3:bc:
b2:6a:ba:33:2f:e6:72:62:3a:0b:5b:cf:df:7c:ff:81:59:4d:
33:01:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:59 2026 by rpki-client