Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: wmkcGnlfU8buPieVY+OEGdSSkTIt7yfzC3mojXKJ558=
Subject key identifier: 4A:51:C2:CC:0D:01:1F:1F:74:64:F2:BB:04:45:B3:AF:6F:55:12:36
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 019F927FDB35604C2CB06D1D531887B349E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 03CB
Signing time: Fri 24 Jul 2026 05:01:20 +0000
Manifest this update: Fri 24 Jul 2026 05:01:20 +0000
Manifest next update: Sat 25 Jul 2026 05:01:20 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: McEz/CyeGcKI7N30+7ArkuRdhAAx6lXr7RcP5qoWwN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:db:35:60:4c:2c:b0:6d:1d:53:18:87:b3:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Jul 24 05:01:20 2026 GMT
Not After : Jul 25 05:01:20 2026 GMT
Subject: CN=4a51c2cc0d011f1f7464f2bb0445b3af6f551236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:cb:f4:be:68:3a:b6:5e:a5:a0:38:fd:a6:
1e:f5:60:d8:26:3d:0e:e8:d7:69:74:27:e7:31:5f:
5c:ba:43:25:49:e8:39:d6:12:69:fc:f4:7a:8c:da:
cc:7d:44:25:0a:25:5b:5c:ed:26:23:a8:28:1e:1f:
90:ba:c9:20:5d:4b:78:ae:09:7a:13:52:67:8f:51:
15:1c:e2:77:98:bd:85:dd:f7:26:11:d7:c2:8e:04:
5c:cf:4e:74:d7:90:82:8c:a7:fc:2a:1e:ff:88:2e:
83:5d:7e:95:e8:36:7b:b6:36:0a:00:fe:be:00:53:
c5:6b:13:85:0e:8d:52:8c:18:bc:18:b8:c1:25:a7:
1c:a0:bf:b2:ed:93:c0:31:29:6b:a3:2f:32:7f:22:
8d:0a:ee:3f:e0:a5:06:02:dd:42:cf:2f:5d:0c:27:
03:9f:5b:d7:db:49:5e:5b:99:02:9a:0e:01:51:4c:
91:48:b2:08:ce:10:c8:15:9c:c0:69:10:a5:39:d2:
0e:9b:e6:df:34:fa:16:17:db:92:e8:1c:6f:ff:ef:
ca:24:d3:77:03:70:dd:9a:d9:04:52:20:a6:23:a9:
87:60:81:a0:e9:9e:5b:5e:ab:dc:40:04:70:09:2d:
95:03:99:68:03:d0:4a:6f:94:5d:b3:ab:4d:2f:cc:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:C2:CC:0D:01:1F:1F:74:64:F2:BB:04:45:B3:AF:6F:55:12:36
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:61:0d:e2:64:6b:2a:ec:63:32:65:b6:d2:d0:9c:5f:78:
2c:07:97:4b:68:b0:61:83:6e:07:47:f9:4e:d6:f2:39:39:4b:
b6:3d:56:43:55:59:d0:50:03:db:f7:94:7b:3e:50:11:2c:df:
2f:9c:e5:03:fd:df:a4:b4:c8:be:3c:82:95:0b:11:3f:10:0c:
0b:e4:23:bc:4e:6f:6f:3b:27:54:73:47:bc:94:dc:9a:92:bf:
2d:18:44:2d:e9:6f:06:53:69:54:4c:fd:45:26:b0:48:38:ec:
39:d1:b7:00:03:f9:a5:a2:a7:68:3c:99:c5:57:04:13:99:51:
3c:62:7f:21:cc:b9:79:69:33:81:cc:d2:0b:9c:ca:02:3f:60:
11:41:73:51:96:c5:3b:c9:f6:e7:6d:59:6a:85:ac:76:50:d6:
65:87:34:85:0b:b3:0d:e9:19:15:61:37:7b:a6:f5:8a:c4:ba:
e2:de:83:fc:c6:51:ea:cc:d4:62:be:e0:9b:a8:dc:8a:b3:09:
7a:af:3c:8e:17:d4:ba:be:f2:07:7c:e5:f1:b5:d7:32:68:d9:
da:fc:9f:58:28:4f:b5:65:7b:a4:60:06:4e:da:ad:9d:99:16:
24:7a:d5:76:21:04:da:a6:7f:5e:bc:c1:f3:b6:b9:44:8f:0e:
a7:75:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:04:57 2026 by rpki-client